SY0-601 Threats, Attacks & Vulnerabilities 3

Question 1

Which attack involves flooding a target system with traffic from multiple compromised hosts to make a service unavailable?

Accepted Answer

Distributed denial-of-service (DDoS)

Answer

A DDoS attack uses a botnet of many compromised systems to overwhelm a target with traffic, denying service to legitimate users.

Question 2

An attacker compromises a website frequently visited by members of a target organization and embeds malware there. What type of attack is this?

Accepted Answer

Watering hole attack

Answer

A watering hole attack infects a website known to be visited by the intended victims, exploiting their trust in that site.

Question 3

Which type of attack sends forged ARP messages to associate the attacker's MAC address with the IP address of a legitimate host?

Accepted Answer

ARP spoofing

Answer

ARP spoofing (poisoning) links the attacker's MAC address to a legitimate IP, redirecting LAN traffic through the attacker.

Question 4

A newly released software patch notes that a vulnerability was being exploited before the vendor was aware of it. What category does this vulnerability fall under?

Accepted Answer

Zero-day vulnerability

Answer

A zero-day vulnerability is one that is exploited before the vendor knows about it, leaving zero days to develop a fix.

Question 5

Which threat actor type is typically motivated by financial gain and operates as a professional criminal organization?

Accepted Answer

Organized crime

Answer

Organized crime groups are primarily financially motivated, conducting activities like ransomware campaigns and fraud for profit.

(SY0-601) CompTIA Security+ IT Certification Practice Test

(SY0-601) CompTIA Security+ IT Certification Practice Test

SY0-601 Threats, Attacks & Vulnerabilities 3