ISAC Cyber Threats and Vulnerabilities 2

Question 1

Which type of malware encrypts a victim's files and demands payment for the decryption key?

Accepted Answer

Ransomware

Answer

Ransomware encrypts the victim's data and demands a ransom, typically in cryptocurrency, in exchange for the decryption key.

Question 2

What is a 'zero-day' vulnerability?

Accepted Answer

A vulnerability unknown to the vendor with no available patch

Answer

A zero-day vulnerability is a software flaw that is unknown to the vendor and therefore has no patch, making it especially dangerous.

Question 3

In the context of network attacks, what is a 'man-in-the-middle' (MitM) attack?

Accepted Answer

An attacker secretly intercepts and possibly alters communication between two parties

Answer

In a MitM attack, the attacker secretly positions themselves between two communicating parties to intercept, read, or modify the data.

Question 4

What does 'SQL injection' allow an attacker to do?

Accepted Answer

Manipulate a database by inserting malicious SQL commands into input fields

Answer

SQL injection exploits poorly sanitized input fields to insert malicious SQL statements that can read, modify, or delete database content.

Question 5

Which of the following best describes a 'botnet'?

Accepted Answer

A collection of compromised computers controlled remotely by an attacker

Answer

A botnet is a network of infected devices (bots) that an attacker controls remotely, often used for DDoS attacks, spam, or credential theft.

(ISAC) International Society for the Advancement of Cytometry Practice Test