SY0-601 Threats, Attacks & Vulnerabilities 4

Question 1

Which attack technique involves attempting every possible password combination until the correct one is found?

Accepted Answer

Brute force attack

Answer

A brute force attack systematically tries every possible combination of characters until the correct password is discovered.

Question 2

An attacker uses a precomputed table of hash values to quickly reverse password hashes. What type of attack is this?

Accepted Answer

Rainbow table attack

Answer

Rainbow table attacks use precomputed tables of plaintext-to-hash mappings to quickly crack password hashes without recalculating them.

Question 3

Which technique do attackers use to bypass application blacklists by disguising malicious input using encoding or alternative representations?

Accepted Answer

Obfuscation/camouflage

Answer

Obfuscation disguises malicious code or input (e.g., URL encoding, Unicode escapes) to evade detection by security controls.

Question 4

A malicious insider deliberately leaks sensitive company data to a competitor. How is this threat actor classified?

Accepted Answer

Insider threat

Answer

An insider threat is a current or former employee, contractor, or partner who misuses authorized access to harm the organization.

Question 5

Which attack exploits trust relationships to move from a compromised system to other systems within the network?

Accepted Answer

Lateral movement

Answer

Lateral movement techniques allow attackers to progressively move through a network by exploiting trust relationships between systems.

(SY0-601) CompTIA Security+ IT Certification Practice Test