An attacker has been sending emails to employees with links to a fake corporate login page. Several employees have entered their credentials. The attacker is now using those credentials to access internal systems and is attempting to move to other systems. Which attack type and technique best describe the full scope of this attack?

Social engineering and privilege escalation

Web-based attack and reconnaissance

Credential theft and data exfiltration

An attacker sends an email to a company's finance department with an attachment that, when opened, installs ransomware that encrypts files and displays a ransom note. Which attack type and technique best describe this incident?

Web-based attack with exploitation

Social engineering with credential theft

Insider threat with data exfiltration

SplunkCertified Cybersecurity Defense Analyst

Domain 2Objective 1

Recognize Common Types of Attacks and Attack Vectors. SPLK-5001 Practice Questions (Page 1)

Part of the Threat and Attack Types, Motivations, and Tactics domain, which accounts for 20% of the SPLK-5001 exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

4concepts

20%of the exam

Questions 1–5

1foundation · easy
An employee with legitimate access to the corporate network intentionally exfiltrates sensitive customer data to sell to a competitor. Which attack vector does this scenario describe?
Select an answer first
2foundation · easy
A cybercriminal deploys ransomware that encrypts a hospital's patient records and demands a cryptocurrency payment to restore access. Which motivation is most likely driving this attack?
Select an answer first
3expert · hard
An attacker has been sending emails to employees with links to a fake corporate login page. Several employees have entered their credentials. The attacker is now using those credentials to access internal systems and is attempting to move to other systems. Which attack type and technique best describe the full scope of this attack?
Select an answer first
4foundation · easy
An attacker exploits a vulnerability in a web application to inject malicious SQL code into a database query. Which attack type does this describe?
Select an answer first
5application · medium
An attacker sends an email to a company's finance department with an attachment that, when opened, installs ransomware that encrypts files and displays a ransom note. Which attack type and technique best describe this incident?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-5001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-5001” is a trademark of its owner, used for identification only.

Recognize Common Types of Attacks and Attack Vectors. SPLK-5001 Practice Questions (Page 1)

Questions 1–5

An employee with legitimate access to the corporate network intentionally exfiltrates sensitive customer data to sell to a competitor. Which attack vector does this scenario describe?

A cybercriminal deploys ransomware that encrypts a hospital's patient records and demands a cryptocurrency payment to restore access. Which motivation is most likely driving this attack?

An attacker exploits a vulnerability in a web application to inject malicious SQL code into a database query. Which attack type does this describe?

An attacker sends an email to a company's finance department with an attachment that, when opened, installs ransomware that encrypts files and displays a ransom note. Which attack type and technique best describe this incident?

Keep studying — Threat and Attack Types, Motivations, and Tactics