How does an attacker execute a watering hole attack?

By infecting a commonly visited third-party website with malware

What is the main goal of a watering hole attack?

To compromise a trusted website that the target group frequently visits

How do insecure network vectors create security vulnerabilities?

They allow attackers to view and intercept unencrypted network traffic

How does smishing differ from traditional phishing?

It is conducted over text messages instead of email

How does an impersonation attack work?

Pretending to be a trusted person to gain access to sensitive information

What is the primary goal of a phishing attack?

Trick users into revealing information by pretending to be a trusted source

How does an unskilled attacker typically operate?

By using pre-made scripts and automated scanning tools

Why are open service ports a potential attack vector?

Open ports can be exploited if app has vulnerability or misconfiguration

What is a common example of identity fraud?

A cybercriminal opening a credit card in someone else’s name

Which of the following is an effective way to protect against impersonation attacks?

Verify the identity of the requester before sharing sensitive information

A phishing attack conducted over phone calls

What is the purpose of OCSP stapling?

To reduce the need for clients to check certificate status with the CA

What is a key characteristic of a self-signed certificate?

It is signed by the same entity that created it and trusted internally

Which of the following is a common method used in misinformation campaigns?

Creating fake users and amplifying messages on social media

Which attribute is commonly associated with nation-state threat actors?

Highly advanced capabilities and large-scale resources

Why are unsupported systems a security risk?

They no longer receive security patches and updates

How does Business Email Compromise (BEC) typically work?

By impersonating legitimate individuals using spoofed company email address

How does a Certificate Authority (CA) help establish trust on the internet?

By verifying and digitally signing website certificates

What is a threat vector?

A method used by an attacker to gain access or infect a target

Why are removable devices considered a major security risk?

They can be used to infect air-gapped networks and exfiltrate data

Which of the following motivations is most associated with nation-state attacks?

Disrupting infrastructure, espionage, and military objectives

What is the primary purpose of a digital certificate?

To bind a public key with a digital signature and key holder details

What defines an insider threat?

An individual within an organization using internal knowledge to cause harm

How do image-based attack vectors pose a security risk?

By embedding malicious code inside image files, such as SVGs

What is a primary characteristic of organized crime threat actors?

They are highly sophisticated and financially motivated

A technique where attackers manipulate victims over the phone or voicemail

What is a likely consequence of brand impersonation?

Malware infections and data theft from unsuspecting users

What describes the concept of Shadow IT?

Rogue individual bypassing official IT controls, create their own solutions

What is the "Root of Trust" in IT security?

An inherently trusted component that forms the basis for trust

What makes file-based vectors a common security risk?

Allow attackers to use macros, embedded scripts, archives to hide malware

How do supply chain attacks exploit security vulnerabilities?

Target manufacturing or infrastructure to install backdoors or bad hardware

What is the primary characteristic of a threat actor?

It is an entity responsible for an event impacting security

Why might a certificate be added to a Certificate Revocation List (CRL)?

It was compromised or is no longer valid

What is the purpose of pretexting in social engineering?

Create a fake scenario that makes the user likely to reveal information

How do attackers use brand impersonation?

By pretending to be a well-known brand and creating fraudulent websites

Which security measure can help defend against watering hole attacks?

Updating firewall and IPS signatures regularly

Which of the following is an example of a message-based threat vector?

A phishing email with a malicious link

How does a wildcard certificate differ from a standard SSL certificate?

It allows multiple subdomains to be covered under a single certificate

What is a key challenge of vulnerable software vectors?

May contain unknown or unpatched vulnerabilities that require updates

Which tactic is commonly used in misinformation campaigns?

Spreading fake news through social media to manipulate public opinion

Which of the following best describes eliciting information?

Manipulating a victim into providing information without them realizing it

Which of the following is a key motivation for a hacktivist?

Revenge and philosophical beliefs

What is the main security concern with default credentials?

They provide easy access to systems if not changed

Why are watering hole attacks effective?

By targeting websites that are frequently visited by the intended victims

What is the primary goal of misinformation campaigns?

To spread factually incorrect information to create confusion and division

Which of the following is a real-world example of a watering hole attack?

An attacker compromising financial websites to target specific banks

studbud

Digital Certificates, Threat Actor Types, Threat Vectors & Attack Surfaces, Social Engineering

48 termsStudBud Administration15 plays

Imported from external platform

Flashcards48 cardsFPractice quizPHost liveL

Questions 48

Answers

1
How does an attacker execute a watering hole attack?
By using ransomware to encrypt a victim's files
By sending targeted phishing emails to potential victims
By infecting a commonly visited third-party website with malware
By scanning for open network ports
2
What is the main goal of a watering hole attack?
To exploit unsecured wireless networks
To send phishing emails containing malicious links
To infect users by sending fake software updates
To compromise a trusted website that the target group frequently visits
3
Which technique involves creating a fake URL that looks similar to a legitimate one?
Smishing
Pretexting
Vishing
Typosquatting
4
How do insecure network vectors create security vulnerabilities?
They make it difficult to detect open service ports
They allow attackers to view and intercept unencrypted network traffic
They prevent attackers from exploiting misconfigured applications
They only affect outdated operating systems
5
How does smishing differ from traditional phishing?
It requires the victim to download an infected attachment
It is conducted over text messages instead of email
It is only used in financial fraud
It uses email instead of phone calls
6
How does an impersonation attack work?
Infecting a victim's computer with malware through a phishing email
Scanning network traffic for unencrypted data
Pretending to be a trusted person to gain access to sensitive information
Exploiting unpatched software vulnerabilities
7
What is the primary goal of a phishing attack?
To encrypt data for secure transmission
To improve network security by testing firewall vulnerabilities
To perform unauthorized software updates
Trick users into revealing information by pretending to be a trusted source
8
How does an unskilled attacker typically operate?
By using pre-made scripts and automated scanning tools
By infiltrating organizations through insider connections
By leveraging financial resources to hire professional hackers
By writing custom malware to exploit zero-day vulnerabilities
9
Why are open service ports a potential attack vector?
They encrypt data before it is sent over a network
They block unauthorized access to the system
They prevent applications from communicating with the internet
Open ports can be exploited if app has vulnerability or misconfiguration
10
What is a common example of identity fraud?
A scammer sending a phishing email with a fake attachment
A hacker scanning a network for open ports
A botnet attack targeting a government website
A cybercriminal opening a credit card in someone else’s name
11
Which of the following is an effective way to protect against impersonation attacks?
Share personal details only over email to avoid voice phishing
Always trust employees who claim to be from IT support
Keep passwords written down in case you forget them
Verify the identity of the requester before sharing sensitive information
12
What is vishing?
A technique used to install malware through image files
A phishing attack conducted over phone calls
A method of encrypting voice calls to prevent interception
A process of hiding malicious code inside documents
13
What is the purpose of OCSP stapling?
To reduce the need for clients to check certificate status with the CA
To replace the need for Certificate Revocation Lists (CRLs)
To encrypt SSL/TLS handshakes using public key cryptography
To prevent self-signed certificates from being revoked
14
What is a key characteristic of a self-signed certificate?
It is signed by the same entity that created it and trusted internally
It is issued by a public Certificate Authority (CA)
It is only valid for government-related websites
It is used exclusively for e-commerce transactions
15
Which of the following is a common method used in misinformation campaigns?
Encrypting sensitive documents before sharing them
Blocking access to misinformation through government firewalls
Using social engineering to steal passwords
Creating fake users and amplifying messages on social media
16
Which attribute is commonly associated with nation-state threat actors?
Low funding and unsophisticated attacks
Uncoordinated attacks with no clear objectives
Primarily targeting individuals instead of organizations
Highly advanced capabilities and large-scale resources
17
Why are unsupported systems a security risk?
They no longer receive security patches and updates
They have built-in protection against supply chain attacks
They contain vulnerabilities that are impossible to exploit
They are only found in government networks
18
How does Business Email Compromise (BEC) typically work?
By encrypting email attachments to prevent data loss
By impersonating legitimate individuals using spoofed company email address
By stealing personal information through a fake online survey
By using keyloggers to track employee login credentials
19
How does a Certificate Authority (CA) help establish trust on the internet?
By encrypting all web traffic automatically
By verifying and digitally signing website certificates
By acting as a firewall between trusted and untrusted websites
By replacing public key cryptography with symmetric encryption
20
What is a threat vector?
A vulnerability that has already been patched
A method used by an attacker to gain access or infect a target
A tool used to encrypt sensitive data
A type of antivirus software that blocks all attacks
21
Why are removable devices considered a major security risk?
They require a network connection to function
They always bypass antivirus detection
They can be used to infect air-gapped networks and exfiltrate data
They only affect high-security organizations
22
Which of the following motivations is most associated with nation-state attacks?
Personal revenge
Disrupting infrastructure, espionage, and military objectives
Financial gain through ransomware campaigns
Finding vulnerabilities for academic research
23
What is the primary purpose of a digital certificate?
To provide a physical identification for network access
To replace traditional username and password authentication
To bind a public key with a digital signature and key holder details
To encrypt all internet traffic
24
What defines an insider threat?
An individual within an organization using internal knowledge to cause harm
An external hacker attempting to breach a system
An unskilled attacker using pre-made scripts
A state-sponsored attack targeting critical infrastructure
25
How do image-based attack vectors pose a security risk?
By embedding malicious code inside image files, such as SVGs
By using encrypted messages to bypass detection
By exploiting open network ports to access systems
By spreading malware through Bluetooth vulnerabilities
26
Which standard format is used for digital certificates?
ISO 27001
X.509
MD5
SSL/TLS
27
What is a primary characteristic of organized crime threat actors?
They are driven by political or ideological motivations
They operate with little funding and low sophistication
They only target government and military organizations
They are highly sophisticated and financially motivated
28
What is vishing?
A technique where attackers manipulate victims over the phone or voicemail
A phishing attack that only targets businesses
A way to infect computers using fake security updates
A method of hiding malicious code inside email attachments
29
What is a likely consequence of brand impersonation?
Improved customer trust in online transactions
Legitimate brands using fake websites for marketing
Malware infections and data theft from unsuspecting users
Increased website security for the impersonated brand
30
What describes the concept of Shadow IT?
An external cybercriminal group targeting corporations
A group of skilled hackers performing penetration testing
An insider threat working with a nation-state to exfiltrate data
Rogue individual bypassing official IT controls, create their own solutions
31
What is the "Root of Trust" in IT security?
A cryptographic key used to encrypt all data in a network
An inherently trusted component that forms the basis for trust
A list of all trusted websites maintained by browsers
A type of self-signed certificate used in private networks
32
What makes file-based vectors a common security risk?
They are primarily used in Bluetooth exploits
They can only affect outdated operating systems
Allow attackers to use macros, embedded scripts, archives to hide malware
They only affect executable files
33
How do supply chain attacks exploit security vulnerabilities?
By infecting removable USB drives with malware
By exploiting outdated wireless security protocols
By running automated vulnerability scans on corporate networks
Target manufacturing or infrastructure to install backdoors or bad hardware
34
What is the primary characteristic of a threat actor?
It is an entity responsible for an event impacting security
It is motivated solely by financial gain
It is always an internal entity
It only targets government organizations
35
Why might a certificate be added to a Certificate Revocation List (CRL)?
It has been renewed by the Certificate Authority
It has reached its expiration date and automatically revoked
It was compromised or is no longer valid
It is no longer needed by the certificate holder
36
What is the purpose of pretexting in social engineering?
To send phishing emails that contain malicious links
To encrypt sensitive data before transmission
Create a fake scenario that makes the user likely to reveal information
To use malware to take control of a victim's computer
37
How do attackers use brand impersonation?
By pretending to be a well-known brand and creating fraudulent websites
By hacking into official company servers to send phishing emails
By replacing legitimate online ads with ransomware
By targeting only social media influencers for financial gain
38
Which security measure can help defend against watering hole attacks?
Only visiting websites with HTTPS encryption
Updating firewall and IPS signatures regularly
Using social media authentication for secure logins
Disabling email attachments from unknown senders
39
Which of the following is an example of a message-based threat vector?
An outdated wireless security protocol
A malicious USB drive containing malware
A backdoor installed in counterfeit network hardware
A phishing email with a malicious link
40
How does a wildcard certificate differ from a standard SSL certificate?
It encrypts data using a stronger algorithm
It is only valid for a specific IP address rather than a domain
It replaces the need for using TLS on a web server
It allows multiple subdomains to be covered under a single certificate
41
What is a key challenge of vulnerable software vectors?
They do not pose a risk unless they are installed via USB
May contain unknown or unpatched vulnerabilities that require updates
They are only dangerous if the software is agentless
They only impact mobile devices and not desktops or servers
42
Which tactic is commonly used in misinformation campaigns?
Brute forcing administrator passwords to gain unauthorized access
Spreading fake news through social media to manipulate public opinion
Deploying ransomware to encrypt critical files
Exploiting zero-day vulnerabilities in operating systems
43
Which of the following best describes eliciting information?
Stealing login credentials using keyloggers
Using brute force attacks to guess a victim's password
Manipulating a victim into providing information without them realizing it
Encrypting sensitive company data to protect it from hackers
44
Which of the following is a key motivation for a hacktivist?
Revenge and philosophical beliefs
Service disruption
Espionage for a foreign government
Financial gain
45
What is the main security concern with default credentials?
They prevent unauthorized users from logging in
They improve system performance by reducing authentication time
They provide easy access to systems if not changed
They make it harder for administrators to configure devices
46
Why are watering hole attacks effective?
Use social engineering to trick users into downloading malicious files
They only work against individuals who open email attachments
They exploit vulnerabilities in outdated operating systems
By targeting websites that are frequently visited by the intended victims
47
What is the primary goal of misinformation campaigns?
To block access to unauthorized websites
To improve search engine rankings for certain websites
To enhance cybersecurity awareness among the public
To spread factually incorrect information to create confusion and division
48
Which of the following is a real-world example of a watering hole attack?
A cybercriminal sending fraudulent wire transfer emails
A malware infection spreading through infected USB drives
An attacker compromising financial websites to target specific banks
A hacker using brute force attacks to guess administrator passwords

Digital Certificates, Threat Actor Types, Threat Vectors & Attack Surfaces, Social Engineering Flashcards | StudBud