ICT Cybersecurity Threats and Mitigation 4

Question 1

Which type of threat actor is typically motivated by financial gain and operates as an organized criminal enterprise?

Accepted Answer

Cybercriminal group

Answer

Cybercriminal groups are primarily financially motivated, running ransomware-as-a-service, fraud schemes, and data theft for profit.

Question 2

What is DNS poisoning (cache poisoning)?

Accepted Answer

Inserting false DNS records to redirect users to malicious sites

Answer

DNS cache poisoning corrupts a DNS resolver's cache with fraudulent entries, causing users to be redirected to attacker-controlled IP addresses instead of legitimate sites.

Question 3

A penetration tester has no prior knowledge of the target system before the test begins. Which type of test is this?

Accepted Answer

Black-box testing

Answer

Black-box penetration testing simulates an external attacker with no insider knowledge, testing defenses from the perspective of an uninformed adversary.

Question 4

Which of the following is an example of a supply chain attack?

Accepted Answer

Compromising a trusted software vendor to distribute malware via legitimate updates

Answer

Supply chain attacks target less-secure vendors or software providers to reach the actual target, as demonstrated by the SolarWinds attack where malicious code was inserted into software updates.

Question 5

What is the purpose of a Security Information and Event Management (SIEM) system?

Accepted Answer

To aggregate, correlate, and analyze security logs from multiple sources for threat detection

Answer

A SIEM collects log data from across an organization's infrastructure, correlates events, and generates alerts to help security teams detect and respond to threats.

ICT - Information Communication Technology Practice Test

ICT - Information Communication Technology Practice Test

ICT Cybersecurity Threats and Mitigation 4