AAQ IT Unit 2 A2.2 Attack Vectors

Which of the following is an example of an attack vector used by cybercriminals?

• Physical attacks

• Social engineering

• Malware

• Web-based

• Network-based

Fill in the blank: An attack vector describes the methods that a cybercriminal uses to exploit a _________

• security vulnerability

• network cable

• user password

• firewall rule

What is the total number of possible attack vectors called?

• Attack surface

• Threat model

• Security perimeter

• Vulnerability index

Attack vectors can only be external to an organisation.

• True

• False

Which of the following is NOT an example of an attack vector?

• Network-based

• Web-based

• Malware

• Social engineering

• Strong password policy

Match the following attack vectors to their descriptions:

• Physical access to systems

• Social engineering

• Exploiting human psychology

• Malware

• Exploiting network vulnerabilities

• Physical attacks

• Malicious software

• Web-based

• Attacks via websites

• Network-based

Fill in the blank: An attacker doesn't need to decrypt or read the data — instead, they passively eavesdrop on ________, timing, frequency, and volume of traffic.

• packet size

• encryption key

• user credentials

• IP address

Using deauthentication can break communications between routers and devices.

• True

• False

What is the main purpose of traffic analysis in wireless attack vectors?

• To increase network speed

• To determine the load on a network and identify important events

• To encrypt data

• To physically damage devices

What is a deauthentication (deauth) attack?

• An attack where a hacker sends fake deauth frames to disconnect a device from the network

• An attack that steals passwords directly

• An attack that only affects wired networks

• An attack that encrypts files on a device