Define Common Terms Including Supply Chain Attack, Ransomware, Registry, Exfiltration, Social Engineering, DoS, DDoS, Bot and Botnet, C2, Zero Trust, Account Takeover, Email Compromise, Threat Actor, APT, Adversary. SPLK-5001 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a threat actor?

   • AA vulnerability in a system that can be exploited.
   • BA security tool that monitors network traffic for threats.
   • CAny individual or group that poses a risk to an organization's security through malicious actions.
   • DA type of malware that spreads through a network.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a bot in the context of cybersecurity?

   • AA network of compromised systems used for coordinated attacks.
   • BA legitimate software program that automates tasks for users.
   • CA type of malware that encrypts files and demands payment.
   • DA compromised system that is under the remote control of an attacker.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following best describes the role of the Windows registry?

   • AIt manages user authentication and access control.
   • BIt stores configuration settings for the operating system and applications.
   • CIt provides a firewall to filter network traffic.
   • DIt compiles and executes application code.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An analyst at a hospital notices that patient records on several servers have been encrypted with a .locked extension, and a ransom note demands payment in cryptocurrency for the decryption key. The analyst also observes that some files were transferred to an external IP before encryption began. Which two attack characteristics are present in this scenario?

   • AExfiltration and social engineering
   • BBotnet and command and control
   • CRansomware and denial of service
   • DRansomware and exfiltration
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An analyst discovers that a group of compromised computers in the organization is receiving instructions from a remote server and participating in coordinated spam campaigns. Which term best describes the individual compromised computers?

   • ABots
   • BAdversaries
   • CThreat actors
   • DCommand and control servers
   Reveal Solution Discussion Select an answer first