Define Common Terms Including Supply Chain Attack, Ransomware, Registry, Exfiltration, Social Engineering, DoS, DDoS, Bot and Botnet, C2, Zero Trust, Account Takeover, Email Compromise, Threat Actor, APT, Adversary. SPLK-5001 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A small business's website becomes unresponsive after a single attacker sends a massive flood of requests from one compromised machine. The attack is traced back to a single IP address. Which term best describes this attack?

   • ADenial of service (DoS)
   • BDistributed denial of service (DDoS)
   • CExfiltration attack
   • DBotnet attack
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   In cybersecurity, how is the term 'adversary' most commonly used?

   • AAs a term for a type of malware.
   • BAs a term for a security vulnerability.
   • CAs a synonym for threat actor.
   • DAs a term for a security control.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the Windows registry?

   • AA hierarchical database that stores system and application configuration settings.
   • BA log file that records all system events and errors.
   • CA directory structure that contains executable files for installed programs.
   • DA flat file that stores user passwords in plaintext.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which principle is central to the zero trust model?

   • ASecurity through obscurity.
   • BPerimeter defense is sufficient.
   • CTrust but verify.
   • DNever trust, always verify.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   An incident responder is handling a ransomware incident where files have been encrypted and a ransom note demands payment. During the investigation, the responder discovers that some sensitive files were exfiltrated before encryption. The organization's leadership is considering paying the ransom to recover data and prevent the release of the exfiltrated data. Which consideration is most important when advising leadership on this decision?

   • AThe organization should immediately pay the ransom to minimize downtime and prevent data release
   • BPaying the ransom does not guarantee that the attackers will provide a working decryption key or delete the exfiltrated data
   • CThe organization should negotiate with the attackers to reduce the ransom amount
   • DThe organization should ignore the exfiltration and focus only on restoring from backups
   Reveal Solution Discussion Select an answer first