Define Common Terms Including Supply Chain Attack, Ransomware, Registry, Exfiltration, Social Engineering, DoS, DDoS, Bot and Botnet, C2, Zero Trust, Account Takeover, Email Compromise, Threat Actor, APT, Adversary. SPLK-5001 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company is implementing a security model where every access request, even from inside the corporate network, must be authenticated, authorized, and encrypted before being granted. The model assumes that no user or device is trusted by default. Which security concept is the company implementing?

   • ANetwork segmentation
   • BLeast privilege
   • CZero trust
   • DDefense in depth
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which characteristic is typical of an advanced persistent threat (APT)?

   • AA single, quick attack that is easily detected.
   • BUse of only publicly available tools.
   • CLong-term persistence within the target network.
   • DLack of a specific target.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A Windows administrator discovers that a malware sample has modified system settings to maintain persistence and disable security tools. The analyst needs to examine the hierarchical database where these configuration changes are stored. Which component should the analyst investigate?

   • ACommand and control server
   • BExfiltration endpoint
   • CWindows registry
   • DBotnet controller
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is a denial-of-service (DoS) attack?

   • AAn attack that disrupts service availability by overwhelming a target with traffic or resource exhaustion.
   • BAn attack that encrypts a target's data and demands payment.
   • CAn attack that uses social engineering to trick users into revealing credentials.
   • DAn attack that steals sensitive data from a target system.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is social engineering?

   • AThe use of malware to gain unauthorized access to a system.
   • BThe use of psychological manipulation to trick individuals into divulging information or performing actions.
   • CThe process of encrypting data to protect it from unauthorized access.
   • DThe use of automated tools to scan networks for vulnerabilities.
   Reveal Solution Discussion Select an answer first