SY0-601 Threats, Attacks & Vulnerabilities 2 — Questions and Answers
Question 1: An attacker sends a specially crafted URL to a victim that, when clicked, causes the victim's browser to execute malicious scripts on a trusted website. What type of attack is this?
- SQL injection
- Cross-site scripting (XSS) (Correct answer)
- Cross-site request forgery (CSRF)
- Command injection
Correct answer: Cross-site scripting (XSS)
Reflected XSS attacks embed malicious scripts in URLs that execute in the victim's browser in the context of a trusted site.
Question 2: Which type of malware is specifically designed to record keystrokes and transmit them to an attacker?
- Rootkit
- Ransomware
- Keylogger (Correct answer)
- Worm
Correct answer: Keylogger
A keylogger captures keyboard input to steal credentials and sensitive information and sends it to the attacker.
Question 3: A threat actor uses a fraudulent website that looks identical to a bank's login page to steal credentials. Which attack technique is being used?
- Vishing
- Pharming
- Phishing (Correct answer)
- Typosquatting
Correct answer: Phishing
Phishing uses deceptive websites or communications mimicking legitimate entities to harvest user credentials.
Question 4: An attacker exploits a vulnerability in a web application to manipulate database queries and extract unauthorized data. What is this attack called?
- LDAP injection
- XML injection
- SQL injection (Correct answer)
- Command injection
Correct answer: SQL injection
SQL injection inserts malicious SQL statements into input fields to manipulate or extract database content.
Question 5: Which term describes a cyberattack where the attacker secretly positions themselves between two communicating parties to intercept and possibly alter messages?
- Replay attack
- On-path (man-in-the-middle) attack (Correct answer)
- Smurf attack
- Amplification attack
Correct answer: On-path (man-in-the-middle) attack
An on-path (MitM) attack intercepts communications between two parties without their knowledge, allowing eavesdropping or data manipulation.
Question 6: Which vulnerability scanning result indicates a flaw is reported but does not actually exist in the target system?
- True positive
- False negative
- True negative
- False positive (Correct answer)
Correct answer: False positive
A false positive occurs when a scanner reports a vulnerability that is not actually present, wasting remediation effort.
Question 7: A user receives a phone call from someone claiming to be IT support and is tricked into revealing their password. Which social engineering technique is this?
- Smishing
- Vishing (Correct answer)
- Spear phishing
- Watering hole attack
Correct answer: Vishing
Vishing (voice phishing) uses phone calls to manipulate victims into disclosing sensitive information.
SY0-601 Threats, Attacks & Vulnerabilities 2
An attacker sends a specially crafted URL to a victim that, when clicked, causes the victim's browser to execute malicious scripts on a trusted website.
What type of attack is this?