5

Question 1

Remapping a domain name to a rogue IP address is an example of what kind of exploit?

Answer 1

DNS poisoning

Question 2

URL redirection is a characteristic feature of:

Answer 2

Pharming

Question 3

Which of the following enables client-side URL redirection?

Answer 3

Hosts

Question 4

Which of the following factors has the biggest impact on domain reputation?

Answer 4

Distribution of spam

Question 5

As opposed to the simple Denial of Service (DoS) attacks that usually are performed from a single system, a Distributed Denial of Service (DDoS) attack uses multiple compromised computer systems to perform the attack against its target. The intermediary systems that are used as platform for the attack are the secondary victims of the DDoS attack; they are often referred to as zombies, and collectively as a botnet.

Answer 5

True

Question 6

What is the most common form of a DDoS attack?

Answer 6

Network-based

Question 7

Which type of DDoS attack targets industrial equipment and infrastructure?

Answer 7

** OT **

Operational technology (OT) is the hardware and software that monitors and controls devices, processes, and infrastructure, and is used in industrial settings

Question 8

Which of the following answers lists the filename extension of a Microsoft PowerShell script file?

Answer 8

.ps1

Question 9

Which of the following answers refers to a filename extension used in a cross-platform, general-purpose programming language?

Answer 9

.py

Question 10

Which of the following answers refers to a script file type designed to be run in Unix command line?

Answer 10

sh

Question 11

Which of the following enables running macros in Microsoft Office applications?

Answer 11

VBA

Question 12

Files with this filename extension are used in a scripting language based on the Microsoft’s Visual Basic programming language

Answer 12

vbs

Question 13

Which statements best describe the attributes of an APT? (Select 3 answers)

Answer 13

• High level of technical sophistication
• Extensive amount of resources/funding
• Typically funded by governments/nation states

Question 14

Which term best describes a disgruntled employee abusing legitimate access to company’s internal resources?

Answer 14

Insider threat

Question 15

Which of the following statements does not match a typical description of nation states or state-funded groups identified as threat actors?

Answer 15

Typically classified as an internal threat

Question 16

A person who breaks into a computer network or system for a politically or socially motivated purpose is usually described as a(n):

Answer 16

Hacktivist

Question 17

Which statements best describe the attributes of a script kiddie? (Select 2 answers)

Answer 17

• Low level of technical sophistication
• Lack of extensive resources/funding

Question 18

Which of the following terms best describes threat actors whose sole intent behind breaking into a computer system or network is monetary gain?

Answer 18

Criminal syndicates

Question 19

Which of the following terms fall into the category of authorized hacking activities? (Select 2 answers)

Answer 19

• White hat
• Blue hat

Question 20

Which of the following terms falls into the category of unauthorized hacking activities?

Answer 20

Black hat

Question 21

Which of the following terms falls into the category of semi-authorized hacking activities?

Answer 21

Gray hat

Question 22

In IT security, the term “Shadow IT” is used to describe software and hardware used within an organization, but outside of the organization’s official IT infrastructure.

Answer 22

True

Question 23

Which of the following terms best describes threat actors that engage in illegal activities to get the know-how and gain market advantage?

Answer 23

Competitors

Question 24

Which of the following answers does not relate to a direct access threat vector?

Answer 24

Malicious URL

Question 25

Which of the following answers refer(s) to wireless threat vector(s)? (Select all that appl

Answer 25

• Network protocol vulnerabilities (WEP/WPA)
• Rogue AP / Evil twin
• Default security configurations
• Vulnerabilities in network security standards (WPS)