ISAC Cyber Threats and Vulnerabilities 3

Question 1

What is the primary goal of an Advanced Persistent Threat (APT)?

Accepted Answer

Gain long-term unauthorized access to a target network for espionage or data theft

Answer

APTs are stealthy, prolonged attacks typically sponsored by nation-states or organized groups, focused on maintaining persistent access for espionage or data exfiltration.

Question 2

Which of the following describes a 'watering hole' attack?

Accepted Answer

Compromising a website frequently visited by the intended victims

Answer

A watering hole attack compromises a legitimate website that the target group frequently visits, waiting for victims to come to the attacker.

Question 3

What is 'DNS poisoning' (DNS cache poisoning)?

Accepted Answer

Corrupting a DNS resolver's cache to redirect users to malicious IP addresses

Answer

DNS cache poisoning inserts fraudulent DNS records into a resolver's cache, causing users to be redirected to attacker-controlled servers.

Question 4

In cybersecurity, what is a 'logic bomb'?

Accepted Answer

Malware that detonates only when a specific condition or trigger is met

Answer

A logic bomb is malicious code that remains dormant until a specific condition (date, user action, or event) triggers it to execute.

Question 5

What distinguishes a 'worm' from a traditional virus?

Accepted Answer

Worms self-replicate and spread across networks without needing a host file

Answer

Unlike viruses that attach to host files, worms are self-contained programs that replicate and spread autonomously across networks.

(ISAC) International Society for the Advancement of Cytometry Practice Test

(ISAC) International Society for the Advancement of Cytometry Practice Test

ISAC Cyber Threats and Vulnerabilities 3