Chapter 2

Users in your organization receive email messages warning them of suspicious activity on their bank accounts. They are asked to click a link in the email to verify their online banking credentials. The URL in the link belongs to the .ru top-level DNS domain. Which kind of attack has occurred?

• Phishing
• Buffer overflow
• Virus
• Open SMTP relay

In your capacity as a security analyst, you need to stay updated with the latest threats. You're presently analyzing the most recent real-time updates on cyberthreats globally. Which of the following resources are you MOST likely using?

• Threat feeds
• Intelligence fusion
• Advisories and bulletins
• Threat hunting

An attack that targets senior executives and high-profile victims is referred to as what?

• Whaling
• Vishing
• Scrubbing
• Pharming

Which of the following best describes shoulder surfing?

• Someone nearby watching you enter your password on your computer and recording it.
• Guessing someone's password because it is so common or simple.
• Giving someone you trust your username and account password.
• Finding someone's password in the trash can and using it to access their account.

Which kind of virus operates only in memory and usually exploits a trusted application like PowerShell to circumvent traditional endpoint security solutions?

• Fileless virus.
• Worm.
• Ransomware.
• Remote Access Trojan (RAT).

Any attack involving human interaction of some kind is referred to as what?

• Social engineering
• Attacker manipulation
• A white hat hacker

An organization's receptionist received a phone call from an individual claiming to be a partner in a high-level project and requesting sensitive information. The individual is engaging in which type of social engineering?

• Social validation
• Commitment
• Persuasive
• Authority