Define Common Terms Including Supply Chain Attack, Ransomware, Registry, Exfiltration, Social Engineering, DoS, DDoS, Bot and Botnet, C2, Zero Trust, Account Takeover, Email Compromise, Threat Actor, APT, Adversary. SPLK-5001 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary objective of a DoS attack?

   • ATo modify the target's data without detection.
   • BTo steal confidential data from the target.
   • CTo make a service or resource unavailable to legitimate users.
   • DTo gain unauthorized access to a system.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security architect is evaluating a third-party software vendor that provides a critical application used across the organization. The vendor has a strong security posture, but the architect is concerned about the risk of the vendor's software being compromised and used to attack the organization. The architect wants to implement a control that directly addresses the risk of a supply chain attack while minimizing operational overhead. Which approach best addresses this concern?

   • AImplement a zero trust model that verifies every access request and continuously validates the integrity of the vendor's application
   • BConduct a one-time security assessment of the vendor's software before deployment
   • CRequire the vendor to sign a contract stating they will not be compromised
   • DDisconnect the vendor's application from the network to prevent any external communication
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Why do attackers use command and control (C2) infrastructure?

   • ATo scan networks for open ports and vulnerabilities.
   • BTo remotely control compromised systems and exfiltrate data.
   • CTo encrypt the victim's data and demand a ransom.
   • DTo trick users into revealing their passwords.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security analyst observes that a website is being flooded with traffic from thousands of different IP addresses simultaneously. Further investigation reveals that many of these systems are compromised IoT devices that are being remotely controlled. Which two terms best describe this situation?

   • ADDoS and botnet
   • BExfiltration and supply chain
   • CAccount takeover and email compromise
   • DDoS and ransomware
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which statement best describes a supply chain attack?

   • AAn attacker encrypts a victim's data and demands payment for the decryption key.
   • BAn attacker directly targets an organization's employees through phishing emails to steal credentials.
   • CAn attacker compromises a trusted vendor or supplier to infiltrate the vendor's downstream customers.
   • DAn attacker floods a network with traffic to make a service unavailable to legitimate users.
   Reveal Solution Discussion Select an answer first