1.3 Identify and Describe Common Attack Types (e.g., Malware, Insider Threat, Command and Control [C2], Social Engineering, AI-powered) CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   An unauthorized person waits near a secure door and follows an employee through it without using their own badge. Which social engineering technique is this?

   • APhishing
   • BPretexting
   • CTailgating
   • DBaiting
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A network administrator notices that a workstation is sending large amounts of data to an external IP address at 3:00 AM. The workstation's owner, a long-time employee, claims they were asleep and have no knowledge of the activity. Later, malware is found on the workstation that communicates with a known command-and-control server. Which type of threat best describes this situation?

   • AAn unintentional insider threat, because the employee unknowingly installed the malware
   • BA malware infection with command-and-control communication, not an insider threat
   • CA social engineering attack, because the employee was tricked into revealing credentials
   • DA malicious insider threat, because the employee is lying about their activity
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst observes that a compromised laptop is sending encrypted messages to a domain that was registered yesterday. The domain has a very short TTL and is used only for these messages. Which of the following is the most likely purpose of this domain?

   • ATo distribute a ransomware payload to other systems
   • BTo act as a data storage server for stolen information
   • CTo serve as a command-and-control server for the compromised laptop
   • DTo host a phishing page that tricks users into revealing credentials
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security team discovers malware that changes its code structure each time it infects a new system, making signature-based detection ineffective. The malware also communicates with a C2 server to receive updates. Which of the following best describes this malware?

   • AA ransomware that encrypts files and demands payment
   • BA Trojan horse that disguises itself as legitimate software
   • CA worm that self-replicates across the network
   • DAI-powered adaptive malware that evades signature detection
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a deepfake in the context of AI-powered attacks?

   • AA type of malware that deletes files
   • BA phishing email that uses urgency
   • CA technique to bypass firewalls
   • DRealistic fake audio or video created using AI
   Reveal Solution Discussion Select an answer first