A financial services company has seen a spike in employees receiving emails that appear to come from the CEO, urgently requesting wire transfers to a new vendor. The emails contain a link to a login page that mimics the company's email portal. Which attack vector and motivation best describe this activity?

Whaling with a hacktivism motivation

Spear phishing with an espionage motivation

Vishing with a disruption motivation

Phishing with a financial gain motivation

A user receives a phone call from someone claiming to be from IT support, asking for their password to 'verify account settings'. The user provides it, and the caller then uses it to access the corporate VPN. Which attack type and vector best describe this incident?

Insider threat via physical access

A user clicks a link in an email that takes them to a website that looks identical to their bank's login page. The user enters their credentials, which are then captured by the attacker. Which attack vector and type best describe this incident?

Insider threat and data exfiltration

SplunkCertified Cybersecurity Defense Analyst

Domain 2Objective 1

Recognize Common Types of Attacks and Attack Vectors. SPLK-5001 Practice Questions (Page 2)

Part of the Threat and Attack Types, Motivations, and Tactics domain, which accounts for 20% of the SPLK-5001 exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

4concepts

20%of the exam

Questions 6–10

6application · medium
A financial services company has seen a spike in employees receiving emails that appear to come from the CEO, urgently requesting wire transfers to a new vendor. The emails contain a link to a login page that mimics the company's email portal. Which attack vector and motivation best describe this activity?
Select an answer first
7application · medium
A user receives a phone call from someone claiming to be from IT support, asking for their password to 'verify account settings'. The user provides it, and the caller then uses it to access the corporate VPN. Which attack type and vector best describe this incident?
Select an answer first
8application · medium
A nation-state actor has been conducting long-term surveillance of a defense contractor, using spear phishing to deliver malware that captures keystrokes and screenshots. Which motivation best describes this activity?
Select an answer first
9application · medium
An attacker has compromised a low-privilege user account and is now attempting to access a domain admin account by exploiting a vulnerability in the authentication service. Which tactic and technique best describe this action?
Select an answer first
10application · medium
A user clicks a link in an email that takes them to a website that looks identical to their bank's login page. The user enters their credentials, which are then captured by the attacker. Which attack vector and type best describe this incident?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-5001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-5001” is a trademark of its owner, used for identification only.

Recognize Common Types of Attacks and Attack Vectors. SPLK-5001 Practice Questions (Page 2)

Questions 6–10

A user receives a phone call from someone claiming to be from IT support, asking for their password to 'verify account settings'. The user provides it, and the caller then uses it to access the corporate VPN. Which attack type and vector best describe this incident?

A nation-state actor has been conducting long-term surveillance of a defense contractor, using spear phishing to deliver malware that captures keystrokes and screenshots. Which motivation best describes this activity?

An attacker has compromised a low-privilege user account and is now attempting to access a domain admin account by exploiting a vulnerability in the authentication service. Which tactic and technique best describe this action?

A user clicks a link in an email that takes them to a website that looks identical to their bank's login page. The user enters their credentials, which are then captured by the attacker. Which attack vector and type best describe this incident?

Keep studying — Threat and Attack Types, Motivations, and Tactics