Define Common Terms Including Supply Chain Attack, Ransomware, Registry, Exfiltration, Social Engineering, DoS, DDoS, Bot and Botnet, C2, Zero Trust, Account Takeover, Email Compromise, Threat Actor, APT, Adversary. SPLK-5001 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is ransomware?

   • ASoftware that allows an attacker to remotely control a victim's system.
   • BSoftware that encrypts a victim's data and demands payment for decryption.
   • CSoftware that records a victim's keystrokes to steal credentials.
   • DSoftware that displays unwanted advertisements on a victim's system.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does ransomware typically impact a victim's data?

   • AIt modifies system settings to prevent the victim from logging in.
   • BIt copies the victim's data to an external server without altering the original.
   • CIt encrypts the victim's data, making it inaccessible without a decryption key.
   • DIt deletes all files on the system permanently.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security team is profiling a group that has been conducting targeted attacks against their organization for several months. The group is well-funded, uses sophisticated custom malware, and appears to have specific strategic goals. Which term best describes this group?

   • ABotnet
   • BRansomware
   • CRegistry
   • DAdvanced persistent threat (APT)
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst at a financial institution notices a large volume of customer data being transmitted from an internal database server to an IP address in a foreign country. The transfer is not associated with any legitimate business process. Which term best describes this unauthorized data transfer?

   • ADenial of service
   • BAccount takeover
   • CExfiltration
   • DSocial engineering
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is business email compromise (BEC)?

   • AAn attack that floods an email server with spam.
   • BAn attack that uses social engineering to trick users into revealing passwords.
   • CAn attack where an attacker gains control of a business email account to conduct fraud.
   • DAn attack that encrypts email servers and demands payment.
   Reveal Solution Discussion Select an answer first