Define Common Terms Including Supply Chain Attack, Ransomware, Registry, Exfiltration, Social Engineering, DoS, DDoS, Bot and Botnet, C2, Zero Trust, Account Takeover, Email Compromise, Threat Actor, APT, Adversary. SPLK-5001 Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A security team is defending against a DDoS attack that is overwhelming their public-facing web servers. The attack traffic is coming from a large botnet of compromised IoT devices. The team needs to mitigate the attack while minimizing impact on legitimate users. Which approach is most effective in this scenario?

   • ADisconnect the web servers from the internet until the attack stops
   • BIncrease the bandwidth of the web servers to absorb the attack traffic
   • CUse a DDoS mitigation service that can absorb and filter attack traffic based on traffic analysis
   • DBlock all traffic from the IP addresses of the compromised IoT devices
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is a botnet?

   • AA network of compromised systems (bots) that are under the control of an attacker.
   • BA type of malware that spreads through a network without user interaction.
   • CA single compromised system that is used to launch attacks.
   • DA security tool that monitors network traffic for malicious activity.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which of the following is an example of social engineering?

   • AAn attacker uses a brute-force tool to guess a user's password.
   • BAn attacker intercepts network traffic to steal credentials.
   • CAn attacker sends a phishing email that appears to be from the IT department, asking the recipient to reset their password.
   • DAn attacker exploits a vulnerability in a web server to gain access.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A financial institution has experienced a business email compromise (BEC) attack where an attacker gained access to a senior executive's email account and requested fraudulent wire transfers. The institution wants to implement controls to prevent future BEC attacks while minimizing disruption to legitimate business communications. Which combination of controls is most effective?

   • ADisable email access for all executives to prevent account compromise
   • BImplement multi-factor authentication (MFA) for email accounts and establish a verification process for wire transfer requests
   • CRely on email filtering to block all phishing emails
   • DTrain employees to recognize phishing emails and ignore any unusual requests
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which of the following is a common method used in account takeover attacks?

   • AOverwhelming the account server with traffic.
   • BEncrypting the victim's data and demanding a ransom.
   • CExploiting a vulnerability in the operating system.
   • DCredential stuffing using stolen username and password pairs.
   Reveal Solution Discussion Select an answer first