Pre Assessment 2024-2025 Exam Questions And Answers
Which of the following is a threat actor employed by the victimized organization that
purchases and deploys their own devices in the enterprise network?
a. Cyberterrorist
b. Competitor
c. Broker
d. Shadow IT - Answer d. Shadow IT
The Accounts Payable department at your company informs you that an invoice was
marked paid, but the vendor has provided proof they never took any of the $ 783,296
payment. Accounts Payable has verified that the amount was deducted from the
company's accounts; however, the recipient account number does not agree with the
vendor's account number. You look at the transaction further and discover it was paid by
the Chief Financial Officer. He indicates he paid the invoice based on an after-hours,
past-due invoice from the vendor indicating they would be filing a civil action in court the
next morning. Instead of waiting for Accounts Payable to come in the next day to verify
the date of the invoice, the immediate full amount was paid by the chief financial officer.
What type of social engineering attack do you think your company has just become the
victim of?
a. Pharming
b. Credential harvesting
c. Phishing
d. Whaling - Answer d. Whaling
Which of the following SIEM capabilities can help filter multiple alerts detected by
different devices for the same event into a single alarm?
a. Event duplication
, b. Automated alerting
c. Event coalescing
d. Traffic analysis - Answer a. Event duplication
Seo-jun is a bug bounty hunter. He was contracted by an industrial organization to cause
as much damage as possible to the network security defences. Seo-jun gained initial
access to one system on the network through spearphishing, where he sent an email into
the network that installed a virus. Which of the following is the correct order of steps he
should follow to have repeated and long-term access to multiple systems in the network
with a highly privileged account?
a. Install backdoor, move laterally, and escalate privilege
b. Escalate privilege, move laterally, and install backdoor
c. Install backdoor, escalate privilege, move laterally
d. Move laterally, perform credential dumping, install backdoor -Answer b. Escalate
privilege, move laterally, and install backdoor
What would be the attack on a NoSQL database that has been compromised by
manipulated data because the application does not sanitize the input?
a. SQL injection
b. Trojan attack
c. XML injection
d. Backdoor attack - Answer c. XML injection
Smith installed new software on his computer used for meeting scheduling that
automatically sends e-mails and reminders to the recipient's computer. Shortly after the
installation, Smith realized that the software had also kicked in and started to track other
Which of the following is a threat actor employed by the victimized organization that
purchases and deploys their own devices in the enterprise network?
a. Cyberterrorist
b. Competitor
c. Broker
d. Shadow IT - Answer d. Shadow IT
The Accounts Payable department at your company informs you that an invoice was
marked paid, but the vendor has provided proof they never took any of the $ 783,296
payment. Accounts Payable has verified that the amount was deducted from the
company's accounts; however, the recipient account number does not agree with the
vendor's account number. You look at the transaction further and discover it was paid by
the Chief Financial Officer. He indicates he paid the invoice based on an after-hours,
past-due invoice from the vendor indicating they would be filing a civil action in court the
next morning. Instead of waiting for Accounts Payable to come in the next day to verify
the date of the invoice, the immediate full amount was paid by the chief financial officer.
What type of social engineering attack do you think your company has just become the
victim of?
a. Pharming
b. Credential harvesting
c. Phishing
d. Whaling - Answer d. Whaling
Which of the following SIEM capabilities can help filter multiple alerts detected by
different devices for the same event into a single alarm?
a. Event duplication
, b. Automated alerting
c. Event coalescing
d. Traffic analysis - Answer a. Event duplication
Seo-jun is a bug bounty hunter. He was contracted by an industrial organization to cause
as much damage as possible to the network security defences. Seo-jun gained initial
access to one system on the network through spearphishing, where he sent an email into
the network that installed a virus. Which of the following is the correct order of steps he
should follow to have repeated and long-term access to multiple systems in the network
with a highly privileged account?
a. Install backdoor, move laterally, and escalate privilege
b. Escalate privilege, move laterally, and install backdoor
c. Install backdoor, escalate privilege, move laterally
d. Move laterally, perform credential dumping, install backdoor -Answer b. Escalate
privilege, move laterally, and install backdoor
What would be the attack on a NoSQL database that has been compromised by
manipulated data because the application does not sanitize the input?
a. SQL injection
b. Trojan attack
c. XML injection
d. Backdoor attack - Answer c. XML injection
Smith installed new software on his computer used for meeting scheduling that
automatically sends e-mails and reminders to the recipient's computer. Shortly after the
installation, Smith realized that the software had also kicked in and started to track other
