Define Common Terms Including Supply Chain Attack, Ransomware, Registry, Exfiltration, Social Engineering, DoS, DDoS, Bot and Botnet, C2, Zero Trust, Account Takeover, Email Compromise, Threat Actor, APT, Adversary. SPLK-5001 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   An organization has been under continuous attack for over a year. The attackers use highly customized tools, maintain persistent access to the network, and have exfiltrated sensitive data over a long period. The attack is well-resourced and appears to be state-sponsored. Which term best describes this campaign?

   • ABusiness email compromise (BEC)
   • BAdvanced persistent threat (APT)
   • CDenial of service (DoS)
   • DSupply chain attack
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is account takeover?

   • AAn attack that floods a network with traffic.
   • BAn attack where an unauthorized party gains access to a legitimate user's account.
   • CAn attack that uses social engineering to trick users into revealing information.
   • DAn attack that encrypts a user's files and demands payment.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the primary goal of an attacker in a supply chain attack?

   • ATo directly exploit a vulnerability in the target organization's web application.
   • BTo overwhelm the target's network with traffic from multiple compromised systems.
   • CTo compromise a trusted third party to gain access to that party's customers or partners.
   • DTo trick an employee into revealing their password through a fake login page.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company is transitioning to a zero trust model. The security team is evaluating how to handle access requests from employees working remotely. The team wants to ensure that every access request is verified, regardless of the user's location. Which control is most aligned with the zero trust principle?

   • ATrust remote employees more than on-premises employees because they are outside the network
   • BGrant full network access to remote employees after a one-time VPN authentication
   • COnly verify access requests from remote employees, not from on-premises employees
   • DRequire multi-factor authentication (MFA) and device posture checks for every access request, regardless of location
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which activity is an example of data exfiltration?

   • AA security analyst reviews logs for suspicious activity.
   • BA user deletes a file to free up disk space.
   • CAn attacker copies a database of customer records to an external server.
   • DAn administrator backs up a server to a company-approved cloud storage.
   Reveal Solution Discussion Select an answer first