2 Threats, Vulnerabilities, and Attacks Online Quiz Questions

True or false: Misinformation is false information shared without necessarily intending harm.

An organization is inventorying its attack surface. Which item is an example of a point where an attacker could enter or affect its systems?

What category of malware self-replicates and spreads between systems without needing to attach to another file?

True or false: A zero-day vulnerability may be known to the vendor but still lack an effective fix available to the affected organization.

An application claims to be a useful utility, but it performs unauthorized actions after a user installs and runs it. Which malware category best fits this behavior?

What is the term for phishing that uses text messages?

Select all statements that correctly distinguish credential attack techniques.

Select all statements that correctly describe social-engineering techniques.

A company discovers that an attacker compromised a software supplier's update path to affect customers who installed the update. Which attack technique best describes this scenario?

An application places untrusted user input into a database query, allowing the input to alter the query's meaning. Which technique is being used?

A staff member receives a convincing invoice email linking to a look-alike sign-in page. The staff member enters a password, and an attacker then uses it to access the organization's cloud service. Explain the likely actor and motive, the attack vector, the attack surfaces, and the weakness exploited.

An attacker deploys ransomware and demands payment from multiple businesses. Which threat actor category best fits the likely financial motive?

An attacker sends a deceptive email designed specifically to trick a company's chief executive. Which social-engineering technique is the most specific name for this attack?

Malware copies itself across a network to infect other systems without attaching to another file. Which malware category best describes it?

An attacker tries a small number of common passwords against many user accounts. Which credential attack is this?

A zero-day vulnerability must be unknown to the software vendor.

What attack technique involves compromising a website that a particular target group is likely to visit? Enter the name of the technique.

A system checks that a file is safe to use, but an attacker changes the file before the system acts on it. Enter the name of this weakness or technique.