CCST Common Network Vulnerabilities 2

Question 1

What type of attack involves intercepting communication between two parties without their knowledge?

Accepted Answer

Man-in-the-Middle

Answer

Denial of Service

Answer

SQL injection

Answer

Cross-site scripting

Question 2

Which vulnerability allows attackers to overwhelm a network by flooding it with traffic?

Accepted Answer

DDoS attack

Answer

Phishing

Answer

Buffer overflow

Answer

Privilege escalation

Question 3

What is a zero-day vulnerability?

Accepted Answer

A previously unknown vulnerability with no available patch

Answer

A vulnerability patched within one day

Answer

A vulnerability that has existed for zero days

Answer

A vulnerability affecting day-zero firmware

Question 4

Which social engineering technique tricks users into clicking a malicious link disguised as a legitimate email?

Accepted Answer

Phishing

Answer

Tailgating

Answer

Shoulder surfing

Answer

Dumpster diving

Question 5

What does ARP spoofing allow an attacker to do on a local network?

Accepted Answer

Redirect network traffic through their machine

Answer

Bypass the firewall completely

Answer

Gain root access to the router

Answer

Disable all wireless connections

Question 6

Which type of malware encrypts a victim's files and demands payment for the decryption key?

Accepted Answer

Ransomware

Answer

Trojan horse

Answer

Adware

Answer

Rootkit