CompTIA Sec+ SY0-701 PBQ #1

Question 1

Attack Description:

An attacker sends multiple SYN packets from multiple sources.

Intended target: Web Server

Answer 1

Attack Type:

Botnet

BEST Preventative or Remediation Action: Enable DDoS protection

Question 2

Attack Description:

The attack establishes a connection, which allows remote commands to be executed

Intended Target: User

Answer 2

Attack Type:

RAT (Remote Access Trojan)

BEST Preventative or Remediation Action: Disable remote access services

Question 3

Attack Description:

The attack is self-propagating and compromises a SQL database using well-known credentials as it moves through the network.

Intended target: Database Server

Answer 3

Attack Type:

Worm

BEST Preventative or Remediation Action: Change the default application password

Question 4

Attack Description:

The attack uses hardware to remotely monitor a user’s input activity to harvest credentials

Intended target: Executive

Answer 4

Attack Type:

Keylogger

BEST Preventative or Remediation Action: Implement 2FA using push notification

Question 5

Attack Description:

The attack embeds hidden access in an internally developed application that bypasses account login

Intended target: Application

Answer 5

Attack Type:

Backdoor

BEST Preventative or Remediation Action: Conduct a code review