CCST Common Network Vulnerabilities 2

Question 1

What type of attack involves intercepting communication between two parties without their knowledge?

Accepted Answer

Man-in-the-Middle

Answer

A MitM attack intercepts and potentially alters communication between two parties who believe they are communicating directly.

Question 2

Which vulnerability allows attackers to overwhelm a network by flooding it with traffic?

Accepted Answer

DDoS attack

Answer

A DDoS attack uses multiple compromised systems to flood a target with traffic, making it unavailable to legitimate users.

Question 3

What is a zero-day vulnerability?

Accepted Answer

A previously unknown vulnerability with no available patch

Answer

A zero-day is unknown to the vendor with no patch available. Developers have had zero days to fix it.

Question 4

Which social engineering technique tricks users into clicking a malicious link disguised as a legitimate email?

Accepted Answer

Phishing

Answer

Phishing uses fraudulent emails from apparently trusted sources to trick recipients into revealing sensitive information.

Question 5

What does ARP spoofing allow an attacker to do on a local network?

Accepted Answer

Redirect network traffic through their machine

Answer

ARP spoofing sends fake ARP replies to associate the attacker's MAC with another device's IP, redirecting traffic.

(CCST) Cisco Certified Support Technician Practice Test