A security team notices that a new phishing campaign is highly personalized. Each email references the recipient's recent purchases, uses their preferred language, and avoids common spelling errors. The emails are sent in waves, with slight variations to evade filters. Which of the following best describes this attack?

A worm that spreads through email contacts

A watering hole attack that compromises a trusted website

AI-powered phishing that automates personalization and variation

A pretexting attack that establishes a false identity

A security team is concerned about deepfake videos being used to impersonate executives in video calls. Which of the following is the most effective way to mitigate this risk?

Using a signature-based antivirus to detect deepfakes

Training employees to spot deepfakes

Blocking all video conferencing tools

Implementing multi-factor authentication and verification procedures for sensitive requests

Palo Alto NetworksCertified Cybersecurity Apprentice

Domain 1Objective 3

1.3 Identify and Describe Common Attack Types (e.g., Malware, Insider Threat, Command and Control [C2], Social Engineering, AI-powered) CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Part of the Cybersecurity domain, which accounts for 16% of the CYBERSECURITY-APPRENTICE exam.

27questions here

6free pages

5concepts

16%of the exam

Questions 1–5

1application · medium
A security team notices that a new phishing campaign is highly personalized. Each email references the recipient's recent purchases, uses their preferred language, and avoids common spelling errors. The emails are sent in waves, with slight variations to evade filters. Which of the following best describes this attack?
Select an answer first
2application · medium
A security team is concerned about deepfake videos being used to impersonate executives in video calls. Which of the following is the most effective way to mitigate this risk?
Select an answer first
3foundation · easy
A disgruntled system administrator deliberately deletes critical backups and exfiltrates proprietary data before leaving the company. Which type of insider threat is this?
Select an answer first
4application · easy
A user downloads a file from a peer-to-peer network. When executed, the file encrypts the user's documents and displays a message demanding payment in cryptocurrency to restore access. Which type of malware is this?
Select an answer first
5application · easy
An attacker leaves a USB drive in the company parking lot. An employee finds it and plugs it into their workstation out of curiosity. The USB drive contains malware that installs a backdoor. Which social engineering technique is being used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-APPRENTICE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-APPRENTICE” is a trademark of its owner, used for identification only.

1.3 Identify and Describe Common Attack Types (e.g., Malware, Insider Threat, Command and Control [C2], Social Engineering, AI-powered) CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

A security team is concerned about deepfake videos being used to impersonate executives in video calls. Which of the following is the most effective way to mitigate this risk?

A disgruntled system administrator deliberately deletes critical backups and exfiltrates proprietary data before leaving the company. Which type of insider threat is this?

A user downloads a file from a peer-to-peer network. When executed, the file encrypts the user's documents and displays a message demanding payment in cryptocurrency to restore access. Which type of malware is this?

An attacker leaves a USB drive in the company parking lot. An employee finds it and plugs it into their workstation out of curiosity. The USB drive contains malware that installs a backdoor. Which social engineering technique is being used?

Keep studying — Cybersecurity