Quiz
Module 2.1/2.2
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (38)
1A major online retailer experiences a sudden halt in its services during the peak holiday shopping season. It traces the cause back to an orchestrated distributed denial of service (DDoS) attack, which overwhelmed the retailer's servers with traffic, making it impossible for legitimate users to access the site. This attack BEST aligns with which type of threat motivation?
- AFinancial
- BService Disruption
- CDisinformation
- DEspionage
2Which type of threat actor is MOST likely to engage in cyber espionage with strategic or political motivations?
- ACompetitors
- BOrganized crime
- CHacktivist
- DNation-state
3The IT department at a large corporation noticed an unfamiliar software application running on its network. Upon investigation, they discovered that a team in the marketing department started using a new cloud-based project management tool to improve their workflow efficiency. The team did consult with the IT department before implementing this tool. In the context of cybersecurity threats, what does this situation BEST exemplify?
- ANation-state
- BCareless password management
- CShadow IT
- DInsider Threat
4What type of threat actor will attempt to exploit their authorized access within an organization for revenge or financial gain?
- AUnskilled attacker
- BInsider threat
- CNation-state
- DHacktivist
5A multinational corporation recently fell victim to a series of cyberattacks, disrupting services and leading to significant financial losses. After an investigation, the corporation found that these attacks were part of a systematic campaign to undermine the corporation's market position. The highly sophisticated attacks suggest the involvement of a well-resourced entity with specific strategic objectives. Which of the following motivations BEST describes this scenario?
- AFinancial
- BPolitical
- CRevenge
- DChaotic
6An environmental advocacy group uses cyber weapons to put companies at risk and promote its agenda. This scenario illustrates what type of threat actor?
- AInsider threats
- BHackers
- CHacktivists
- DAdvanced persistent threats (APTs)
7A targeted attack has a budget that can allocate physical and human resources to achieve its goals. This type of attack contains what attribute?
- AOpportunistic
- BSophistication
- CKnown threats
- DUnskilled attacker
8A cyber security analyst notices an unusual amount of data transmitted from an employee's company computer to an unknown external IP address. The employee has all necessary permissions to access externally transferred sensitive data. What type of threat actor is MOST likely responsible for this situation?
- AUnskilled attacker
- BInternal threat actor
- CNation-state
- DHacktivist
9Which type of threat actor is MOST likely to engage in cybercrime activities, such as financial fraud, blackmail, or extortion for profit, and often operates across the Internet from a different jurisdiction than their victims?
- AOrganized crime
- BHacktivist
- CNation-state
- DUnskilled attacker
10Which type of threat actor is MOST likely to initiate random, unsophisticated cyberattacks, often utilizing readily available hacking tools without a clear understanding of how they work?
- AInsider threat
- BHacktivist
- CUnskilled attacker
- DNation-state
11A prominent multinational corporation has experienced an unexpected spike in unauthorized network traffic aimed at its web servers. Upon investigation, the corporation discovered that the goal of this traffic was to disrupt its online services rather than gain unauthorized access or steal data. The attack started shortly after the corporation made a controversial policy decision that sparked a public backlash. Which type of threat actor is MOST likely responsible?
- AInsider threat
- BIndividual hacker
- CNation-state
- DHacktivist
12A global technology firm detected unauthorized access to its proprietary designs for an upcoming product. The intruders remained undetected for an extended period and extracted a large volume of confidential data without disrupting the company's operations. This stealthy, long-term breach aimed at acquiring secret information aligns BEST with which type of threat motivation?
- ARevenge
- BEspionage
- CChaotic
- DFinancial
13A group of people lost their jobs after their company filed for bankruptcy. These employees formed a closed hacktivist group to fashion a zero-day exploit targeting specific Windows operating systems (OS) on the company network. They will use internal influences to get the exploit onto the network. Which of the following factors will greatly influence the success of this attack? (Select the two best options.)
- ACriminal gang threats
- BRevenge for hardship
- CFormer colleague assistance
- DNation-state influence
14An employee suspected of modifying company invoices diverted funds from a company account to their private bank account. What kind of malicious actor type does this describe?
- ACompetitor
- BUnskilled attacker
- CHacktivist
- DInsider threat
15An international financial institution recently discovered a persistent and sophisticated cyber attack. The scale and sophistication of the attack suggest that the threat actor has access to significant resources. The nature of the attack indicates that the threat actor operates with an extended timeline and appears motivated by strategic advantage rather than immediate financial gain. Which type of threat actor is MOST likely involved?
- AIndividual hacker
- BHacktivist
- CInsider threat
- DNation-state
16A nation-state developed cyber weapons to achieve military influence and has the ability to obtain and maintain access to compromised networks. What should a cybersecurity team address when this occurs to their organization's compromised networks?
- AA hacktivist
- BA hacker
- CAn insider threat
- DAdvanced persistent threats (APT)
17A large multinational corporation experiences an advanced persistent threat (APT) to its network infrastructure. The company notices that the threat is consistent and has significantly escalated. The threat actor has substantial resources and is highly motivated to carry out its attack campaign. Which type of threat actor is MOST likely responsible for this threat?
- AInsider threat
- BIndividual hacker
- CHacktivist
- DNation-state
18Vishing is a type of phishing attack that uses which kind of vector?
- ASpear phishing
- BVoice or telephone
- CPharming
- DSMiShing
19Which social engineering technique involves pretending to be someone else and may use persuasive or coercive approaches to manipulate the target?
- APharming
- BImpersonation
- CWatering hole attack
- DPhishing
20An employee at a crypto security company receives an email that appears to be internal to the IT department. The email informs the employee to update the login credentials immediately to prevent account suspension. The "From" field in the email displays "it_support@cryptosecure.com," however, upon closer inspection, the employee notices the slightly misspelled domain name as "crypt0secure.com." What technique is the threat actor using in this phishing attempt? (Select the two best options.)
- ASpoofing
- BTyposquatting
- CBrand impersonation
- DPharming
21What technique does the threat actor use in a Bluetooth network attack to transmit malicious files to a user's device?
- ASpoofing a trusted access point to gain unauthorized access
- BExploiting vulnerabilities or misconfigurations in the Bluetooth protocol
- CObtaining credentials for remote access to the network
- DPhysically stealing a PC or laptop to execute the attack
22What term refers to the collective group of people (employees, contractors, suppliers, and customers) who represent a potential attack surface for an organization?
- AThreat actors
- BAttack vectors
- CHuman vector
- DSystem administrators
23Customers receive a seemingly genuine email from their trusted bank informing them that their passwords need updating. However, when authenticating, an attacker captures the customer's credentials. What kind of attack did the bank customers experience?
- AVishing
- BPhishing
- CSmiShing
- DWhaling
24A threat actor gains physical access to an organization's premises and attempts to perpetrate an attack on the wired network. What specific threat vectors associated with unsecured networks are likely used by the threat actor in this scenario?
- ARemote and wireless network
- BDefault credentials
- CBluetooth network
- DDirect access
25What describes systems that create risk because they no longer receive critical security updates and patches?
- AThin client
- BSandbox
- COperating system
- DLegacy system
26A representative at a company reports receiving numerous unsolicited phone calls seeking banking information for a credit report. Which social engineering variant is the finance director experiencing?
- ASmiShing
- BSpear phishing
- CWhaling
- DVishing
27A hacktivist group is intercepting multiple emails between a company and a few vendors and has learned that the company is planning to purchase new laptops and some Universal Serial Bus (USB) thumb drives. In what ways can the group breach the target company MOST effectively? (Select the two best options.)
- AAdd malicious USB drives
- BSteal an employee's laptop
- CCreate a fake social media account
- DInfiltrate the shipping company
28A text message purporting to be from a user's bank requests the recipient to click on a link to verify a recent transaction and provide security details. What BEST describes the type of attack used?
- ASmiShing
- BVishing
- CWatering hole attack
- DPhishing
29Employees at CloudCom receive a suspicious email claiming to be from "CloudCom Support," informing employees that their passwords need to be reset urgently due to a security breach. The email includes a link to a login page that looks identical to CloudCom's official site. What type of social engineering attack does this scenario exemplify?
- AWatering hole attack
- BPhishing
- CSmiShing
- DTyposquatting
30What social engineering attack relies on targeting individuals who frequent an unsecured third-party website to compromise their computers and gain access to a specific organization's systems?
- APharming
- BImpersonation
- CWatering hole
- DSpear phishing
31The cybersecurity manager of a large organization is investigating a recent security breach that occurred during office hours. Investigatory research shows that the suspect convinced the janitor to let them inside the building because they had forgotten their badge at home. Once inside, the suspect pulled the fire alarm and accessed the building's network room amongst the chaos. The intruder then attached a monitoring device to a network port before escaping unnoticed. Identify the social engineering technique the threat actor employed in this scenario.
- APretexting
- BImpersonation
- CVishing
- DPharming
32What is the term for a phishing attack conducted through a voice channel, such as a phone call?
- AVishing
- BSmiShing
- CPharming
- DPhishing
33A recent attack on a major retail chain resulted in stolen customer private information, including credit card information. The report explained that a heating, ventilation, and air conditioning (HVAC) contractor copied the information to an external hard drive while servicing an air conditioner unit and later uploaded the data to a cloud storage resource. A security engineer would classify this type of attack as which of the following?
- AUSB cable attack
- BBirthday attack
- CSupply chain attack
- DCloud-based attack
34An attacker is attempting to gather information about a person by using text messages. Which of the following describes the attacker's phishing technique?
- ASpam
- BSmishing
- CSPIM
- DVishing
35A company using Wi-Fi Protected Access (WPA) wireless security on their wireless access points (WAPs) uses Lightweight Extensible Authentication Protocol (LEAP) to authenticate users to the network. LEAP is vulnerable to password cracking. What other options does the company have to mitigate this vulnerability? (Select the two best options.)
- AFlexible Authentication via Secure Tunneling (EAP-FAST)
- BEAP-MD5
- CProtected Extensible Authentication Protocol (PEAP)
- DRADIUS federation
36The senior manager at CyberCorp receives an email from what appears to be a trusted colleague within the company. The email requests sensitive financial information to complete an urgent transaction and looks legitimate, displaying the colleague's name, company logo, and formatting. What type of sophisticated phishing attack occurs in this scenario?
- AMass mailer phishing
- BWhaling
- CBusiness email compromise
- DAngler phishing
37What social engineering technique involves the threat actor committing resources to accurately duplicate a company's logos, formatting, and communication style to make a phishing message or fake website visually compelling and convincing?
- ABrand impersonation
- BVishing
- CSpear phishing
- DPharming
38Which of the following is an example of a social engineering attack?
- AA fake bank email is sent to recipients asking them to update their account info via a link that leads to a fake site, capturing login details.
- BAn attacker floods a website's server with fake requests, making it slow or unresponsive to legitimate users.
- CA call from a threat actor posing as a remote sales representative to obtain the login credentials to a remote access server from the help desk.
- DAn employee sends information to HR, but an attacker secretly intercepts and manipulates the communication, unbeknownst to both employees.
Information
- Description
- 5 ComptiaSecurity+ Quiz on Module 2.1/2.2, created by Timotei Moscaliuc on 09/02/2025.
- Author
- Timotei Moscaliuc
- Language
- English
- Views
- 8
- Tags
- Rating
- No ratings yet Rate this quiz