Sec+: Types of attacks

What type of social engineering attack usually takes advantage of spammed email being sent out to a specific person or group of unsuspecting recipients?

• Vishing

• Smishing

• Whaling

• Spear Phishing

A misleading web address that targets a user incorrectly typing the website’s name directly in the address bar of their browser is referred to this type of attack.

• URL hijacking

• Phishing

• Impersonation

• Spamming

This kind of attack can occur when a person is performing sensitive work on a laptop in a public area such as a coffee shop

• Piggybacking

• Dumpster diving

• Shoulder surfing

• Smurfing

An evil twin is mostly likely a part of this kind of attack.

• Botnet

• Phishing

• Man-in-the-middle

• Zero day

What kind of attack takes advantage of an applications vulnerability of not being patched?

• DDoS

• Pharming

• Smurf

• Zero day

This wireless attack sends unsolicited messages to a Bluetooth enabled device.

• Bluejacking

• Bluesnarfing

• Jamming

• Bluebugging

Which application attacks directly target the database programs sitting behind the web content servers?

• SQL injection

• Session hijacking

• Cross-site scripting

• Command injection

Which application vulnerability can be exploited by providing a series of normal data inputs within a specific sequence and timing?

• Injection

• Request forgery

• Race condition

• Buffer overflow

This cryptographic attack has the attacker intercepting data transmissions, usually those with authentication credentials or encryption key exchanges, and then delaying or resending them.

• Session replay

• Replay

• Man-in-the-middle

• Session hijacking

What type of attack allows an attacker to interfere with the initial connection setup in order to trick legitimate clients into using weak or no encryption?

• Session hijacking

• Downgrade

• Man-in-the-middle

• Brute force