ISAC Cyber Threats and Vulnerabilities 1 — Questions and Answers
Question 1: Which of the following is an example of a phishing attack?
- Sending a fraudulent email that mimics a trusted organization to steal login credentials (Correct answer)
- Infecting a system with a virus that corrupts data
- Breaking into a network using stolen credentials
- Overloading a server with excessive traffic
Correct answer: Sending a fraudulent email that mimics a trusted organization to steal login credentials
Phishing is a type of social engineering attack where attackers attempt to trick individuals into revealing sensitive information, such as usernames and passwords. This is typically done by disguising themselves as a trustworthy entity in electronic communication, like an email from a bank or a well-known company. The goal is to deceive the recipient into clicking a malicious link or providing credentials on a fake website.
Question 2: Which type of malware is specifically designed to lock users out of their systems until a ransom is paid?
- Spyware
- Ransomware (Correct answer)
- Adware
- Trojan Horse
Correct answer: Ransomware
Ransomware is a malicious software that encrypts a victim's files or locks them out of their computer system. Attackers then demand a ransom, usually in cryptocurrency, in exchange for the decryption key or access restoration. This type of malware is specifically designed to extort money by holding data hostage.
Question 3: What is a zero-day vulnerability?
- A vulnerability discovered and patched immediately
- A flaw that attackers exploit before the vendor is aware of it (Correct answer)
- A virus that spreads within 24 hours
- An outdated software vulnerability
Correct answer: A flaw that attackers exploit before the vendor is aware of it
A zero-day vulnerability refers to a software flaw that is unknown to the vendor or developer, meaning there has been "zero days" for them to create a patch. Attackers discover and exploit these vulnerabilities before any fix is available, making them particularly dangerous. Once discovered, vendors typically work quickly to develop and release a patch.
Question 4: Which of the following is an example of a Distributed Denial of Service (DDoS) attack?
- Multiple systems overwhelming a target server with excessive traffic (Correct answer)
- Exploiting vulnerabilities in a web application
- Sending phishing emails to multiple employees in an organization
- Installing spyware to steal information from a single device
Correct answer: Multiple systems overwhelming a target server with excessive traffic
A Distributed Denial of Service (DDoS) attack involves multiple compromised computer systems, often referred to as a botnet, flooding a target server, service, or network with a deluge of internet traffic. This overwhelming volume of requests exhausts the target's resources, making it unavailable to legitimate users. The "distributed" aspect means the attack originates from many different sources, making it harder to block.
Question 5: Which of the following actions can help protect against social engineering attacks?
- Regularly updating software
- Using antivirus software
- Training employees to recognize suspicious behavior and requests (Correct answer)
- Encrypting sensitive files
Correct answer: Training employees to recognize suspicious behavior and requests
Social engineering attacks manipulate individuals into performing actions or divulging confidential information, often by exploiting human psychology. Technical safeguards alone are insufficient against these tactics. Therefore, educating employees to identify common social engineering ploys, such as phishing emails or deceptive phone calls, is crucial for building a strong human firewall and preventing successful attacks.
ISAC Cyber Threats and Vulnerabilities 1
Which of the following is an example of a phishing attack?