SY0-601 Threats, Attacks & Vulnerabilities 2

Question 1

An attacker sends a specially crafted URL to a victim that, when clicked, causes the victim's browser to execute malicious scripts on a trusted website. What type of attack is this?

Accepted Answer

Cross-site scripting (XSS)

Answer

Reflected XSS attacks embed malicious scripts in URLs that execute in the victim's browser in the context of a trusted site.

Question 2

Which type of malware is specifically designed to record keystrokes and transmit them to an attacker?

Accepted Answer

Keylogger

Answer

A keylogger captures keyboard input to steal credentials and sensitive information and sends it to the attacker.

Question 3

A threat actor uses a fraudulent website that looks identical to a bank's login page to steal credentials. Which attack technique is being used?

Accepted Answer

Phishing

Answer

Phishing uses deceptive websites or communications mimicking legitimate entities to harvest user credentials.

Question 4

An attacker exploits a vulnerability in a web application to manipulate database queries and extract unauthorized data. What is this attack called?

Accepted Answer

SQL injection

Answer

SQL injection inserts malicious SQL statements into input fields to manipulate or extract database content.

Question 5

Which term describes a cyberattack where the attacker secretly positions themselves between two communicating parties to intercept and possibly alter messages?

Accepted Answer

On-path (man-in-the-middle) attack

Answer

An on-path (MitM) attack intercepts communications between two parties without their knowledge, allowing eavesdropping or data manipulation.

(SY0-601) CompTIA Security+ IT Certification Practice Test

(SY0-601) CompTIA Security+ IT Certification Practice Test

SY0-601 Threats, Attacks & Vulnerabilities 2