Define Common Terms Including Supply Chain Attack, Ransomware, Registry, Exfiltration, Social Engineering, DoS, DDoS, Bot and Botnet, C2, Zero Trust, Account Takeover, Email Compromise, Threat Actor, APT, Adversary. SPLK-5001 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   During incident response, an analyst finds that compromised workstations are periodically sending beaconing traffic to a specific external server. The server sends back commands that the workstations execute. Which term best describes the external server's role?

   • AExfiltration endpoint
   • BCommand and control (C2) server
   • CRegistry hive
   • DBotnet member
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A finance employee receives an email from the CEO's account requesting an urgent wire transfer to a new vendor. The email address appears legitimate, but the request is unusual. Investigation reveals that the CEO's email account was compromised, and the attacker is using it to conduct fraud. Which term best describes this attack?

   • ARansomware
   • BBusiness email compromise (BEC)
   • CSupply chain attack
   • DDenial of service
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An attacker calls an employee at a company, pretends to be from the IT help desk, and asks the employee to verify their password to 'resolve a security issue.' The employee provides the password, and the attacker later uses it to access the employee's email account. Which two attack types are demonstrated in this scenario?

   • ADenial of service and botnet
   • BSupply chain attack and zero trust
   • CSocial engineering and account takeover
   • DRansomware and exfiltration
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   During a threat briefing, an analyst refers to a nation-state group that is actively targeting the organization's critical infrastructure. The analyst uses a term that is synonymous with 'threat actor' to describe this group. Which term is the analyst using?

   • ARegistry
   • BAdversary
   • CExfiltration
   • DBot
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is command and control (C2) in the context of cyberattacks?

   • AThe infrastructure and communication channel used by attackers to control compromised systems.
   • BA security framework that assumes no implicit trust.
   • CA type of malware that encrypts files and demands payment.
   • DThe process of encrypting data to protect it from unauthorized access.
   Reveal Solution Discussion Select an answer first