Cyber Attacks Chapter 3 Flashcards | StudBud

Cyber Attacks Chapter 3

50 termsStudBud Administration7 plays

Test your knowledge on essential concepts and techniques in cybersecurity

Flashcards50 cardsFPractice quizPHost liveL

Questions 50

Answers

1
What does 'Zero Day' refer to?
Virus signature update
Unpatched vulnerability
First day after patch
System crash
2
What does the MITRE ATT&CK framework primarily map?
IDS signatures
System performance
Tactics, Techniques, and Procedures
Antivirus vendors
3
Example of fileless malware technique?
.exe in Startup
PowerShell living-off-the-land
Trojan downloader
Batch file in Temp folder
4
Goal of Lateral Movement?
Encrypt files
Stop services
Move across systems
Destroy data
5
Which technique uses hashed passwords?
ARP Spoofing
Pass-the-Hash
Sniffing
Dictionary attack
6
What makes a worm different from a virus?
Needs admin privileges
Is always encrypted
Cannot replicate
Spreads without user interaction
7
Best mitigation for credential stuffing?
DNS firewall
Rate limiting
Port blocking
Multi-factor authentication
8
Which attack tricks users into actions?
Malware
Brute-force
Cross-Site Request Forgery
SQL Injection
9
What is the first stage in the Cyber Kill Chain?
Reconnaissance
Exfiltration
Execution
Lateral Movement
10
Mitigation for a SYN flood?
Allow fragmented packets
Rate limit incoming SYNs
Enable port mirroring
Use CAPTCHA
11
Example of spear phishing?
A mass email with ransomware
A personalized email targeting a CEO
An unpatched browser exploit
A phishing call
12
What should you do first after malware infection?
Isolate the affected host
Format the disk
Reboot the system
Change the wallpaper
13
Technique using hashed passwords?
Dictionary attack
Pass-the-Hash
ARP Spoofing
Sniffing
14
Technique stealing data by observing traffic?
DDoS
Sniffing
Injection
Phishing
15
Event ID for successful logon?
4688
7045
4625
4624
16
Which is a code injection attack?
Brute-force
CSRF
SQL Injection
DNS Spoofing
17
What tool scans for open ports?
Hashcat
Outlook
Nmap
Wireshark
18
What does DLP stand for?
Domain Level Protection
Data Location Profile
Data Loss Prevention
Download Log Protocol
19
Which protocol is vulnerable to ARP spoofing?
DNS
Ethernet
UDP
TCP
20
Which command lists running processes in Windows?
tasklist
whoami
netstat
ipconfig
21
Which is an example of spear phishing?
Unpatched browser exploit
Mass email with ransomware
Phishing call
Personalized email targeting CEO
22
What is the first stage in the Cyber Kill Chain?
Exfiltration
Lateral Movement
Reconnaissance
Execution
23
What is the best mitigation for credential stuffing?
Port blocking
DNS firewall
Multi-factor authentication
Rate limiting
24
What mitigates a SYN flood?
Rate limit incoming SYNs
Use CAPTCHA
Enable port mirroring
Allow fragmented packets
25
What does "Zero Day" refer to?
Unpatched vulnerability
First day after patch
Virus signature update
System crash
26
Which attack redirects DNS responses?
SQLi
DNS Poisoning
MITM
CSRF
27
Which attack sends multiple login attempts?
ARP Poisoning
Brute-force Attack
XSS Attack
Rainbow Attack
28
Which attack tricks users into actions?
Malware
Brute-force
SQL Injection
Cross-Site Request Forgery
29
Tool used to scan for open ports?
Nmap
Hashcat
Outlook
Wireshark
30
What is DNS Tunneling used for?
Spoofing login pages
Packet injection
Port scanning
Data exfiltration
31
Which is a code injection attack?
DNS Spoofing
CSRF
Brute-force
SQL Injection
32
What makes a worm different from a virus?
Needs admin privileges
Cannot replicate
Is always encrypted
Spreads without user interaction
33
What is a fileless malware technique?
Trojan downloader
PowerShell attack
.exe in Startup
Batch file in Temp
34
Example of an AI-powered attack?
SQL injection
Brute force
DNS spoofing
Deepfake voicemail
35
What to do after discovering malware?
Isolate the affected host
Reboot the system
Change the wallpaper
Format the disk
36
Type of attack intercepting network traffic?
Smurf Attack
Rainbow Attack
Man-in-the-Middle
Drive-by Download
37
What does the MITRE ATT&CK framework map?
IDS signatures
Antivirus vendors
System performance
Tactics, Techniques, and Procedures
38
What is a 'Whaling' attack?
DDoS
Phishing targeting executives
Malware in images
Spear phishing to anyone
39
Purpose of least privilege access?
Deny all logins
Save storage
Enable quick privilege escalation
Reduce the attack surface
40
What type of malware pretends to be legitimate?
Virus
Worm
Trojan
Rootkit
41
Which attack involves multiple login attempts?
Brute-force Attack
ARP Poisoning
XSS Attack
Rainbow Attack
42
What type of malware pretends to be legitimate?
Worm
Rootkit
Trojan
Virus
43
Technique used in Broken Access Control?
Elevating access
Encrypted storage
Disabling MFA
Hiding payloads
44
Which event ID logs a successful logon?
7045
4625
4624
4688
45
What attack intercepts network traffic?
Rainbow Attack
Smurf Attack
Drive-by Download
Man-in-the-Middle
46
Network tool captures packets?
Wireshark
Nmap
Nessus
Metasploit
47
What is the purpose of least privilege access?
Enable quick escalation
Save storage
Reduce the attack surface
Deny all logins
48
Command lists running processes in Windows?
ipconfig
whoami
tasklist
netstat
49
What is DNS Tunneling used for?
Spoofing login pages
Port scanning
Data exfiltration
Packet injection
50
Which protocol exploited in SYN Flood?
UDP
SMTP
HTTP
TCP