IASQ3Exam

Your company’s website has been receiving a ______________________, slowing it down significantly. After investigating, you determine it to be a Distributed Denial-of-Service (DDoS) attack, where numerous computers around the world are sending requests to your site continuously without their owners’ knowledge.

• Malware infection

• Phishing scam

• Massive volume of traffic

• Targeted advertisement

While inspecting a system, a technician notices that a software application is bypassing the usual ______________________ and gaining access to certain restricted files. The entry method, identified as Backdoor access, seems to avoid standard security protocols altogether.

• Security protocols

• Login authentication

• System firewalls

• User permissions

Your IT team finds that a piece of software on multiple devices within your organization is displaying ______________________ and redirecting users to promotional sites. This behavior is identified as Adware, which generates revenue by showing unwanted advertisements. What type of attack is most likely responsible?

• Unwanted pop-ups

• Redirecting traffic

• Malicious ads

• Forced downloads

A security weakness is discovered in a widely used content management system (CMS). Attackers craft a malicious query to exploit the flaw, allowing them to bypass authentication and gain access to sensitive user data stored in the system's database. What type of attack is this?

• SQL Injection

• Cross-Site Scripting (XSS)

• Directory Traversal

• File Inclusion

While monitoring network traffic, your IT team notices that an automated script is being used to flood the company’s network with ______________________, creating significant network delays. This program runs at a speed much higher than what a human could achieve. This behavior is identified as a Distributed Denial-of-Service (DDoS) attack, where systems are overwhelmed with excessive requests.

• HTTP requests

• Network traffic

• Automated scripts

• Delayed responses

A user receives an email asking them to reset their password through a link that leads to a fake login page designed to steal their credentials. What type of attack is this?

• Phishing

• Spoofing

• Keylogging

• SQL Injection

A user installs what they believe to be a legitimate utility software. However, after installation, the program quietly manipulates system settings and steals personal data without the user’s consent. What type of malware is this?

• Trojan Horse

• Spyware

• Rootkit

• Adware

A hacker impersonates IT support and convinces an employee to disclose their password over the phone, claiming to assist with a technical problem. What method was used to obtain this sensitive information?

• Social Engineering

• Phishing

• Spoofing

• Malware

It is an unwanted software that secretly monitors a user's activities on their device, gathering sensitive data like login details and personal information, often for malicious use.

• Spyware

• Phishing

• Trojan Horse

• Malware

An attacker captures the session ID of a logged-in user and uses it to access their account without needing to provide credentials, bypassing security measures.

• Spyware

• Session Hijacking

• Cross-Site Scripting (XSS)

• Session Spoofing