CTS 1120 Midterm Review Questions With Correct Answers

CTS 1120 Midterm Review Questions
With Correct Answers

Which type of threat actor would benefit the most from accessing your
| | | | | | | | | | | |



enterprise's new machine learning algorithm research and development
| | | | | | |



program?
|




Competitors




Which of the following types of platforms is known for its vulnerabilities
| | | | | | | | | | | |



due to age?
| |




Legacy platform |




Your enterprise has played fast and loose with customer information for
| | | | | | | | | | |



years. While there has been no significant breach of information that
| | | | | | | | | | |



could damage the organization and/or their customers, many in the
| | | | | | | | | |



enterprise feel it is only a matter of time before a major leak
| | | | | | | | | | | | |



occurs.Which type of threat actor is an employee who wishes to
| | | | | | | | | | |



personally ensure that the enterprise is exposed and blocked from
| | | | | | | | | |



accessing their customers' information until they ensure more secure
| | | | | | | | |



protocols?

,Hacktivist




Threat actors focused on financial gain often attack which of the
| | | | | | | | | | |



following main target categories?
| | |




Individual users |




Which issue can arise from security updates and patches?
| | | | | | | |




Difficulty patching firmware
| |




Which of the following is an attack vector used by threat actors to
| | | | | | | | | | | | |



penetrate a system? | |




Email




What is a variation of a common social engineering attack targeting a
| | | | | | | | | | | |



specific user? |




Spear phishing
|

,Which of the following is a social engineering method that attempts to
| | | | | | | | | | | |



influence the subject before the event occurs?
| | | | | |




Prepending




Which attack embeds malware-distributing links in instant messages?
| | | | | | |




Spim




Your enterprise experienced several technical issues over the last few
| | | | | | | | | |



days. There were multiple instances of passwords needing to be
| | | | | | | | | |



changed and other issues causing downtime. Management has started
| | | | | | | | |



receiving voicemails regarding fraudulent activities on their accounts.
| | | | | | | |



While the voicemails sound authentic, the help desk concludes that
| | | | | | | | | |



they are fake.What type of malicious activity will this be considered?
| | | | | | | | | |




Vishing




Attackers have taken over a site commonly used by an enterprise's
| | | | | | | | | | |



leadership team to order new raw materials. The site is also visited by
| | | | | | | | | | | | |



leadership at several other enterprises, so taking this site will allow for
| | | | | | | | | | | |



attacks on many organizations.Which type of malicious activity is this?
| | | | | | | | |




Watering hole |

, Over the last few days, several employees in your enterprise reported
| | | | | | | | | | |



seeing strange messages containing links in their company's IM account.
| | | | | | | | |



Even though no one has clicked on the messages, they are spreading
| | | | | | | | | | | | |



throughout the network.Which type of malicious activity is this?
| | | | | | | |




Spimming




Which threat actors sell their knowledge to other attackers or
| | | | | | | | | |



governments?
Brokers




Which of the following is the most common method for delivering
| | | | | | | | | | |



malware?
Email




Which of the following computing platforms is highly vulnerable to
| | | | | | | | | |



attacks?
Legacy