1.3 Identify and Describe Common Attack Types (e.g., Malware, Insider Threat, Command and Control [C2], Social Engineering, AI-powered) CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   An attacker sends a fraudulent email that appears to be from the company's IT department, asking the recipient to click a link and enter their password. Which social engineering technique is this?

   • APhishing
   • BTailgating
   • CBaiting
   • DPretexting
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A user downloads a file that appears to be a free PDF reader, but when opened, it installs a backdoor that allows remote access to the system. Which type of malware is this?

   • ARansomware
   • BSpyware
   • CWorm
   • DTrojan
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company suspects that a disgruntled employee is exfiltrating sensitive data. The employee has legitimate access to the data and works from home. The security team finds that the employee's workstation is communicating with a personal cloud storage service at odd hours. The employee claims they are backing up personal files. Which of the following is the most likely threat scenario?

   • AAn AI-powered attack that automates data theft
   • BAn unintentional insider threat due to a misconfigured backup
   • CA malicious insider threat using legitimate tools to exfiltrate data
   • DA command-and-control communication with an external server
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company's CFO receives a voicemail that sounds exactly like the CEO, urgently requesting a wire transfer to a new supplier. The CFO is suspicious because the request is unusual and the CEO is on vacation. The CFO calls the CEO's known number and confirms the request is fake. Which of the following best describes this attack?

   • AA phishing attack delivered via email
   • BA pretexting attack that establishes a false identity
   • CA vishing attack enhanced by AI-generated deepfake audio
   • DA baiting attack that offers a reward for the transfer
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How can AI be used to enhance phishing attacks?

   • ABy creating stronger encryption for legitimate communications
   • BBy physically breaking into secure facilities
   • CBy generating highly personalized and convincing phishing messages at scale
   • DBy automatically patching vulnerabilities on target systems
   Reveal Solution Discussion Select an answer first