What is a likely consequence of brand impersonation?

Malware infections and data theft from unsuspecting users

What describes the concept of Shadow IT?

Rogue individual bypassing official IT controls, create their own solutions

What is the primary goal of a phishing attack?

Trick users into revealing information by pretending to be a trusted source

What defines an insider threat?

An individual within an organization using internal knowledge to cause harm

What is a primary characteristic of organized crime threat actors?

They are highly sophisticated and financially motivated

Which of the following is an effective way to protect against impersonation attacks?

Verify the identity of the requester before sharing sensitive information

What is the main goal of a watering hole attack?

To compromise a trusted website that the target group frequently visits

What is the primary goal of misinformation campaigns?

To spread factually incorrect information to create confusion and division

How do image-based attack vectors pose a security risk?

By embedding malicious code inside image files, such as SVGs

How does an unskilled attacker typically operate?

By using pre-made scripts and automated scanning tools

Which of the following is a real-world example of a watering hole attack?

An attacker compromising financial websites to target specific banks

Which tactic is commonly used in misinformation campaigns?

Spreading fake news through social media to manipulate public opinion

Why might a certificate be added to a Certificate Revocation List (CRL)?

It was compromised or is no longer valid

Which of the following is a key motivation for a hacktivist?

Revenge and philosophical beliefs

What is the primary characteristic of a threat actor?

It is an entity responsible for an event impacting security

A technique where attackers manipulate victims over the phone or voicemail

What is a common example of identity fraud?

A cybercriminal opening a credit card in someone else’s name

How does a Certificate Authority (CA) help establish trust on the internet?

By verifying and digitally signing website certificates

What is a key characteristic of a self-signed certificate?

It is signed by the same entity that created it and trusted internally

Why are watering hole attacks effective?

By targeting websites that are frequently visited by the intended victims

How does an impersonation attack work?

Pretending to be a trusted person to gain access to sensitive information

What is a key challenge of vulnerable software vectors?

May contain unknown or unpatched vulnerabilities that require updates

Which security measure can help defend against watering hole attacks?

Updating firewall and IPS signatures regularly

Why are removable devices considered a major security risk?

They can be used to infect air-gapped networks and exfiltrate data

How do attackers use brand impersonation?

By pretending to be a well-known brand and creating fraudulent websites

How does an attacker execute a watering hole attack?

By infecting a commonly visited third-party website with malware

Why are unsupported systems a security risk?

They no longer receive security patches and updates

How do insecure network vectors create security vulnerabilities?

They allow attackers to view and intercept unencrypted network traffic

How does Business Email Compromise (BEC) typically work?

By impersonating legitimate individuals using spoofed company email address

What is the main security concern with default credentials?

They provide easy access to systems if not changed

Which of the following is a common method used in misinformation campaigns?

Creating fake users and amplifying messages on social media

A phishing attack conducted over phone calls

How do supply chain attacks exploit security vulnerabilities?

Target manufacturing or infrastructure to install backdoors or bad hardware

Why are open service ports a potential attack vector?

Open ports can be exploited if app has vulnerability or misconfiguration

What is the purpose of pretexting in social engineering?

Create a fake scenario that makes the user likely to reveal information

What is the primary purpose of a digital certificate?

To bind a public key with a digital signature and key holder details

Which attribute is commonly associated with nation-state threat actors?

Highly advanced capabilities and large-scale resources

How does a wildcard certificate differ from a standard SSL certificate?

It allows multiple subdomains to be covered under a single certificate

What is the purpose of OCSP stapling?

To reduce the need for clients to check certificate status with the CA

Which of the following best describes eliciting information?

Manipulating a victim into providing information without them realizing it

What is the "Root of Trust" in IT security?

An inherently trusted component that forms the basis for trust

Which of the following motivations is most associated with nation-state attacks?

Disrupting infrastructure, espionage, and military objectives

What is a threat vector?

A method used by an attacker to gain access or infect a target

Which of the following is an example of a message-based threat vector?

A phishing email with a malicious link

What makes file-based vectors a common security risk?

Allow attackers to use macros, embedded scripts, archives to hide malware

How does smishing differ from traditional phishing?

It is conducted over text messages instead of email

studbud

Digital Certificates, Threat Actor Types, Threat Vectors & Attack Surfaces, Social Engineering

48 termsStudBud Administration15 plays

Imported from external platform

Flashcards48 cardsFPractice quizPHost liveL

Questions 48

Answers

1
What is a likely consequence of brand impersonation?
Increased website security for the impersonated brand
Improved customer trust in online transactions
Legitimate brands using fake websites for marketing
Malware infections and data theft from unsuspecting users
2
What describes the concept of Shadow IT?
An insider threat working with a nation-state to exfiltrate data
A group of skilled hackers performing penetration testing
An external cybercriminal group targeting corporations
Rogue individual bypassing official IT controls, create their own solutions
3
What is the primary goal of a phishing attack?
To improve network security by testing firewall vulnerabilities
To encrypt data for secure transmission
Trick users into revealing information by pretending to be a trusted source
To perform unauthorized software updates
4
What defines an insider threat?
A state-sponsored attack targeting critical infrastructure
An unskilled attacker using pre-made scripts
An individual within an organization using internal knowledge to cause harm
An external hacker attempting to breach a system
5
What is a primary characteristic of organized crime threat actors?
They operate with little funding and low sophistication
They only target government and military organizations
They are highly sophisticated and financially motivated
They are driven by political or ideological motivations
6
Which of the following is an effective way to protect against impersonation attacks?
Keep passwords written down in case you forget them
Always trust employees who claim to be from IT support
Share personal details only over email to avoid voice phishing
Verify the identity of the requester before sharing sensitive information
7
What is the main goal of a watering hole attack?
To send phishing emails containing malicious links
To compromise a trusted website that the target group frequently visits
To exploit unsecured wireless networks
To infect users by sending fake software updates
8
What is the primary goal of misinformation campaigns?
To spread factually incorrect information to create confusion and division
To block access to unauthorized websites
To improve search engine rankings for certain websites
To enhance cybersecurity awareness among the public
9
How do image-based attack vectors pose a security risk?
By embedding malicious code inside image files, such as SVGs
By spreading malware through Bluetooth vulnerabilities
By using encrypted messages to bypass detection
By exploiting open network ports to access systems
10
Which standard format is used for digital certificates?
ISO 27001
MD5
SSL/TLS
X.509
11
How does an unskilled attacker typically operate?
By using pre-made scripts and automated scanning tools
By infiltrating organizations through insider connections
By writing custom malware to exploit zero-day vulnerabilities
By leveraging financial resources to hire professional hackers
12
Which of the following is a real-world example of a watering hole attack?
An attacker compromising financial websites to target specific banks
A hacker using brute force attacks to guess administrator passwords
A malware infection spreading through infected USB drives
A cybercriminal sending fraudulent wire transfer emails
13
Which tactic is commonly used in misinformation campaigns?
Exploiting zero-day vulnerabilities in operating systems
Spreading fake news through social media to manipulate public opinion
Deploying ransomware to encrypt critical files
Brute forcing administrator passwords to gain unauthorized access
14
Why might a certificate be added to a Certificate Revocation List (CRL)?
It was compromised or is no longer valid
It has reached its expiration date and automatically revoked
It has been renewed by the Certificate Authority
It is no longer needed by the certificate holder
15
Which of the following is a key motivation for a hacktivist?
Financial gain
Service disruption
Espionage for a foreign government
Revenge and philosophical beliefs
16
What is the primary characteristic of a threat actor?
It is always an internal entity
It is motivated solely by financial gain
It only targets government organizations
It is an entity responsible for an event impacting security
17
What is vishing?
A technique where attackers manipulate victims over the phone or voicemail
A way to infect computers using fake security updates
A phishing attack that only targets businesses
A method of hiding malicious code inside email attachments
18
What is a common example of identity fraud?
A scammer sending a phishing email with a fake attachment
A botnet attack targeting a government website
A cybercriminal opening a credit card in someone else’s name
A hacker scanning a network for open ports
19
How does a Certificate Authority (CA) help establish trust on the internet?
By acting as a firewall between trusted and untrusted websites
By replacing public key cryptography with symmetric encryption
By encrypting all web traffic automatically
By verifying and digitally signing website certificates
20
What is a key characteristic of a self-signed certificate?
It is issued by a public Certificate Authority (CA)
It is used exclusively for e-commerce transactions
It is signed by the same entity that created it and trusted internally
It is only valid for government-related websites
21
Why are watering hole attacks effective?
They exploit vulnerabilities in outdated operating systems
By targeting websites that are frequently visited by the intended victims
They only work against individuals who open email attachments
Use social engineering to trick users into downloading malicious files
22
How does an impersonation attack work?
Infecting a victim's computer with malware through a phishing email
Pretending to be a trusted person to gain access to sensitive information
Exploiting unpatched software vulnerabilities
Scanning network traffic for unencrypted data
23
What is a key challenge of vulnerable software vectors?
May contain unknown or unpatched vulnerabilities that require updates
They are only dangerous if the software is agentless
They only impact mobile devices and not desktops or servers
They do not pose a risk unless they are installed via USB
24
Which security measure can help defend against watering hole attacks?
Only visiting websites with HTTPS encryption
Using social media authentication for secure logins
Updating firewall and IPS signatures regularly
Disabling email attachments from unknown senders
25
Why are removable devices considered a major security risk?
They require a network connection to function
They only affect high-security organizations
They can be used to infect air-gapped networks and exfiltrate data
They always bypass antivirus detection
26
How do attackers use brand impersonation?
By hacking into official company servers to send phishing emails
By pretending to be a well-known brand and creating fraudulent websites
By targeting only social media influencers for financial gain
By replacing legitimate online ads with ransomware
27
How does an attacker execute a watering hole attack?
By sending targeted phishing emails to potential victims
By using ransomware to encrypt a victim's files
By infecting a commonly visited third-party website with malware
By scanning for open network ports
28
Why are unsupported systems a security risk?
They have built-in protection against supply chain attacks
They no longer receive security patches and updates
They are only found in government networks
They contain vulnerabilities that are impossible to exploit
29
Which technique involves creating a fake URL that looks similar to a legitimate one?
Smishing
Pretexting
Typosquatting
Vishing
30
How do insecure network vectors create security vulnerabilities?
They allow attackers to view and intercept unencrypted network traffic
They only affect outdated operating systems
They prevent attackers from exploiting misconfigured applications
They make it difficult to detect open service ports
31
How does Business Email Compromise (BEC) typically work?
By stealing personal information through a fake online survey
By impersonating legitimate individuals using spoofed company email address
By encrypting email attachments to prevent data loss
By using keyloggers to track employee login credentials
32
What is the main security concern with default credentials?
They prevent unauthorized users from logging in
They improve system performance by reducing authentication time
They make it harder for administrators to configure devices
They provide easy access to systems if not changed
33
Which of the following is a common method used in misinformation campaigns?
Encrypting sensitive documents before sharing them
Blocking access to misinformation through government firewalls
Using social engineering to steal passwords
Creating fake users and amplifying messages on social media
34
What is vishing?
A technique used to install malware through image files
A method of encrypting voice calls to prevent interception
A process of hiding malicious code inside documents
A phishing attack conducted over phone calls
35
How do supply chain attacks exploit security vulnerabilities?
By running automated vulnerability scans on corporate networks
By infecting removable USB drives with malware
Target manufacturing or infrastructure to install backdoors or bad hardware
By exploiting outdated wireless security protocols
36
Why are open service ports a potential attack vector?
Open ports can be exploited if app has vulnerability or misconfiguration
They encrypt data before it is sent over a network
They prevent applications from communicating with the internet
They block unauthorized access to the system
37
What is the purpose of pretexting in social engineering?
Create a fake scenario that makes the user likely to reveal information
To encrypt sensitive data before transmission
To send phishing emails that contain malicious links
To use malware to take control of a victim's computer
38
What is the primary purpose of a digital certificate?
To replace traditional username and password authentication
To encrypt all internet traffic
To bind a public key with a digital signature and key holder details
To provide a physical identification for network access
39
Which attribute is commonly associated with nation-state threat actors?
Primarily targeting individuals instead of organizations
Uncoordinated attacks with no clear objectives
Highly advanced capabilities and large-scale resources
Low funding and unsophisticated attacks
40
How does a wildcard certificate differ from a standard SSL certificate?
It replaces the need for using TLS on a web server
It is only valid for a specific IP address rather than a domain
It encrypts data using a stronger algorithm
It allows multiple subdomains to be covered under a single certificate
41
What is the purpose of OCSP stapling?
To prevent self-signed certificates from being revoked
To replace the need for Certificate Revocation Lists (CRLs)
To reduce the need for clients to check certificate status with the CA
To encrypt SSL/TLS handshakes using public key cryptography
42
Which of the following best describes eliciting information?
Encrypting sensitive company data to protect it from hackers
Stealing login credentials using keyloggers
Manipulating a victim into providing information without them realizing it
Using brute force attacks to guess a victim's password
43
What is the "Root of Trust" in IT security?
An inherently trusted component that forms the basis for trust
A list of all trusted websites maintained by browsers
A cryptographic key used to encrypt all data in a network
A type of self-signed certificate used in private networks
44
Which of the following motivations is most associated with nation-state attacks?
Personal revenge
Disrupting infrastructure, espionage, and military objectives
Finding vulnerabilities for academic research
Financial gain through ransomware campaigns
45
What is a threat vector?
A method used by an attacker to gain access or infect a target
A tool used to encrypt sensitive data
A type of antivirus software that blocks all attacks
A vulnerability that has already been patched
46
Which of the following is an example of a message-based threat vector?
A phishing email with a malicious link
An outdated wireless security protocol
A malicious USB drive containing malware
A backdoor installed in counterfeit network hardware
47
What makes file-based vectors a common security risk?
They can only affect outdated operating systems
Allow attackers to use macros, embedded scripts, archives to hide malware
They only affect executable files
They are primarily used in Bluetooth exploits
48
How does smishing differ from traditional phishing?
It uses email instead of phone calls
It is only used in financial fraud
It requires the victim to download an infected attachment
It is conducted over text messages instead of email

Digital Certificates, Threat Actor Types, Threat Vectors & Attack Surfaces, Social Engineering Flashcards | StudBud