Understanding the Attacker Mentality CT-SEC Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An attacker sends an email to an employee that appears to be from the IT helpdesk, stating that the employee's mailbox is over quota and they must click a link to 're-validate' their account. The link leads to a fake login page that captures the employee's credentials. Which human factor is the attacker primarily exploiting?

   • ANegligence
   • BGreed
   • CCuriosity
   • DAuthority and urgency
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A penetration tester is hired to assess a company's external perimeter. During the engagement, the tester spends significant time on LinkedIn and the company's career page, noting employee names, job titles, and technology mentions in job postings. The tester also reviews the company's DNS records and SSL certificate transparency logs. Which phase of the attacker's methodology is the tester primarily executing?

   • AReconnaissance
   • BWeaponization
   • CExploitation
   • DPost-exploitation
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the first step an attacker typically takes when planning an attack?

   • AReconnaissance
   • BExploitation
   • CCovering tracks
   • DMaintaining access
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security analyst is investigating a successful phishing attack. The email bypassed the email gateway and was delivered to a user's inbox. The user clicked a link and entered their credentials on a fake login page. The analyst discovers that the attacker used a newly registered domain that was very similar to the company's legitimate domain. Which control would have been most effective in preventing this specific attack?

   • ADeploying a more aggressive spam filter that quarantines all emails with links
   • BIncreasing the frequency of password changes for all users
   • CImplementing a web filter that blocks access to newly registered domains
   • DConducting a post-incident review to identify lessons learned
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   To mitigate the risk of phishing, which defensive approach is most effective?

   • ADisabling all email attachments
   • BCombining email filtering with user education
   • CUsing stronger passwords
   • DRelying solely on spam filters
   Reveal Solution Discussion Select an answer first