CompTIA Security+ Certification Exam SY0-701 Practice Test 9 Flashcards
As opposed to simple DoS attacks that usually are performed from a single system, a DDoS attack uses multiple compromised computer systems to perform the attack against its target. The intermediary systems that are used as a platform for the attack (often referred to as zombies, and collectively as a botnet) are the secondary victims of the DDoS attack.
A) True
B) False
A) True
A type of DDoS attack where an attacker exploits vulnerabilities in certain services or protocols to generate responses that are much larger than the original request is referred to as:
A) Amplified DDoS attack
B) Volumetric DDoS attack
C) Reflected DDoS attack
D) Application DDoS attack
A) Amplified DDoS attack
What defines a reflected DDoS attack?
A) Overwhelming the target with a high volume of traffic to saturate its bandwidth
B) Exploiting vulnerabilities in network protocols to consume resources and disrupt services
C) Utilizing third-party servers to reflect and amplify attack traffic towards the target
D) Targeting vulnerabilities in applications or web servers to exhaust resources
C) Utilizing third-party servers to reflect and amplify attack traffic towards the target
A DNS amplification attack is a type of DDoS attack wherein an attacker sends a small, specially crafted DNS query containing a spoofed IP address (the victim’s IP) to a compromised DNS server. Upon receiving the query, the DNS server generates a much larger response packet, which is then sent to the victim’s IP address, causing potential disruption due to overwhelming traffic.
A) True
B) False
A) True
Which of the answers listed below refers to a cyberattack technique that relies on providing false DNS information to a DNS resolver for the purpose of redirecting or manipulating the resolution of domain names to malicious IP addresses?
A) DNS spoofing
B) Credential stuffing
C) URL hijacking
D) Domain hijacking
A) DNS spoofing
Remapping a domain name to a rogue IP address is an example of what kind of exploit?
A) URL hijacking
B) DNS cache poisoning
C) Domain hijacking
D) ARP poisoning
B) DNS cache poisoning
When domain registrants due to unlawful actions of third parties lose control over their domain names, they fall victim to:
A) Sybil attack
B) Domain hijacking
C) Typosquatting
D) URL hijacking
B) Domain hijacking
Which of the following can be classified as malicious activity indicator on a wireless network?
A) Rogue AP
B) Jump server
C) Unmanaged switch
D) Network tap
A) Rogue AP
A wireless disassociation attack is a type of: (Select 2 answers)
A) Downgrade attack
B) Deauthentication attack
C) Brute-force attack
D) DoS attack
E) Cryptographic attack
B) Deauthentication attack
D) DoS attack
A wireless jamming attack is a type of:
A) Cryptographic attack
B) DoS attack
C) Brute-force attack
D) Downgrade attack
B) DoS attack
Which of the answers listed below refers to RFID vulnerability?
A) Spoofing
B) Eavesdropping
C) RFID cloning
D) Data interception
E) Replay attack
F) DoS attack
G) All of the above
G) All of the above
Which of the following is a vulnerability characteristic to NFC communication?
A) Eavesdropping
B) Data interception
C) Replay attacks
D) DoS attacks
E) All of the above
E) All of the above
Which wireless attack focuses on exploiting vulnerabilities found in WEP?
A) IV attack
B) War driving
C) SSID spoofing
D) Bluejacking
A) IV attack
Which of the statements listed below can be used to describe the characteristics of an on-path attack? (Select all that apply)
A) An on-path attack is also known as MITM attack
B) Attackers place themselves on the communication route between two devices
C) Attackers intercept or modify packets sent between two communicating devices
D) Attackers do not have access to packets exchanged during the communication between two devices
A) An on-path attack is also known as MITM attack
B) Attackers place themselves on the communication route between two devices
C) Attackers intercept or modify packets sent between two communicating devices
A network replay attack occurs when an attacker captures sensitive user data and resends it to the receiver with the intent of gaining unauthorized access or tricking the receiver into unauthorized operations.
A) True
B) False
A) True
