SY0-601 Threats, Attacks & Vulnerabilities 5

Question 1

Which term describes software that appears legitimate but contains hidden malicious functionality?

Accepted Answer

Trojan horse

Answer

A Trojan horse disguises itself as legitimate software to trick users into installing it, then executes its malicious payload.

Question 2

An attacker targets the CEO specifically with a highly sophisticated phishing email crafted to appear as a legitimate board communication. What is this attack called?

Accepted Answer

Whaling

Answer

Whaling is a form of spear phishing specifically targeting high-profile executives (the 'big fish') within an organization.

Question 3

Which DNS attack involves corrupting the DNS cache to redirect users to malicious IP addresses without their knowledge?

Accepted Answer

DNS spoofing / cache poisoning

Answer

DNS cache poisoning injects false DNS records into a resolver's cache, redirecting users to attacker-controlled servers.

Question 4

Which type of malware self-replicates across networks without requiring a host file or human interaction?

Accepted Answer

Worm

Answer

A worm is self-replicating malware that spreads autonomously across networks by exploiting vulnerabilities, requiring no host file.

Question 5

An attacker gains access to a low-privilege account on a system and then exploits a vulnerability to gain administrative access. What is this technique called?

Accepted Answer

Privilege escalation

Answer

Privilege escalation is the process of gaining higher-level permissions than initially granted, moving from limited to administrative access.

(SY0-601) CompTIA Security+ IT Certification Practice Test

(SY0-601) CompTIA Security+ IT Certification Practice Test

SY0-601 Threats, Attacks & Vulnerabilities 5