Threat Vectors and Attack Surfaces

Question 1

The 2 most common threat vector types that apply to MSPs, vendors, and suppliers in the supply chain?

Answer 1

MSPs (Managed Service Providers)

Are prime targets for brand impersonation attacks due to their access to multiple clients’ IT systems, sensitive data, and administrative privileges. Cybercriminals exploit MSPs’ trusted reputations to launch supply chain attacks, phishing campaigns, and ransomware infections.

1. Propagation of malware
2. Social engineering techniques

Question 2

Which of the wireless technologies listed below are considered potential threat vectors and should be avoided due to their known vulnerabilities? (Select all that apply)

WPS, WAP, WPA, WAF, WPA2 and WEP

Answer 2

WPS, WPA, WPA2 and WEP

Question 3

Agent-less software threat vectors

Answer 3

1. Network protocol vulnerability
2. Packet sniffing

Question 4

Client-based software threat vector(s)

Answer 4

1. Drive-by download via web browser.
2. Malicious macro.
3. USB-based attack.
4. Infected executable file.
5. Malicious attachment in email application.