ICT Cybersecurity Threats and Mitigation 3

Question 1

An attacker intercepts and alters communication between two parties without their knowledge. What type of attack is this?

Accepted Answer

Man-in-the-Middle (MitM) attack

Answer

A Man-in-the-Middle attack occurs when an attacker secretly intercepts and potentially alters communications between two parties who believe they are communicating directly.

Question 2

Which of the following best describes a botnet?

Accepted Answer

A collection of compromised computers controlled remotely by an attacker

Answer

A botnet is a network of malware-infected computers (bots) that an attacker controls remotely, often used for DDoS attacks, spam campaigns, or credential stuffing.

Question 3

What security technique involves sending fake credentials to attacker infrastructure to detect and slow down credential-stuffing attacks?

Accepted Answer

Credential canaries / honey credentials

Answer

Honey credentials (credential canaries) are fake login pairs seeded into data sets; when an attacker uses them, the defender receives an alert that stolen credentials are being used.

Question 4

A threat actor gains physical access to an office by following an authorized employee through a secured door. This is called what?

Accepted Answer

Tailgating (piggybacking)

Answer

Tailgating (or piggybacking) is a physical security attack where an unauthorized person follows an authorized individual through a secured entry point.

Question 5

Which encryption protocol replaced the vulnerable WEP standard for securing Wi-Fi networks?

Accepted Answer

WPA/WPA2 replaced WEP

Answer

WPA (Wi-Fi Protected Access) and later WPA2 replaced the easily crackable WEP (Wired Equivalent Privacy) protocol; WPA3 is the current strongest standard.

ICT - Information Communication Technology Practice Test

ICT - Information Communication Technology Practice Test

ICT Cybersecurity Threats and Mitigation 3