Exam 3

Question 1

As part of new hire orientation, a software technician explores the makeup of the organization’s network infrastructure. When reviewing used network appliances and protocols, what provides a bridge between a cabled network and wireless hosts, or stations?

Answer 1

A. Wireless access point
B. Switch
C. Router
D. Transport protocol

A. Wireless access point

Question 2

A software engineer is tasked with identifying vulnerabilities within the network architecture. When evaluating the use of a particular architecture and selection of controls, what should not be considered as part of architectural considerations?

Answer 2

A. Port security
B.Costs
C. Availability
D. Risk Transference

A. Port security

Question 3

How can I protect my network from someone who wants to connect a rogue access point to it?

Answer 3

802.1x on a managed switch

Question 4

What type of attack interferes with my wireless network?

Answer 4

Jamming

Question 5

My laptop had a virus, so I reinstalled the operating system and the virus came back. What type of attack is causing this?

Answer 5

Rootkit

Question 6

My domain controller uses NTLM authentication. What type of attack makes it vulnerable?

Answer 6

Pass the Hash Attack

Question 7

What type of threat actor will try to steal your trade secrets so that they can manufacture your new product and get it to market before you can?

Answer 7

Competitor

Question 8

Someone goes to the dark web and purchases a program that he can modify to carry out an attack. What type of threat actor is the attacker?

Answer 8

Script kiddie

Question 9

An attacker has just carried out an attack rendering a website unusable. When he has finished the attack, he then has to rush off, as he is going to attend a political rally. What type of threat actor is he?

Answer 9

Hacktivist

Question 10

What is the most difficult threat actor to detect and why?

Answer 10

Insider b/c they’re insider your network legitamately

Question 11

What type of virus produces a different hash as it replicates through your network?

Answer 11

Polymorphic virus

Question 12

What type of attack can use a hidden password that has been in place since the application was installed?

Answer 12

Backdoor

Question 13

What type of attack involves an agent attacking a high‐level executive calling them on a telephone and leaving a voicemail?

Answer 13

Vishing

Question 14

What type of attack involves a huge fireman arriving in the reception area of your company and you letting him into your server room?

Answer 14

Social engineering with urgency

Question 15

What type of attack involves downloading a performance-enhancing computer program that says that I have 20,000 exploits and that I should purchase the full version of the product to remove them?

Answer 15

Disguised ransomware

Question 16

What type of attack collects passwords from your computer and sends them back to the hacker who then uses these passwords to gain access to your computer system?

Answer 16

RAT

Question 17

What type of attack cannot be detected by a NIPS, NIDS, firewall, or a SIEM system, but can only be detected by using baselines?

Answer 17

Zero-day attack

Question 18

What type of attack is a stealth attack that tracks your internet habits and usage?

Answer 18

Spyware

Question 19

An employee leaves the company, then three months later, files are deleted from a file server, even though it has been isolated from the network. On investigation, it was found that the damage was caused by a script being launched. What type of attack was carried out?

Answer 19

Logic bomb

Question 20

What type of attack uses multiple popups as its attack vector?

Answer 20

Adware

Question 21

What type of attack infects a well‐known, trusted website where the users do not suspect anything?

Answer 21

Watering hole attack

Question 22

What type of attack is launched against a manager using email as its attack medium?

Answer 22

Phishing

Question 23

What type of attack is launched against managers using email as its attack medium?

Answer 23

Spear phishing

Question 24

A company is employing a third party to collect all of its shredded waste that will then be taken to a remote site and incinerated. What type of attack does this prevent?

Answer 24

Dumpster diving

Question 25

What type of attack is launched when you receive an email from the CEO threatening you with disciplinary action if you do not complete a form that was requested earlier by the human resources department (you don’t remember the earlier correspondence)?

Answer 25

Social engineering with authority

Question 26

You have just started working at the reception desk of a multinational corporation. During your induction period, one of the middle managers asks your coworker for some information. You are not too sure if he is entitled to that information. The next day, when your coworker has gone to lunch, the middle manager arrives asking you for the same information, this time updated a little. You don’t want to be seen as different from other employees, and so you give him the information. What type of attack has just been launched?

Answer 26

Social engineering with consensus

Question 27

The CEO has received an email asking him to click on a link and carry out an action so that his salary information can be updated, as the company is moving to a new financial system. What type of attack has just been launched?

Answer 27

Whaling

Question 28

What type of attack can be launched using HTML tags and/or JavaScript?

Answer 28

Cross-Site Scripting (XSS)

Question 29

Five seconds after connecting to the company’s wireless network, the sessions drop. What type of wireless attack have I been the victim of?

Answer 29

Disassociation attack

Question 30

A hacker has managed to gain access to my Bluetooth phone and has been texting all of my friends, announcing that I am going to get married next year. This information is false. What type of attack has just been carried out?

Answer 30

Bluejacking

Question 31

A hacker has managed to gain access to my Bluetooth phone and has been able to steal my contact information. What type of attack has been carried out?

Answer 31

Bluesnarfing

Question 32

What type of attack is an interception attack where the data has been replayed immediately?

Answer 32

Man-in-the-middle attack

Question 33

What type of attack is an interception attack where the data has been replayed at a later date?

Answer 33

Replay attack

Question 34

What types of attack might use port 1900 and port 5000? Name two.

Answer 34

Virus use port 1900; Worm use port 5000

Question 35

In the morning, I swipe my card and open the door to the main offices. I am about to close the door when I see a young lady struggling with a big box, and so I keep the door open for her. What type of attack has just occurred?

Answer 35

Social engineering tailgating

Question 36

The customer service desk receives a call from Frank, who says he is from the IT help desk. He says there is a glitch in the system, so they are having to change everyone’s passwords. I change my password and ask Helen from the HR department how long Frank has been working for the company. She says that she is not aware of someone called Frank who works at the help desk. What type of attack has just occurred?

Answer 36

Social engineering impersonation

Question 37

What type of attack is it when a group of infected computers attacks another computer to render it unusable?

Answer 37

DDoS Attack

Question 38

I went to the ATM to withdraw some cash to purchase a new pair of shoes from a local market stall that only accepts cash. I was unaware that the person standing behind me had taken his cell phone out and was using the video to record my transaction. What type of attack has been carried out?

Answer 38

Shoulder surfing

Question 39

An attacker has inserted too much data into a data field on a web form causing it to crash. What type of attack has just occurred?

Answer 39

Buffer Overflow

Question 40

My website traffic is being controlled by a load balancer that is ensuring that each web request is going to the least-utilized host. A DDoS attack is now being launched against the company websites. What is the best way to deal with this attack? Will the load balancer cope?

Answer 40

Firewall; No

Question 41

What type of attack uses the phrase 1=1? What are the two best solutions to prevent this attack?

Answer 41

SQL injections. Stored procedures and input validation.

Question 42

When I go to my local coffee shop, I am given the wireless network SSID and access code so I can use the internet while drinking coffee. When I sit down at my table, I notice that the SSID comes up, and when I connect to the wireless network, I am not asked for a password. What type of attack has just occurred?

Answer 42

Evil twin