Security+ Attacks Quiz: 75 Practice Questions, Name That Attack
75 questions for the Security+ SY0-701 exam, each answer explained. Watch it here, try the questions yourself, or read the transcript.
Questions in this video
Tap an answer to see why it is right or wrong. Tap it again to reset.
Question 1 Play from 00:00
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Typosquatting uses look-alike domains.
Not this one. Try another answer.
Why B is wrong
A zero-day is an unknown, unpatched flaw.
Right, C is the answer.
Why C is right
A supply chain attack reaches victims through a trusted supplier's product or service.
Not this one. Try another answer.
Why D is wrong
A watering hole compromises a website victims visit.
Question 2 Play from 01:14
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Cross-site scripting runs script in other users' browsers.
Right, B is the answer.
Why B is right
SQL injection inserts SQL code into input that is placed directly into a database query.
Not this one. Try another answer.
Why C is wrong
Directory traversal reaches files outside the web root.
Not this one. Try another answer.
Why D is wrong
A buffer overflow writes past a memory boundary.
Question 3 Play from 02:23
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A downgrade attack forces weaker protocols.
Right, B is the answer.
Why B is right
A collision is two different inputs giving the same hash, which breaks integrity checks.
Not this one. Try another answer.
Why C is wrong
A replay attack resends captured traffic.
Not this one. Try another answer.
Why D is wrong
A rainbow table cracks password hashes.
Question 4 Play from 03:28
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A worm self-replicates.
Not this one. Try another answer.
Why B is wrong
Ransomware encrypts files for payment.
Right, C is the answer.
Why C is right
Spyware secretly gathers information about a user and sends it elsewhere.
Not this one. Try another answer.
Why D is wrong
A logic bomb waits for a trigger.
Question 5 Play from 04:29
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A replay attack resends captured traffic.
Not this one. Try another answer.
Why B is wrong
MAC flooding overloads a switch table.
Not this one. Try another answer.
Why C is wrong
ARP poisoning corrupts IP to MAC mappings.
Right, D is the answer.
Why D is right
A SYN flood leaves half-open connections that exhaust the server's resources.
Question 6 Play from 05:38
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A worm self-replicates.
Right, B is the answer.
Why B is right
A rootkit gains deep, privileged access and hides itself and other malware.
Not this one. Try another answer.
Why C is wrong
A keylogger records keystrokes.
Not this one. Try another answer.
Why D is wrong
Ransomware encrypts files for payment.
Question 7 Play from 06:40
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Brute force tries every possible combination until one works.
Not this one. Try another answer.
Why B is wrong
Credential stuffing reuses leaked pairs.
Not this one. Try another answer.
Why C is wrong
A birthday attack finds hash collisions.
Not this one. Try another answer.
Why D is wrong
Password spraying tries few passwords on many accounts.
Question 8 Play from 07:40
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Jamming uses radio noise, not frames.
Right, B is the answer.
Why B is right
A deauthentication attack abuses Wi-Fi management frames to kick clients off the network.
Not this one. Try another answer.
Why C is wrong
Bluesnarfing steals Bluetooth data.
Not this one. Try another answer.
Why D is wrong
An evil twin imitates an access point.
Question 9 Play from 08:45
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Deauthentication uses forged management frames, not noise.
Not this one. Try another answer.
Why B is wrong
An evil twin imitates a real access point.
Right, C is the answer.
Why C is right
Jamming disrupts wireless communication with radio interference.
Not this one. Try another answer.
Why D is wrong
Bluejacking sends unsolicited Bluetooth messages.
Question 10 Play from 09:51
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Side loading installs apps from unofficial sources.
Not this one. Try another answer.
Why B is wrong
Pass the hash reuses a stolen hash.
Right, C is the answer.
Why C is right
Privilege escalation gains higher permissions than the account was given.
Not this one. Try another answer.
Why D is wrong
Session hijacking takes over another user's session.
Show all 75 questionsShow fewer questions
Question 11 Play from 10:55
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
ARP poisoning corrupts IP to MAC mappings, usually to set up an on-path attack.
Not this one. Try another answer.
Why B is wrong
DNS poisoning corrupts name to IP answers.
Not this one. Try another answer.
Why C is wrong
MAC flooding overloads a switch table.
Not this one. Try another answer.
Why D is wrong
VLAN hopping reaches another VLAN.
Question 12 Play from 12:05
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Bluejacking sends Bluetooth messages.
Not this one. Try another answer.
Why B is wrong
Typosquatting uses look-alike domains.
Not this one. Try another answer.
Why C is wrong
Jailbreaking removes iOS restrictions.
Right, D is the answer.
Why D is right
Side loading installs apps from unofficial sources that skip store vetting.
Question 13 Play from 13:08
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
MFA fatigue spams push approvals, hoping the user accepts one.
Not this one. Try another answer.
Why B is wrong
Password spraying tries common passwords on many accounts.
Not this one. Try another answer.
Why C is wrong
Pass the hash reuses a stolen password hash.
Not this one. Try another answer.
Why D is wrong
A replay attack resends captured traffic.
Question 14 Play from 14:18
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
A logic bomb runs its payload when a specific condition is met.
Not this one. Try another answer.
Why B is wrong
A worm self-replicates.
Not this one. Try another answer.
Why C is wrong
A rootkit hides its presence.
Not this one. Try another answer.
Why D is wrong
A Trojan hides inside apparently useful software.
Question 15 Play from 15:21
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A rainbow table cracks the hash to find the password.
Not this one. Try another answer.
Why B is wrong
A birthday attack finds hash collisions.
Right, C is the answer.
Why C is right
Pass the hash authenticates with the hash itself, so the plaintext password is never needed.
Not this one. Try another answer.
Why D is wrong
Password spraying guesses common passwords.
Question 16 Play from 16:28
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Tailgating is physical entry behind someone.
Right, B is the answer.
Why B is right
Phishing uses fraudulent email, sent widely, to trick people into giving up credentials.
Not this one. Try another answer.
Why C is wrong
Whaling targets senior executives, not thousands of customers.
Not this one. Try another answer.
Why D is wrong
Vishing is done over voice calls.
Question 17 Play from 17:35
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Spyware secretly gathers information.
Not this one. Try another answer.
Why B is wrong
A rootkit hides deep in the system.
Right, C is the answer.
Why C is right
Bloatware is unnecessary preinstalled software that wastes resources and adds risk.
Not this one. Try another answer.
Why D is wrong
A Trojan disguises malicious code as useful software.
Question 18 Play from 18:40
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Misinformation is false information shared without intent to deceive.
Not this one. Try another answer.
Why B is wrong
Typosquatting uses look-alike domains.
Not this one. Try another answer.
Why C is wrong
Pretexting is an invented story told to one target.
Right, D is the answer.
Why D is right
Disinformation is false information spread on purpose to deceive.
Question 19 Play from 19:42
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A worm self-replicates.
Not this one. Try another answer.
Why B is wrong
A logic bomb waits for a trigger.
Not this one. Try another answer.
Why C is wrong
A rootkit hides its presence.
Right, D is the answer.
Why D is right
A keylogger captures keystrokes, such as passwords and messages.
Question 20 Play from 20:39
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Typosquatting uses look-alike domain names to catch users who misread or mistype a URL.
Not this one. Try another answer.
Why B is wrong
Pharming redirects the real address to a fake site.
Not this one. Try another answer.
Why C is wrong
A watering hole compromises a site victims already visit.
Not this one. Try another answer.
Why D is wrong
DNS poisoning corrupts DNS records or caches.
Question 21 Play from 21:50
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Typosquatting uses look-alike domains.
Not this one. Try another answer.
Why B is wrong
DNS poisoning corrupts DNS answers.
Right, C is the answer.
Why C is right
DNS tunneling hides data or commands inside DNS traffic to slip past controls.
Not this one. Try another answer.
Why D is wrong
Amplified DDoS floods a victim.
Question 22 Play from 22:57
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Dumpster diving is collecting useful information from discarded material, which is why shredding matters.
Not this one. Try another answer.
Why B is wrong
Pretexting is an invented story.
Not this one. Try another answer.
Why C is wrong
Tailgating is physical entry behind someone.
Not this one. Try another answer.
Why D is wrong
Shoulder surfing is watching someone's screen.
Question 23 Play from 24:04
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Vishing is voice phishing: the attacker uses a phone call to get information.
Not this one. Try another answer.
Why B is wrong
Smishing uses text messages.
Not this one. Try another answer.
Why C is wrong
Tailgating is physical entry behind someone.
Not this one. Try another answer.
Why D is wrong
Phishing uses email.
Question 24 Play from 25:07
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
XSS runs injected script in the browser.
Not this one. Try another answer.
Why B is wrong
A replay attack resends captured traffic.
Not this one. Try another answer.
Why C is wrong
SSRF makes the server send requests.
Right, D is the answer.
Why D is right
CSRF tricks a logged-in user's browser into sending an unwanted request; anti-CSRF tokens defend against it.
Question 25 Play from 26:21
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Pass the hash reuses a hash, not a password.
Not this one. Try another answer.
Why B is wrong
Brute force tries every combination.
Not this one. Try another answer.
Why C is wrong
Password spraying uses common passwords, not leaked pairs.
Right, D is the answer.
Why D is right
Credential stuffing exploits password reuse with leaked credential pairs.
Question 26 Play from 27:28
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Spyware collects information.
Right, B is the answer.
Why B is right
A virus attaches to files and needs user action to execute and spread.
Not this one. Try another answer.
Why C is wrong
A worm spreads on its own.
Not this one. Try another answer.
Why D is wrong
A rootkit hides its presence.
Question 27 Play from 28:28
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Rainbow tables are precomputed hash lookups; salting each password defeats them.
Not this one. Try another answer.
Why B is wrong
Password spraying is an online guessing attack.
Not this one. Try another answer.
Why C is wrong
A birthday attack finds hash collisions.
Not this one. Try another answer.
Why D is wrong
Credential stuffing reuses leaked pairs.
Question 28 Play from 29:38
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Directory traversal uses dot-dot-slash sequences to reach files outside the allowed folder.
Not this one. Try another answer.
Why B is wrong
XSS runs script in browsers.
Not this one. Try another answer.
Why C is wrong
Command injection runs operating system commands.
Not this one. Try another answer.
Why D is wrong
SQL injection attacks a database.
Question 29 Play from 30:49
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
MAC flooding fills the switch's MAC table so it behaves like a hub, letting the attacker sniff traffic.
Not this one. Try another answer.
Why B is wrong
VLAN hopping reaches another VLAN.
Not this one. Try another answer.
Why C is wrong
Jamming disrupts wireless signals.
Not this one. Try another answer.
Why D is wrong
ARP poisoning corrupts IP to MAC mappings.
Question 30 Play from 31:58
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Cross-site scripting, or XSS, injects script that runs in other users' browsers.
Not this one. Try another answer.
Why B is wrong
CSRF forces a user's browser to send a request.
Not this one. Try another answer.
Why C is wrong
SQL injection targets the database.
Not this one. Try another answer.
Why D is wrong
Directory traversal reaches restricted files.
Question 31 Play from 33:08
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A DDoS overwhelms a target.
Not this one. Try another answer.
Why B is wrong
Privilege escalation gains higher rights on a system.
Not this one. Try another answer.
Why C is wrong
A replay attack resends captured traffic later.
Right, D is the answer.
Why D is right
An on-path attack, once called man in the middle, intercepts and can alter communications.
Question 32 Play from 34:16
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Command injection runs shell commands.
Right, B is the answer.
Why B is right
LDAP injection manipulates a directory query filter through unsanitised input.
Not this one. Try another answer.
Why C is wrong
SQL injection targets a database.
Not this one. Try another answer.
Why D is wrong
Directory traversal reaches files by path.
Question 33 Play from 35:26
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A collision attack finds two inputs with the same hash.
Not this one. Try another answer.
Why B is wrong
A downgrade attack forces weaker protocols.
Not this one. Try another answer.
Why C is wrong
Brute force guesses passwords.
Right, D is the answer.
Why D is right
A replay attack resends captured valid traffic; timestamps and nonces defend against it.
Question 34 Play from 36:33
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Bluesnarfing is unauthorised access to data over Bluetooth.
Not this one. Try another answer.
Why B is wrong
Bluejacking only sends unsolicited messages.
Not this one. Try another answer.
Why C is wrong
An evil twin imitates a Wi-Fi access point.
Not this one. Try another answer.
Why D is wrong
Jamming disrupts signals.
Question 35 Play from 37:36
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
ARP poisoning corrupts IP to MAC mappings.
Not this one. Try another answer.
Why B is wrong
DNS tunneling hides data in DNS.
Right, C is the answer.
Why C is right
VLAN hopping uses switch spoofing or double tagging to reach another VLAN.
Not this one. Try another answer.
Why D is wrong
MAC flooding overloads a switch table.
Question 36 Play from 38:42
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Typosquatting relies on a mistyped look-alike name.
Right, B is the answer.
Why B is right
DNS poisoning plants false records so a real name resolves to an attacker's address.
Not this one. Try another answer.
Why C is wrong
ARP poisoning corrupts IP to MAC mappings.
Not this one. Try another answer.
Why D is wrong
A watering hole compromises a real site.
Question 37 Play from 39:50
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SQL injection attacks a database query.
Right, B is the answer.
Why B is right
SSRF tricks the server into sending requests to internal systems on the attacker's behalf.
Not this one. Try another answer.
Why C is wrong
Directory traversal reads files by path.
Not this one. Try another answer.
Why D is wrong
CSRF abuses the user's browser, not the server.
Question 38 Play from 41:06
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
An integer overflow happens when a value goes beyond what its data type can hold and wraps around.
Not this one. Try another answer.
Why B is wrong
A race condition abuses timing.
Not this one. Try another answer.
Why C is wrong
Memory injection inserts code into a process.
Not this one. Try another answer.
Why D is wrong
A buffer overflow writes past a memory buffer.
Question 39 Play from 42:16
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
A buffer overflow writes past a buffer's boundary into adjacent memory.
Not this one. Try another answer.
Why B is wrong
SQL injection attacks a database.
Not this one. Try another answer.
Why C is wrong
An integer overflow wraps a number past its maximum.
Not this one. Try another answer.
Why D is wrong
A race condition abuses timing.
Question 40 Play from 43:21
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A logic bomb waits for a trigger condition.
Right, B is the answer.
Why B is right
A Trojan pretends to be useful software while hiding a malicious function.
Not this one. Try another answer.
Why C is wrong
Ransomware encrypts files for payment.
Not this one. Try another answer.
Why D is wrong
A worm spreads on its own.
Question 41 Play from 44:21
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A logic bomb waits for a trigger.
Not this one. Try another answer.
Why B is wrong
A race condition abuses timing between a check and a use.
Not this one. Try another answer.
Why C is wrong
Side loading installs apps from unofficial sources.
Right, D is the answer.
Why D is right
Memory injection places malicious code into another process's memory space.
Question 42 Play from 45:29
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
A distributed denial of service uses many sources at once to overwhelm a target.
Not this one. Try another answer.
Why B is wrong
DNS poisoning corrupts name resolution.
Not this one. Try another answer.
Why C is wrong
An on-path attack intercepts traffic.
Not this one. Try another answer.
Why D is wrong
A replay attack resends captured traffic.
Question 43 Play from 46:34
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
XSS runs script in browsers.
Not this one. Try another answer.
Why B is wrong
LDAP injection targets directory queries.
Right, C is the answer.
Why C is right
Command injection runs attacker-supplied operating system commands through a vulnerable app.
Not this one. Try another answer.
Why D is wrong
SQL injection targets database queries.
Question 44 Play from 47:44
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Jamming disrupts signals.
Not this one. Try another answer.
Why B is wrong
Smishing uses SMS text messages.
Right, C is the answer.
Why C is right
Bluejacking sends unsolicited messages over Bluetooth, but does not steal data.
Not this one. Try another answer.
Why D is wrong
Bluesnarfing steals data.
Question 45 Play from 48:45
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A rainbow table cracks stolen hashes offline.
Not this one. Try another answer.
Why B is wrong
Brute force tries many passwords on one account.
Right, C is the answer.
Why C is right
Password spraying tries a few likely passwords across many accounts, staying under lockout limits.
Not this one. Try another answer.
Why D is wrong
Credential stuffing reuses leaked username and password pairs.
Question 46 Play from 49:54
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
ARP poisoning maps a MAC address to another device's IP.
Not this one. Try another answer.
Why B is wrong
A replay attack resends captured traffic.
Not this one. Try another answer.
Why C is wrong
DNS poisoning corrupts DNS answers.
Right, D is the answer.
Why D is right
An amplified, reflected DDoS turns small spoofed requests into large responses aimed at the victim.
Question 47 Play from 51:06
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A rootkit hides deep in the system.
Right, B is the answer.
Why B is right
Ransomware encrypts data and demands payment for the key.
Not this one. Try another answer.
Why C is wrong
A logic bomb runs when a condition is met.
Not this one. Try another answer.
Why D is wrong
Spyware secretly collects information.
Question 48 Play from 52:05
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A DDoS floods a target with traffic.
Right, B is the answer.
Why B is right
An environmental attack targets power, cooling or other building systems that IT depends on.
Not this one. Try another answer.
Why C is wrong
Jamming disrupts wireless signals.
Not this one. Try another answer.
Why D is wrong
A logic bomb is code that waits for a trigger.
Question 49 Play from 53:11
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Bluejacking sends Bluetooth messages.
Not this one. Try another answer.
Why B is wrong
Shoulder surfing watches screens or keypads.
Right, C is the answer.
Why C is right
RFID cloning reads and copies access badge data to create duplicates.
Not this one. Try another answer.
Why D is wrong
Tailgating follows someone through a door.
Question 50 Play from 54:16
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Side loading installs apps from unofficial sources.
Not this one. Try another answer.
Why B is wrong
A supply chain attack compromises a vendor or its product.
Right, C is the answer.
Why C is right
A zero-day is a vulnerability exploited before the vendor has a fix.
Not this one. Try another answer.
Why D is wrong
A misconfiguration is a settings mistake, not an unknown flaw.
Question 51 Play from 55:21
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A birthday attack finds hash collisions.
Not this one. Try another answer.
Why B is wrong
Password spraying targets many live accounts with few passwords.
Not this one. Try another answer.
Why C is wrong
Pass the hash uses the hash itself, without cracking it.
Right, D is the answer.
Why D is right
A dictionary attack guesses with a wordlist of likely passwords.
Question 52 Play from 56:35
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Vishing uses voice calls.
Not this one. Try another answer.
Why B is wrong
A watering hole attack compromises a website the victims visit.
Not this one. Try another answer.
Why C is wrong
Whaling targets executives.
Right, D is the answer.
Why D is right
Smishing is phishing by SMS text message.
Question 53 Play from 57:35
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Smishing uses text messages.
Not this one. Try another answer.
Why B is wrong
Typosquatting relies on mistyped web addresses.
Not this one. Try another answer.
Why C is wrong
Vishing uses phone calls.
Right, D is the answer.
Why D is right
Whaling is a targeted phishing attack aimed at a senior executive.
Question 54 Play from 58:36
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Shoulder surfing is watching someone's screen or keypad.
Not this one. Try another answer.
Why B is wrong
Dumpster diving is searching discarded material.
Not this one. Try another answer.
Why C is wrong
Pretexting is an invented story to get information.
Right, D is the answer.
Why D is right
Tailgating is following an authorised person through a controlled entrance.
Question 55 Play from 59:38
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Disinformation is spread on purpose.
Not this one. Try another answer.
Why B is wrong
Pretexting is an invented story to get information.
Right, C is the answer.
Why C is right
Misinformation is false information spread without the intent to deceive.
Not this one. Try another answer.
Why D is wrong
Impersonation is pretending to be someone else.
Question 56 Play from 1:00:48
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Typosquatting relies on a mistyped name.
Right, B is the answer.
Why B is right
Pharming redirects users from a legitimate address to a fake site, for example by changing the hosts file.
Not this one. Try another answer.
Why C is wrong
Phishing tricks users with fraudulent messages.
Not this one. Try another answer.
Why D is wrong
A watering hole compromises a real site.
Question 57 Play from 1:01:55
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A honeypot is a decoy set up by defenders.
Not this one. Try another answer.
Why B is wrong
A Bluetooth beacon broadcasts location signals.
Not this one. Try another answer.
Why C is wrong
A jammer disrupts wireless signals.
Right, D is the answer.
Why D is right
A rogue access point is an unauthorised AP connected to the network, creating a back door.
Question 58 Play from 1:03:03
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Side loading installs apps from outside the store, which jailbreaking may allow.
Not this one. Try another answer.
Why B is wrong
VM escape breaks out of a virtual machine.
Right, C is the answer.
Why C is right
Jailbreaking removes iOS restrictions, weakening the device's built-in protections.
Not this one. Try another answer.
Why D is wrong
Bluesnarfing steals data over Bluetooth.
Question 59 Play from 1:04:14
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Tailgating is physical entry behind someone.
Not this one. Try another answer.
Why B is wrong
Pretexting is an invented story.
Not this one. Try another answer.
Why C is wrong
A watering hole compromises a website.
Right, D is the answer.
Why D is right
Baiting tempts victims with an attractive item, such as an infected USB drive.
Question 60 Play from 1:05:18
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Session hijacking takes over an active session by stealing its token.
Not this one. Try another answer.
Why B is wrong
SQL injection attacks a database query.
Not this one. Try another answer.
Why C is wrong
Password spraying guesses common passwords.
Not this one. Try another answer.
Why D is wrong
CSRF makes the victim's own browser send a request.
Question 61 Play from 1:06:27
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Phishing sends fraudulent messages.
Right, B is the answer.
Why B is right
A watering hole attack infects a trusted site that the target group already visits.
Not this one. Try another answer.
Why C is wrong
Pharming redirects users from a real address to a fake site.
Not this one. Try another answer.
Why D is wrong
Typosquatting registers look-alike domains.
Question 62 Play from 1:07:36
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Escalating inside the guest still leaves the attacker contained.
Not this one. Try another answer.
Why B is wrong
Jailbreaking removes phone restrictions.
Right, C is the answer.
Why C is right
VM escape breaks the isolation between a virtual machine and its host.
Not this one. Try another answer.
Why D is wrong
Side loading installs unofficial apps.
Question 63 Play from 1:08:44
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
SIM swapping hijacks a phone number so the attacker receives SMS codes meant for the victim.
Not this one. Try another answer.
Why B is wrong
Bluesnarfing steals data over Bluetooth.
Not this one. Try another answer.
Why C is wrong
Vishing is phishing by phone call.
Not this one. Try another answer.
Why D is wrong
Smishing sends fraudulent texts to a victim.
Question 64 Play from 1:09:56
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Typosquatting uses a look-alike domain, not the real account.
Right, B is the answer.
Why B is right
Business email compromise uses a real, taken-over business mailbox to request payments or data.
Not this one. Try another answer.
Why C is wrong
A watering hole compromises a website.
Not this one. Try another answer.
Why D is wrong
Smishing uses text messages.
Question 65 Play from 1:11:07
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A rootkit hides malware on one system.
Right, B is the answer.
Why B is right
A botnet is a network of compromised devices controlled remotely, often used for DDoS attacks.
Not this one. Try another answer.
Why C is wrong
A logic bomb waits for a trigger.
Not this one. Try another answer.
Why D is wrong
A keylogger records keystrokes.
Question 66 Play from 1:12:12
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Jamming blocks signals with interference.
Not this one. Try another answer.
Why B is wrong
Deauthentication only knocks users off a network.
Right, C is the answer.
Why C is right
An evil twin imitates a legitimate access point to capture users' traffic.
Not this one. Try another answer.
Why D is wrong
Bluesnarfing steals data over Bluetooth.
Question 67 Play from 1:13:17
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A watering hole attack compromises a website the victims visit.
Not this one. Try another answer.
Why B is wrong
Whaling targets senior executives.
Not this one. Try another answer.
Why C is wrong
Smishing uses text messages.
Right, D is the answer.
Why D is right
Spear phishing targets specific people with personalised messages; it is not aimed at executives, so it is not whaling.
Question 68 Play from 1:14:27
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A Trojan relies on a user installing it.
Not this one. Try another answer.
Why B is wrong
A logic bomb waits for a trigger condition.
Right, C is the answer.
Why C is right
A worm self-replicates across networks without needing a user to run anything.
Not this one. Try another answer.
Why D is wrong
A virus needs a user to run an infected file.
Question 69 Play from 1:15:29
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Shoulder surfing is watching someone enter or view sensitive information.
Not this one. Try another answer.
Why B is wrong
Tailgating is physical entry behind someone.
Not this one. Try another answer.
Why C is wrong
Pretexting is an invented story.
Not this one. Try another answer.
Why D is wrong
Dumpster diving is searching through trash.
Question 70 Play from 1:16:33
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A replay attack resends captured traffic.
Not this one. Try another answer.
Why B is wrong
A downgrade attack forces weaker protocols.
Not this one. Try another answer.
Why C is wrong
Brute force tries every possibility.
Right, D is the answer.
Why D is right
A birthday attack uses probability to find hash collisions far faster than trying every input.
Question 71 Play from 1:17:40
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Tailgating is following someone through a secure door.
Right, B is the answer.
Why B is right
Pretexting is building a believable invented scenario to persuade someone to share information.
Not this one. Try another answer.
Why C is wrong
Shoulder surfing is watching someone's screen or keypad.
Not this one. Try another answer.
Why D is wrong
Dumpster diving is searching through discarded material.
Question 72 Play from 1:18:48
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A collision attack finds two inputs with the same hash.
Not this one. Try another answer.
Why B is wrong
A replay attack resends captured traffic.
Right, C is the answer.
Why C is right
A downgrade attack pushes a connection to a weaker protocol or cipher that is easier to break.
Not this one. Try another answer.
Why D is wrong
A birthday attack is a statistical way to find collisions.
Question 73 Play from 1:19:57
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A DDoS floods a target with traffic.
Right, B is the answer.
Why B is right
Cryptojacking steals computing power to mine cryptocurrency.
Not this one. Try another answer.
Why C is wrong
A logic bomb waits for a trigger.
Not this one. Try another answer.
Why D is wrong
Ransomware encrypts files for payment.
Question 74 Play from 1:20:56
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
VLAN hopping reaches another VLAN.
Right, B is the answer.
Why B is right
DHCP starvation exhausts the address pool, often before a rogue DHCP server is introduced.
Not this one. Try another answer.
Why C is wrong
ARP poisoning corrupts IP to MAC mappings.
Not this one. Try another answer.
Why D is wrong
DNS poisoning corrupts name resolution.
Question 75 Play from 1:22:08
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
This is a time-of-check to time-of-use race condition.
Not this one. Try another answer.
Why B is wrong
Directory traversal reaches files by path.
Not this one. Try another answer.
Why C is wrong
A replay attack resends captured traffic.
Not this one. Try another answer.
Why D is wrong
A buffer overflow writes past memory bounds.
Transcript
Play from 00:00 Question 1. A trusted vendor's software update server is compromised, and the next update installs malware on every customer's systems. Which attack is this? Here are the options. Option A. Typosquatting. Option B. Zero-day. Option C. Supply chain attack. Option D. Watering hole. Pause the video now if you want time to think about the answer.
The correct answer is C. Supply chain attack. A supply chain attack reaches victims through a trusted supplier's product or service. Now, why are the other options incorrect? Option A is incorrect. Typosquatting uses look-alike domains. Option B is incorrect. A zero-day is an unknown, unpatched flaw. Option D is incorrect. A watering hole compromises a website victims visit. Therefore, C, Supply chain attack, is the correct answer.
Play from 01:14 Question 2. A tester types ' OR 1=1 -- into a login form and is logged in without a password. Which attack is this? Here are the options. Option A. Cross-site scripting. Option B. SQL injection. Option C. Directory traversal. Option D. Buffer overflow. Pause the video now if you want time to think about the answer.
The correct answer is B. SQL injection. SQL injection inserts SQL code into input that is placed directly into a database query. Now, why are the other options incorrect? Option A is incorrect. Cross-site scripting runs script in other users' browsers. Option C is incorrect. Directory traversal reaches files outside the web root. Option D is incorrect. A buffer overflow writes past a memory boundary. Therefore, B, SQL injection, is the correct answer.
Play from 02:23 Question 3. An attacker creates a second document that produces exactly the same hash value as a signed contract. Which attack is this? Here are the options. Option A. Downgrade attack. Option B. Collision attack. Option C. Replay attack. Option D. Rainbow table attack. Pause the video now if you want time to think about the answer.
The correct answer is B. Collision attack. A collision is two different inputs giving the same hash, which breaks integrity checks. Now, why are the other options incorrect? Option A is incorrect. A downgrade attack forces weaker protocols. Option C is incorrect. A replay attack resends captured traffic. Option D is incorrect. A rainbow table cracks password hashes. Therefore, B, Collision attack, is the correct answer.
Show full transcriptShow less
Play from 03:28 Question 4. Software quietly tracks a user's browsing habits and sends them to a third party. What type is it? Here are the options. Option A. Worm. Option B. Ransomware. Option C. Spyware. Option D. Logic bomb. Pause the video now if you want time to think about the answer.
The correct answer is C. Spyware. Spyware secretly gathers information about a user and sends it elsewhere. Now, why are the other options incorrect? Option A is incorrect. A worm self-replicates. Option B is incorrect. Ransomware encrypts files for payment. Option D is incorrect. A logic bomb waits for a trigger. Therefore, C, Spyware, is the correct answer.
Play from 04:29 Question 5. A server receives a flood of TCP connection requests that are never completed, until it cannot accept real users. Which attack is this? Here are the options. Option A. Replay attack. Option B. MAC flooding. Option C. ARP poisoning. Option D. SYN flood. Pause the video now if you want time to think about the answer.
The correct answer is D. SYN flood. A SYN flood leaves half-open connections that exhaust the server's resources. Now, why are the other options incorrect? Option A is incorrect. A replay attack resends captured traffic. Option B is incorrect. MAC flooding overloads a switch table. Option C is incorrect. ARP poisoning corrupts IP to MAC mappings. Therefore, D, SYN flood, is the correct answer.
Play from 05:38 Question 6. Malware runs at the kernel level and hides its own processes and files from antivirus tools. What type is it? Here are the options. Option A. Worm. Option B. Rootkit. Option C. Keylogger. Option D. Ransomware. Pause the video now if you want time to think about the answer.
The correct answer is B. Rootkit. A rootkit gains deep, privileged access and hides itself and other malware. Now, why are the other options incorrect? Option A is incorrect. A worm self-replicates. Option C is incorrect. A keylogger records keystrokes. Option D is incorrect. Ransomware encrypts files for payment. Therefore, B, Rootkit, is the correct answer.
Play from 06:40 Question 7. An attacker tries every possible combination of characters against one account's password. Which attack is this? Here are the options. Option A. Brute force. Option B. Credential stuffing. Option C. Birthday attack. Option D. Password spraying. Pause the video now if you want time to think about the answer.
The correct answer is A. Brute force. Brute force tries every possible combination until one works. Now, why are the other options incorrect? Option B is incorrect. Credential stuffing reuses leaked pairs. Option C is incorrect. A birthday attack finds hash collisions. Option D is incorrect. Password spraying tries few passwords on many accounts. Therefore, A, Brute force, is the correct answer.
Play from 07:40 Question 8. An attacker sends forged management frames that repeatedly disconnect users from the Wi-Fi. Which attack is this? Here are the options. Option A. Jamming. Option B. Deauthentication attack. Option C. Bluesnarfing. Option D. Evil twin. Pause the video now if you want time to think about the answer.
The correct answer is B. Deauthentication attack. A deauthentication attack abuses Wi-Fi management frames to kick clients off the network. Now, why are the other options incorrect? Option A is incorrect. Jamming uses radio noise, not frames. Option C is incorrect. Bluesnarfing steals Bluetooth data. Option D is incorrect. An evil twin imitates an access point. Therefore, B, Deauthentication attack, is the correct answer.
Play from 08:45 Question 9. All Wi-Fi in a building drops because a device is flooding the radio frequency with noise. Which attack is this? Here are the options. Option A. Deauthentication. Option B. Evil twin. Option C. Jamming. Option D. Bluejacking. Pause the video now if you want time to think about the answer.
The correct answer is C. Jamming. Jamming disrupts wireless communication with radio interference. Now, why are the other options incorrect? Option A is incorrect. Deauthentication uses forged management frames, not noise. Option B is incorrect. An evil twin imitates a real access point. Option D is incorrect. Bluejacking sends unsolicited Bluetooth messages. Therefore, C, Jamming, is the correct answer.
Play from 09:51 Question 10. A standard user exploits a flaw in a service and ends up with administrator rights. What is this? Here are the options. Option A. Side loading. Option B. Pass the hash. Option C. Privilege escalation. Option D. Session hijacking. Pause the video now if you want time to think about the answer.
The correct answer is C. Privilege escalation. Privilege escalation gains higher permissions than the account was given. Now, why are the other options incorrect? Option A is incorrect. Side loading installs apps from unofficial sources. Option B is incorrect. Pass the hash reuses a stolen hash. Option D is incorrect. Session hijacking takes over another user's session. Therefore, C, Privilege escalation, is the correct answer.
Play from 10:55 Question 11. An attacker sends forged ARP replies so that the default gateway's IP address maps to the attacker's MAC address. Which attack is this? Here are the options. Option A. ARP poisoning. Option B. DNS poisoning. Option C. MAC flooding. Option D. VLAN hopping. Pause the video now if you want time to think about the answer.
The correct answer is A. ARP poisoning. ARP poisoning corrupts IP to MAC mappings, usually to set up an on-path attack. Now, why are the other options incorrect? Option B is incorrect. DNS poisoning corrupts name to IP answers. Option C is incorrect. MAC flooding overloads a switch table. Option D is incorrect. VLAN hopping reaches another VLAN. Therefore, A, ARP poisoning, is the correct answer.
Play from 12:05 Question 12. A user installs an Android app from a downloaded file instead of the official app store. What is this? Here are the options. Option A. Bluejacking. Option B. Typosquatting. Option C. Jailbreaking. Option D. Side loading. Pause the video now if you want time to think about the answer.
The correct answer is D. Side loading. Side loading installs apps from unofficial sources that skip store vetting. Now, why are the other options incorrect? Option A is incorrect. Bluejacking sends Bluetooth messages. Option B is incorrect. Typosquatting uses look-alike domains. Option C is incorrect. Jailbreaking removes iOS restrictions. Therefore, D, Side loading, is the correct answer.
Play from 13:08 Question 13. A user is flooded with repeated MFA push requests late at night until they tap approve just to make them stop. Which attack is this? Here are the options. Option A. MFA fatigue. Option B. Password spraying. Option C. Pass the hash. Option D. Replay attack. Pause the video now if you want time to think about the answer.
The correct answer is A. MFA fatigue. MFA fatigue spams push approvals, hoping the user accepts one. Now, why are the other options incorrect? Option B is incorrect. Password spraying tries common passwords on many accounts. Option C is incorrect. Pass the hash reuses a stolen password hash. Option D is incorrect. A replay attack resends captured traffic. Therefore, A, MFA fatigue, is the correct answer.
Play from 14:18 Question 14. A script planted by an admin deletes the customer database if their name is ever removed from payroll. What is this? Here are the options. Option A. Logic bomb. Option B. Worm. Option C. Rootkit. Option D. Trojan. Pause the video now if you want time to think about the answer.
The correct answer is A. Logic bomb. A logic bomb runs its payload when a specific condition is met. Now, why are the other options incorrect? Option B is incorrect. A worm self-replicates. Option C is incorrect. A rootkit hides its presence. Option D is incorrect. A Trojan hides inside apparently useful software. Therefore, A, Logic bomb, is the correct answer.
Play from 15:21 Question 15. An attacker uses a captured NTLM password hash to log in to other Windows servers without ever cracking it. Which attack is this? Here are the options. Option A. Rainbow table attack. Option B. Birthday attack. Option C. Pass the hash. Option D. Password spraying. Pause the video now if you want time to think about the answer.
The correct answer is C. Pass the hash. Pass the hash authenticates with the hash itself, so the plaintext password is never needed. Now, why are the other options incorrect? Option A is incorrect. A rainbow table cracks the hash to find the password. Option B is incorrect. A birthday attack finds hash collisions. Option D is incorrect. Password spraying guesses common passwords. Therefore, C, Pass the hash, is the correct answer.
Play from 16:28 Question 16. Thousands of customers get an email that looks like it is from their bank, with a link to a fake login page. Which attack is this? Here are the options. Option A. Tailgating. Option B. Phishing. Option C. Whaling. Option D. Vishing. Pause the video now if you want time to think about the answer.
The correct answer is B. Phishing. Phishing uses fraudulent email, sent widely, to trick people into giving up credentials. Now, why are the other options incorrect? Option A is incorrect. Tailgating is physical entry behind someone. Option C is incorrect. Whaling targets senior executives, not thousands of customers. Option D is incorrect. Vishing is done over voice calls. Therefore, B, Phishing, is the correct answer.
Play from 17:35 Question 17. A new laptop comes with many unwanted preinstalled apps that slow it down and add attack surface. What is this called? Here are the options. Option A. Spyware. Option B. Rootkit. Option C. Bloatware. Option D. Trojan. Pause the video now if you want time to think about the answer.
The correct answer is C. Bloatware. Bloatware is unnecessary preinstalled software that wastes resources and adds risk. Now, why are the other options incorrect? Option A is incorrect. Spyware secretly gathers information. Option B is incorrect. A rootkit hides deep in the system. Option D is incorrect. A Trojan disguises malicious code as useful software. Therefore, C, Bloatware, is the correct answer.
Play from 18:40 Question 18. A group knowingly spreads a false story online to damage a company's reputation. Which term fits? Here are the options. Option A. Misinformation. Option B. Typosquatting. Option C. Pretexting. Option D. Disinformation. Pause the video now if you want time to think about the answer.
The correct answer is D. Disinformation. Disinformation is false information spread on purpose to deceive. Now, why are the other options incorrect? Option A is incorrect. Misinformation is false information shared without intent to deceive. Option B is incorrect. Typosquatting uses look-alike domains. Option C is incorrect. Pretexting is an invented story told to one target. Therefore, D, Disinformation, is the correct answer.
Play from 19:42 Question 19. Malware records every key a user types and sends the log to an attacker. What type is it? Here are the options. Option A. Worm. Option B. Logic bomb. Option C. Rootkit. Option D. Keylogger. Pause the video now if you want time to think about the answer.
The correct answer is D. Keylogger. A keylogger captures keystrokes, such as passwords and messages. Now, why are the other options incorrect? Option A is incorrect. A worm self-replicates. Option B is incorrect. A logic bomb waits for a trigger. Option C is incorrect. A rootkit hides its presence. Therefore, D, Keylogger, is the correct answer.
Play from 20:39 Question 20. An attacker registers the domain rnicrosoft.com, hoping users will mistype or misread the real name. Which attack is this? Here are the options. Option A. Typosquatting. Option B. Pharming. Option C. Watering hole. Option D. DNS poisoning. Pause the video now if you want time to think about the answer.
The correct answer is A. Typosquatting. Typosquatting uses look-alike domain names to catch users who misread or mistype a URL. Now, why are the other options incorrect? Option B is incorrect. Pharming redirects the real address to a fake site. Option C is incorrect. A watering hole compromises a site victims already visit. Option D is incorrect. DNS poisoning corrupts DNS records or caches. Therefore, A, Typosquatting, is the correct answer.
Play from 21:50 Question 21. Data is being smuggled out of a network hidden inside a stream of unusual DNS queries. What is this? Here are the options. Option A. Typosquatting. Option B. DNS poisoning. Option C. DNS tunneling. Option D. Amplified DDoS. Pause the video now if you want time to think about the answer.
The correct answer is C. DNS tunneling. DNS tunneling hides data or commands inside DNS traffic to slip past controls. Now, why are the other options incorrect? Option A is incorrect. Typosquatting uses look-alike domains. Option B is incorrect. DNS poisoning corrupts DNS answers. Option D is incorrect. Amplified DDoS floods a victim. Therefore, C, DNS tunneling, is the correct answer.
Play from 22:57 Question 22. An attacker searches a company's recycling bins and finds printed network diagrams. What is this? Here are the options. Option A. Dumpster diving. Option B. Pretexting. Option C. Tailgating. Option D. Shoulder surfing. Pause the video now if you want time to think about the answer.
The correct answer is A. Dumpster diving. Dumpster diving is collecting useful information from discarded material, which is why shredding matters. Now, why are the other options incorrect? Option B is incorrect. Pretexting is an invented story. Option C is incorrect. Tailgating is physical entry behind someone. Option D is incorrect. Shoulder surfing is watching someone's screen. Therefore, A, Dumpster diving, is the correct answer.
Play from 24:04 Question 23. An employee gets a phone call from someone claiming to be IT support, asking for their password to fix an account problem. Which attack is this? Here are the options. Option A. Vishing. Option B. Smishing. Option C. Tailgating. Option D. Phishing. Pause the video now if you want time to think about the answer.
The correct answer is A. Vishing. Vishing is voice phishing: the attacker uses a phone call to get information. Now, why are the other options incorrect? Option B is incorrect. Smishing uses text messages. Option C is incorrect. Tailgating is physical entry behind someone. Option D is incorrect. Phishing uses email. Therefore, A, Vishing, is the correct answer.
Play from 25:07 Question 24. A user who is logged in to their bank visits a malicious page that silently submits a money transfer using their session. Which attack is this? Here are the options. Option A. Cross-site scripting. Option B. Replay attack. Option C. Server-side request forgery. Option D. Cross-site request forgery. Pause the video now if you want time to think about the answer.
The correct answer is D. Cross-site request forgery. CSRF tricks a logged-in user's browser into sending an unwanted request; anti-CSRF tokens defend against it. Now, why are the other options incorrect? Option A is incorrect. XSS runs injected script in the browser. Option B is incorrect. A replay attack resends captured traffic. Option C is incorrect. SSRF makes the server send requests. Therefore, D, Cross-site request forgery, is the correct answer.
Play from 26:21 Question 25. Username and password pairs leaked from another site's breach are tried against your login page. Which attack is this? Here are the options. Option A. Pass the hash. Option B. Brute force. Option C. Password spraying. Option D. Credential stuffing. Pause the video now if you want time to think about the answer.
The correct answer is D. Credential stuffing. Credential stuffing exploits password reuse with leaked credential pairs. Now, why are the other options incorrect? Option A is incorrect. Pass the hash reuses a hash, not a password. Option B is incorrect. Brute force tries every combination. Option C is incorrect. Password spraying uses common passwords, not leaked pairs. Therefore, D, Credential stuffing, is the correct answer.
Play from 27:28 Question 26. Malicious code attaches itself to a program and spreads only when a user runs the infected file. What type is it? Here are the options. Option A. Spyware. Option B. Virus. Option C. Worm. Option D. Rootkit. Pause the video now if you want time to think about the answer.
The correct answer is B. Virus. A virus attaches to files and needs user action to execute and spread. Now, why are the other options incorrect? Option A is incorrect. Spyware collects information. Option C is incorrect. A worm spreads on its own. Option D is incorrect. A rootkit hides its presence. Therefore, B, Virus, is the correct answer.
Play from 28:28 Question 27. An attacker cracks stolen unsalted password hashes almost instantly using a huge precomputed table. Which attack is this? Here are the options. Option A. Rainbow table attack. Option B. Password spraying. Option C. Birthday attack. Option D. Credential stuffing. Pause the video now if you want time to think about the answer.
The correct answer is A. Rainbow table attack. Rainbow tables are precomputed hash lookups; salting each password defeats them. Now, why are the other options incorrect? Option B is incorrect. Password spraying is an online guessing attack. Option C is incorrect. A birthday attack finds hash collisions. Option D is incorrect. Credential stuffing reuses leaked pairs. Therefore, A, Rainbow table attack, is the correct answer.
Play from 29:38 Question 28. A request for a file includes ../../etc/passwd and returns a system file. Which attack is this? Here are the options. Option A. Directory traversal. Option B. Cross-site scripting. Option C. Command injection. Option D. SQL injection. Pause the video now if you want time to think about the answer.
The correct answer is A. Directory traversal. Directory traversal uses dot-dot-slash sequences to reach files outside the allowed folder. Now, why are the other options incorrect? Option B is incorrect. XSS runs script in browsers. Option C is incorrect. Command injection runs operating system commands. Option D is incorrect. SQL injection attacks a database. Therefore, A, Directory traversal, is the correct answer.
Play from 30:49 Question 29. A switch is flooded with frames from thousands of fake MAC addresses until it sends all traffic out of every port. Which attack is this? Here are the options. Option A. MAC flooding. Option B. VLAN hopping. Option C. Jamming. Option D. ARP poisoning. Pause the video now if you want time to think about the answer.
The correct answer is A. MAC flooding. MAC flooding fills the switch's MAC table so it behaves like a hub, letting the attacker sniff traffic. Now, why are the other options incorrect? Option B is incorrect. VLAN hopping reaches another VLAN. Option C is incorrect. Jamming disrupts wireless signals. Option D is incorrect. ARP poisoning corrupts IP to MAC mappings. Therefore, A, MAC flooding, is the correct answer.
Play from 31:58 Question 30. Script posted in a forum comment runs in the browser of every visitor who views the page. Which attack is this? Here are the options. Option A. Cross-site scripting. Option B. Cross-site request forgery. Option C. SQL injection. Option D. Directory traversal. Pause the video now if you want time to think about the answer.
The correct answer is A. Cross-site scripting. Cross-site scripting, or XSS, injects script that runs in other users' browsers. Now, why are the other options incorrect? Option B is incorrect. CSRF forces a user's browser to send a request. Option C is incorrect. SQL injection targets the database. Option D is incorrect. Directory traversal reaches restricted files. Therefore, A, Cross-site scripting, is the correct answer.
Play from 33:08 Question 31. An attacker secretly sits between a user and a server, reading and changing traffic in both directions. Which attack is this? Here are the options. Option A. DDoS. Option B. Privilege escalation. Option C. Replay attack. Option D. On-path attack. Pause the video now if you want time to think about the answer.
The correct answer is D. On-path attack. An on-path attack, once called man in the middle, intercepts and can alter communications. Now, why are the other options incorrect? Option A is incorrect. A DDoS overwhelms a target. Option B is incorrect. Privilege escalation gains higher rights on a system. Option C is incorrect. A replay attack resends captured traffic later. Therefore, D, On-path attack, is the correct answer.
Play from 34:16 Question 32. An attacker types an asterisk into a username field so a directory search returns every account. Which attack is this? Here are the options. Option A. Command injection. Option B. LDAP injection. Option C. SQL injection. Option D. Directory traversal. Pause the video now if you want time to think about the answer.
The correct answer is B. LDAP injection. LDAP injection manipulates a directory query filter through unsanitised input. Now, why are the other options incorrect? Option A is incorrect. Command injection runs shell commands. Option C is incorrect. SQL injection targets a database. Option D is incorrect. Directory traversal reaches files by path. Therefore, B, LDAP injection, is the correct answer.
Play from 35:26 Question 33. An attacker captures a valid login exchange and sends it again later to gain access. Which attack is this? Here are the options. Option A. Collision attack. Option B. Downgrade attack. Option C. Brute force. Option D. Replay attack. Pause the video now if you want time to think about the answer.
The correct answer is D. Replay attack. A replay attack resends captured valid traffic; timestamps and nonces defend against it. Now, why are the other options incorrect? Option A is incorrect. A collision attack finds two inputs with the same hash. Option B is incorrect. A downgrade attack forces weaker protocols. Option C is incorrect. Brute force guesses passwords. Therefore, D, Replay attack, is the correct answer.
Play from 36:33 Question 34. An attacker pulls contacts and messages from a nearby phone over Bluetooth without the owner knowing. Which attack is this? Here are the options. Option A. Bluesnarfing. Option B. Bluejacking. Option C. Evil twin. Option D. Jamming. Pause the video now if you want time to think about the answer.
The correct answer is A. Bluesnarfing. Bluesnarfing is unauthorised access to data over Bluetooth. Now, why are the other options incorrect? Option B is incorrect. Bluejacking only sends unsolicited messages. Option C is incorrect. An evil twin imitates a Wi-Fi access point. Option D is incorrect. Jamming disrupts signals. Therefore, A, Bluesnarfing, is the correct answer.
Play from 37:36 Question 35. An attacker sends double-tagged frames to reach a VLAN they are not assigned to. Which attack is this? Here are the options. Option A. ARP poisoning. Option B. DNS tunneling. Option C. VLAN hopping. Option D. MAC flooding. Pause the video now if you want time to think about the answer.
The correct answer is C. VLAN hopping. VLAN hopping uses switch spoofing or double tagging to reach another VLAN. Now, why are the other options incorrect? Option A is incorrect. ARP poisoning corrupts IP to MAC mappings. Option B is incorrect. DNS tunneling hides data in DNS. Option D is incorrect. MAC flooding overloads a switch table. Therefore, C, VLAN hopping, is the correct answer.
Play from 38:42 Question 36. A resolver's cache is altered so that users who type the bank's real address are sent to a fake site. Which attack is this? Here are the options. Option A. Typosquatting. Option B. DNS poisoning. Option C. ARP poisoning. Option D. Watering hole. Pause the video now if you want time to think about the answer.
The correct answer is B. DNS poisoning. DNS poisoning plants false records so a real name resolves to an attacker's address. Now, why are the other options incorrect? Option A is incorrect. Typosquatting relies on a mistyped look-alike name. Option C is incorrect. ARP poisoning corrupts IP to MAC mappings. Option D is incorrect. A watering hole compromises a real site. Therefore, B, DNS poisoning, is the correct answer.
Play from 39:50 Question 37. An attacker makes a web server fetch a URL that points to an internal cloud metadata service. Which attack is this? Here are the options. Option A. SQL injection. Option B. Server-side request forgery. Option C. Directory traversal. Option D. Cross-site request forgery. Pause the video now if you want time to think about the answer.
The correct answer is B. Server-side request forgery. SSRF tricks the server into sending requests to internal systems on the attacker's behalf. Now, why are the other options incorrect? Option A is incorrect. SQL injection attacks a database query. Option C is incorrect. Directory traversal reads files by path. Option D is incorrect. CSRF abuses the user's browser, not the server. Therefore, B, Server-side request forgery, is the correct answer.
Play from 41:06 Question 38. A number in a program exceeds its maximum size and wraps around to a negative value, bypassing a balance check. What is this? Here are the options. Option A. Integer overflow. Option B. Race condition. Option C. Memory injection. Option D. Buffer overflow. Pause the video now if you want time to think about the answer.
The correct answer is A. Integer overflow. An integer overflow happens when a value goes beyond what its data type can hold and wraps around. Now, why are the other options incorrect? Option B is incorrect. A race condition abuses timing. Option C is incorrect. Memory injection inserts code into a process. Option D is incorrect. A buffer overflow writes past a memory buffer. Therefore, A, Integer overflow, is the correct answer.
Play from 42:16 Question 39. An attacker sends far more data than a program's input buffer can hold, overwriting memory to run their own code. Which attack is this? Here are the options. Option A. Buffer overflow. Option B. SQL injection. Option C. Integer overflow. Option D. Race condition. Pause the video now if you want time to think about the answer.
The correct answer is A. Buffer overflow. A buffer overflow writes past a buffer's boundary into adjacent memory. Now, why are the other options incorrect? Option B is incorrect. SQL injection attacks a database. Option C is incorrect. An integer overflow wraps a number past its maximum. Option D is incorrect. A race condition abuses timing. Therefore, A, Buffer overflow, is the correct answer.
Play from 43:21 Question 40. A free game download works as expected but secretly installs a backdoor. What type of malware is this? Here are the options. Option A. Logic bomb. Option B. Trojan. Option C. Ransomware. Option D. Worm. Pause the video now if you want time to think about the answer.
The correct answer is B. Trojan. A Trojan pretends to be useful software while hiding a malicious function. Now, why are the other options incorrect? Option A is incorrect. A logic bomb waits for a trigger condition. Option C is incorrect. Ransomware encrypts files for payment. Option D is incorrect. A worm spreads on its own. Therefore, B, Trojan, is the correct answer.
Play from 44:21 Question 41. Malicious code is written into the memory of a running, trusted process so it runs under that process. What is this? Here are the options. Option A. Logic bomb. Option B. Race condition. Option C. Side loading. Option D. Memory injection. Pause the video now if you want time to think about the answer.
The correct answer is D. Memory injection. Memory injection places malicious code into another process's memory space. Now, why are the other options incorrect? Option A is incorrect. A logic bomb waits for a trigger. Option B is incorrect. A race condition abuses timing between a check and a use. Option C is incorrect. Side loading installs apps from unofficial sources. Therefore, D, Memory injection, is the correct answer.
Play from 45:29 Question 42. Traffic from thousands of compromised devices floods a website until it stops responding. Which attack is this? Here are the options. Option A. DDoS. Option B. DNS poisoning. Option C. On-path attack. Option D. Replay attack. Pause the video now if you want time to think about the answer.
The correct answer is A. DDoS. A distributed denial of service uses many sources at once to overwhelm a target. Now, why are the other options incorrect? Option B is incorrect. DNS poisoning corrupts name resolution. Option C is incorrect. An on-path attack intercepts traffic. Option D is incorrect. A replay attack resends captured traffic. Therefore, A, DDoS, is the correct answer.
Play from 46:34 Question 43. An app passes user input straight to the system shell, and the attacker appends a semicolon and their own command. Which attack is this? Here are the options. Option A. Cross-site scripting. Option B. LDAP injection. Option C. Command injection. Option D. SQL injection. Pause the video now if you want time to think about the answer.
The correct answer is C. Command injection. Command injection runs attacker-supplied operating system commands through a vulnerable app. Now, why are the other options incorrect? Option A is incorrect. XSS runs script in browsers. Option B is incorrect. LDAP injection targets directory queries. Option D is incorrect. SQL injection targets database queries. Therefore, C, Command injection, is the correct answer.
Play from 47:44 Question 44. People in a cafe receive unsolicited messages on their phones from an unknown nearby Bluetooth device. What is this? Here are the options. Option A. Jamming. Option B. Smishing. Option C. Bluejacking. Option D. Bluesnarfing. Pause the video now if you want time to think about the answer.
The correct answer is C. Bluejacking. Bluejacking sends unsolicited messages over Bluetooth, but does not steal data. Now, why are the other options incorrect? Option A is incorrect. Jamming disrupts signals. Option B is incorrect. Smishing uses SMS text messages. Option D is incorrect. Bluesnarfing steals data. Therefore, C, Bluejacking, is the correct answer.
Play from 48:45 Question 45. An attacker tries a handful of common passwords, like Spring2026, against hundreds of accounts to avoid lockouts. Which attack is this? Here are the options. Option A. Rainbow table attack. Option B. Brute force. Option C. Password spraying. Option D. Credential stuffing. Pause the video now if you want time to think about the answer.
The correct answer is C. Password spraying. Password spraying tries a few likely passwords across many accounts, staying under lockout limits. Now, why are the other options incorrect? Option A is incorrect. A rainbow table cracks stolen hashes offline. Option B is incorrect. Brute force tries many passwords on one account. Option D is incorrect. Credential stuffing reuses leaked username and password pairs. Therefore, C, Password spraying, is the correct answer.
Play from 49:54 Question 46. An attacker sends small DNS queries with the victim's spoofed address, so servers flood the victim with much larger replies. Which attack is this? Here are the options. Option A. ARP poisoning. Option B. Replay attack. Option C. DNS poisoning. Option D. Amplified DDoS. Pause the video now if you want time to think about the answer.
The correct answer is D. Amplified DDoS. An amplified, reflected DDoS turns small spoofed requests into large responses aimed at the victim. Now, why are the other options incorrect? Option A is incorrect. ARP poisoning maps a MAC address to another device's IP. Option B is incorrect. A replay attack resends captured traffic. Option C is incorrect. DNS poisoning corrupts DNS answers. Therefore, D, Amplified DDoS, is the correct answer.
Play from 51:06 Question 47. Files on every shared drive are suddenly encrypted and a note demands payment in cryptocurrency. What type of malware is this? Here are the options. Option A. Rootkit. Option B. Ransomware. Option C. Logic bomb. Option D. Spyware. Pause the video now if you want time to think about the answer.
The correct answer is B. Ransomware. Ransomware encrypts data and demands payment for the key. Now, why are the other options incorrect? Option A is incorrect. A rootkit hides deep in the system. Option C is incorrect. A logic bomb runs when a condition is met. Option D is incorrect. Spyware secretly collects information. Therefore, B, Ransomware, is the correct answer.
Play from 52:05 Question 48. An attacker disables the cooling system so the data center overheats and servers shut down. What kind of attack is this? Here are the options. Option A. DDoS. Option B. Environmental attack. Option C. Jamming. Option D. Logic bomb. Pause the video now if you want time to think about the answer.
The correct answer is B. Environmental attack. An environmental attack targets power, cooling or other building systems that IT depends on. Now, why are the other options incorrect? Option A is incorrect. A DDoS floods a target with traffic. Option C is incorrect. Jamming disrupts wireless signals. Option D is incorrect. A logic bomb is code that waits for a trigger. Therefore, B, Environmental attack, is the correct answer.
Play from 53:11 Question 49. An attacker uses a hidden reader to copy employee badges from a short distance, then makes working duplicates. Which attack is this? Here are the options. Option A. Bluejacking. Option B. Shoulder surfing. Option C. RFID cloning. Option D. Tailgating. Pause the video now if you want time to think about the answer.
The correct answer is C. RFID cloning. RFID cloning reads and copies access badge data to create duplicates. Now, why are the other options incorrect? Option A is incorrect. Bluejacking sends Bluetooth messages. Option B is incorrect. Shoulder surfing watches screens or keypads. Option D is incorrect. Tailgating follows someone through a door. Therefore, C, RFID cloning, is the correct answer.
Play from 54:16 Question 50. Attackers exploit a flaw that the vendor does not know about yet, so no patch exists. What is this? Here are the options. Option A. Side loading. Option B. Supply chain attack. Option C. Zero-day. Option D. Misconfiguration. Pause the video now if you want time to think about the answer.
The correct answer is C. Zero-day. A zero-day is a vulnerability exploited before the vendor has a fix. Now, why are the other options incorrect? Option A is incorrect. Side loading installs apps from unofficial sources. Option B is incorrect. A supply chain attack compromises a vendor or its product. Option D is incorrect. A misconfiguration is a settings mistake, not an unknown flaw. Therefore, C, Zero-day, is the correct answer.
Play from 55:21 Question 51. An attacker runs a stolen password hash file against a list of common words and leaked passwords. Which attack is this? Here are the options. Option A. Birthday attack. Option B. Password spraying. Option C. Pass the hash. Option D. Dictionary attack. Pause the video now if you want time to think about the answer.
The correct answer is D. Dictionary attack. A dictionary attack guesses with a wordlist of likely passwords. Now, why are the other options incorrect? Option A is incorrect. A birthday attack finds hash collisions. Option B is incorrect. Password spraying targets many live accounts with few passwords. Option C is incorrect. Pass the hash uses the hash itself, without cracking it. Therefore, D, Dictionary attack, is the correct answer.
Play from 56:35 Question 52. A user receives a text message saying a parcel is held and must be released through a link. Which attack is this? Here are the options. Option A. Vishing. Option B. Watering hole. Option C. Whaling. Option D. Smishing. Pause the video now if you want time to think about the answer.
The correct answer is D. Smishing. Smishing is phishing by SMS text message. Now, why are the other options incorrect? Option A is incorrect. Vishing uses voice calls. Option B is incorrect. A watering hole attack compromises a website the victims visit. Option C is incorrect. Whaling targets executives. Therefore, D, Smishing, is the correct answer.
Play from 57:35 Question 53. The chief financial officer gets a carefully written email that mentions next week's board meeting and asks them to open an attached report. Which attack is this? Here are the options. Option A. Smishing. Option B. Typosquatting. Option C. Vishing. Option D. Whaling. Pause the video now if you want time to think about the answer.
The correct answer is D. Whaling. Whaling is a targeted phishing attack aimed at a senior executive. Now, why are the other options incorrect? Option A is incorrect. Smishing uses text messages. Option B is incorrect. Typosquatting relies on mistyped web addresses. Option C is incorrect. Vishing uses phone calls. Therefore, D, Whaling, is the correct answer.
Play from 58:36 Question 54. Someone without a badge walks through a secure door right behind an employee before it closes. What is this? Here are the options. Option A. Shoulder surfing. Option B. Dumpster diving. Option C. Pretexting. Option D. Tailgating. Pause the video now if you want time to think about the answer.
The correct answer is D. Tailgating. Tailgating is following an authorised person through a controlled entrance. Now, why are the other options incorrect? Option A is incorrect. Shoulder surfing is watching someone's screen or keypad. Option B is incorrect. Dumpster diving is searching discarded material. Option C is incorrect. Pretexting is an invented story to get information. Therefore, D, Tailgating, is the correct answer.
Play from 59:38 Question 55. An employee shares an inaccurate news story about a data breach, honestly believing it is true. Which term fits? Here are the options. Option A. Disinformation. Option B. Pretexting. Option C. Misinformation. Option D. Impersonation. Pause the video now if you want time to think about the answer.
The correct answer is C. Misinformation. Misinformation is false information spread without the intent to deceive. Now, why are the other options incorrect? Option A is incorrect. Disinformation is spread on purpose. Option B is incorrect. Pretexting is an invented story to get information. Option D is incorrect. Impersonation is pretending to be someone else. Therefore, C, Misinformation, is the correct answer.
Play from 1:00:48 Question 56. Malware edits a PC's hosts file so the real bank address opens a fake site. Which attack is this? Here are the options. Option A. Typosquatting. Option B. Pharming. Option C. Phishing. Option D. Watering hole. Pause the video now if you want time to think about the answer.
The correct answer is B. Pharming. Pharming redirects users from a legitimate address to a fake site, for example by changing the hosts file. Now, why are the other options incorrect? Option A is incorrect. Typosquatting relies on a mistyped name. Option C is incorrect. Phishing tricks users with fraudulent messages. Option D is incorrect. A watering hole compromises a real site. Therefore, B, Pharming, is the correct answer.
Play from 1:01:55 Question 57. An employee plugs a personal wireless router into the office network without approval. What is this device called? Here are the options. Option A. A honeypot. Option B. A Bluetooth beacon. Option C. A jammer. Option D. A rogue access point. Pause the video now if you want time to think about the answer.
The correct answer is D. A rogue access point. A rogue access point is an unauthorised AP connected to the network, creating a back door. Now, why are the other options incorrect? Option A is incorrect. A honeypot is a decoy set up by defenders. Option B is incorrect. A Bluetooth beacon broadcasts location signals. Option C is incorrect. A jammer disrupts wireless signals. Therefore, D, A rogue access point, is the correct answer.
Play from 1:03:03 Question 58. A user removes the manufacturer's restrictions from their iPhone so they can install anything. What is this? Here are the options. Option A. Side loading. Option B. VM escape. Option C. Jailbreaking. Option D. Bluesnarfing. Pause the video now if you want time to think about the answer.
The correct answer is C. Jailbreaking. Jailbreaking removes iOS restrictions, weakening the device's built-in protections. Now, why are the other options incorrect? Option A is incorrect. Side loading installs apps from outside the store, which jailbreaking may allow. Option B is incorrect. VM escape breaks out of a virtual machine. Option D is incorrect. Bluesnarfing steals data over Bluetooth. Therefore, C, Jailbreaking, is the correct answer.
Play from 1:04:14 Question 59. Attackers leave USB drives labelled Salaries in a company car park, hoping staff will plug them in. What technique is this? Here are the options. Option A. Tailgating. Option B. Pretexting. Option C. Watering hole. Option D. Baiting. Pause the video now if you want time to think about the answer.
The correct answer is D. Baiting. Baiting tempts victims with an attractive item, such as an infected USB drive. Now, why are the other options incorrect? Option A is incorrect. Tailgating is physical entry behind someone. Option B is incorrect. Pretexting is an invented story. Option C is incorrect. A watering hole compromises a website. Therefore, D, Baiting, is the correct answer.
Play from 1:05:18 Question 60. An attacker copies a session cookie from unencrypted Wi-Fi traffic and uses it to enter the victim's logged-in account. Which attack is this? Here are the options. Option A. Session hijacking. Option B. SQL injection. Option C. Password spraying. Option D. Cross-site request forgery. Pause the video now if you want time to think about the answer.
The correct answer is A. Session hijacking. Session hijacking takes over an active session by stealing its token. Now, why are the other options incorrect? Option B is incorrect. SQL injection attacks a database query. Option C is incorrect. Password spraying guesses common passwords. Option D is incorrect. CSRF makes the victim's own browser send a request. Therefore, A, Session hijacking, is the correct answer.
Play from 1:06:27 Question 61. Attackers compromise an industry forum that engineers at a target company visit often, so the site infects their machines. Which attack is this? Here are the options. Option A. Phishing. Option B. Watering hole. Option C. Pharming. Option D. Typosquatting. Pause the video now if you want time to think about the answer.
The correct answer is B. Watering hole. A watering hole attack infects a trusted site that the target group already visits. Now, why are the other options incorrect? Option A is incorrect. Phishing sends fraudulent messages. Option C is incorrect. Pharming redirects users from a real address to a fake site. Option D is incorrect. Typosquatting registers look-alike domains. Therefore, B, Watering hole, is the correct answer.
Play from 1:07:36 Question 62. Code running in a guest virtual machine breaks out and gains control of the hypervisor. What is this? Here are the options. Option A. Privilege escalation inside the guest. Option B. Jailbreaking. Option C. VM escape. Option D. Side loading. Pause the video now if you want time to think about the answer.
The correct answer is C. VM escape. VM escape breaks the isolation between a virtual machine and its host. Now, why are the other options incorrect? Option A is incorrect. Escalating inside the guest still leaves the attacker contained. Option B is incorrect. Jailbreaking removes phone restrictions. Option D is incorrect. Side loading installs unofficial apps. Therefore, C, VM escape, is the correct answer.
Play from 1:08:44 Question 63. An attacker convinces a mobile carrier to move a victim's phone number to a new SIM, then receives the victim's text message login codes. Which attack is this? Here are the options. Option A. SIM swapping. Option B. Bluesnarfing. Option C. Vishing. Option D. Smishing. Pause the video now if you want time to think about the answer.
The correct answer is A. SIM swapping. SIM swapping hijacks a phone number so the attacker receives SMS codes meant for the victim. Now, why are the other options incorrect? Option B is incorrect. Bluesnarfing steals data over Bluetooth. Option C is incorrect. Vishing is phishing by phone call. Option D is incorrect. Smishing sends fraudulent texts to a victim. Therefore, A, SIM swapping, is the correct answer.
Play from 1:09:56 Question 64. An attacker takes over the real email account of a company's CEO and uses it to tell finance to wire money to a new supplier. Which attack is this? Here are the options. Option A. Typosquatting. Option B. Business email compromise. Option C. Watering hole. Option D. Smishing. Pause the video now if you want time to think about the answer.
The correct answer is B. Business email compromise. Business email compromise uses a real, taken-over business mailbox to request payments or data. Now, why are the other options incorrect? Option A is incorrect. Typosquatting uses a look-alike domain, not the real account. Option C is incorrect. A watering hole compromises a website. Option D is incorrect. Smishing uses text messages. Therefore, B, Business email compromise, is the correct answer.
Play from 1:11:07 Question 65. Thousands of infected home routers all take orders from one command and control server. What are they part of? Here are the options. Option A. A rootkit. Option B. A botnet. Option C. A logic bomb. Option D. A keylogger. Pause the video now if you want time to think about the answer.
The correct answer is B. A botnet. A botnet is a network of compromised devices controlled remotely, often used for DDoS attacks. Now, why are the other options incorrect? Option A is incorrect. A rootkit hides malware on one system. Option C is incorrect. A logic bomb waits for a trigger. Option D is incorrect. A keylogger records keystrokes. Therefore, B, A botnet, is the correct answer.
Play from 1:12:12 Question 66. An attacker sets up an access point that broadcasts the same network name as the office Wi-Fi to trick users into connecting. Which attack is this? Here are the options. Option A. Jamming. Option B. Deauthentication. Option C. Evil twin. Option D. Bluesnarfing. Pause the video now if you want time to think about the answer.
The correct answer is C. Evil twin. An evil twin imitates a legitimate access point to capture users' traffic. Now, why are the other options incorrect? Option A is incorrect. Jamming blocks signals with interference. Option B is incorrect. Deauthentication only knocks users off a network. Option D is incorrect. Bluesnarfing steals data over Bluetooth. Therefore, C, Evil twin, is the correct answer.
Play from 1:13:17 Question 67. An attacker studies a few payroll clerks on social media, then sends each a personalised email using their names and projects. Which attack is this? Here are the options. Option A. Watering hole. Option B. Whaling. Option C. Smishing. Option D. Spear phishing. Pause the video now if you want time to think about the answer.
The correct answer is D. Spear phishing. Spear phishing targets specific people with personalised messages; it is not aimed at executives, so it is not whaling. Now, why are the other options incorrect? Option A is incorrect. A watering hole attack compromises a website the victims visit. Option B is incorrect. Whaling targets senior executives. Option C is incorrect. Smishing uses text messages. Therefore, D, Spear phishing, is the correct answer.
Play from 1:14:27 Question 68. Malware spreads from machine to machine across a network on its own, with no user action. What type is it? Here are the options. Option A. Trojan. Option B. Logic bomb. Option C. Worm. Option D. Virus. Pause the video now if you want time to think about the answer.
The correct answer is C. Worm. A worm self-replicates across networks without needing a user to run anything. Now, why are the other options incorrect? Option A is incorrect. A Trojan relies on a user installing it. Option B is incorrect. A logic bomb waits for a trigger condition. Option D is incorrect. A virus needs a user to run an infected file. Therefore, C, Worm, is the correct answer.
Play from 1:15:29 Question 69. A person stands behind a user at an ATM and watches them enter their PIN. What is this? Here are the options. Option A. Shoulder surfing. Option B. Tailgating. Option C. Pretexting. Option D. Dumpster diving. Pause the video now if you want time to think about the answer.
The correct answer is A. Shoulder surfing. Shoulder surfing is watching someone enter or view sensitive information. Now, why are the other options incorrect? Option B is incorrect. Tailgating is physical entry behind someone. Option C is incorrect. Pretexting is an invented story. Option D is incorrect. Dumpster diving is searching through trash. Therefore, A, Shoulder surfing, is the correct answer.
Play from 1:16:33 Question 70. Which attack relies on the same maths that makes it likely two people in a room of 23 share a birthday, to find hash collisions faster? Here are the options. Option A. Replay attack. Option B. Downgrade attack. Option C. Brute force attack. Option D. Birthday attack. Pause the video now if you want time to think about the answer.
The correct answer is D. Birthday attack. A birthday attack uses probability to find hash collisions far faster than trying every input. Now, why are the other options incorrect? Option A is incorrect. A replay attack resends captured traffic. Option B is incorrect. A downgrade attack forces weaker protocols. Option C is incorrect. Brute force tries every possibility. Therefore, D, Birthday attack, is the correct answer.
Play from 1:17:40 Question 71. A caller invents a detailed story about being a new auditor who urgently needs a list of user accounts. What technique is this? Here are the options. Option A. Tailgating. Option B. Pretexting. Option C. Shoulder surfing. Option D. Dumpster diving. Pause the video now if you want time to think about the answer.
The correct answer is B. Pretexting. Pretexting is building a believable invented scenario to persuade someone to share information. Now, why are the other options incorrect? Option A is incorrect. Tailgating is following someone through a secure door. Option C is incorrect. Shoulder surfing is watching someone's screen or keypad. Option D is incorrect. Dumpster diving is searching through discarded material. Therefore, B, Pretexting, is the correct answer.
Play from 1:18:48 Question 72. An attacker on the network forces a client and server to use an older, weaker version of TLS. Which attack is this? Here are the options. Option A. Collision attack. Option B. Replay attack. Option C. Downgrade attack. Option D. Birthday attack. Pause the video now if you want time to think about the answer.
The correct answer is C. Downgrade attack. A downgrade attack pushes a connection to a weaker protocol or cipher that is easier to break. Now, why are the other options incorrect? Option A is incorrect. A collision attack finds two inputs with the same hash. Option B is incorrect. A replay attack resends captured traffic. Option D is incorrect. A birthday attack is a statistical way to find collisions. Therefore, C, Downgrade attack, is the correct answer.
Play from 1:19:57 Question 73. Company servers run at full CPU because malware is mining cryptocurrency for an attacker. What is this? Here are the options. Option A. DDoS. Option B. Cryptojacking. Option C. Logic bomb. Option D. Ransomware. Pause the video now if you want time to think about the answer.
The correct answer is B. Cryptojacking. Cryptojacking steals computing power to mine cryptocurrency. Now, why are the other options incorrect? Option A is incorrect. A DDoS floods a target with traffic. Option C is incorrect. A logic bomb waits for a trigger. Option D is incorrect. Ransomware encrypts files for payment. Therefore, B, Cryptojacking, is the correct answer.
Play from 1:20:56 Question 74. An attacker sends a flood of fake DHCP requests until the server has no addresses left to give real clients. Which attack is this? Here are the options. Option A. VLAN hopping. Option B. DHCP starvation. Option C. ARP poisoning. Option D. DNS poisoning. Pause the video now if you want time to think about the answer.
The correct answer is B. DHCP starvation. DHCP starvation exhausts the address pool, often before a rogue DHCP server is introduced. Now, why are the other options incorrect? Option A is incorrect. VLAN hopping reaches another VLAN. Option C is incorrect. ARP poisoning corrupts IP to MAC mappings. Option D is incorrect. DNS poisoning corrupts name resolution. Therefore, B, DHCP starvation, is the correct answer.
Play from 1:22:08 Question 75. A program checks that a file is safe, but an attacker swaps the file in the moment before it is used. What is this? Here are the options. Option A. Race condition. Option B. Directory traversal. Option C. Replay attack. Option D. Buffer overflow. Pause the video now if you want time to think about the answer.
The correct answer is A. Race condition. This is a time-of-check to time-of-use race condition. Now, why are the other options incorrect? Option B is incorrect. Directory traversal reaches files by path. Option C is incorrect. A replay attack resends captured traffic. Option D is incorrect. A buffer overflow writes past memory bounds. Therefore, A, Race condition, is the correct answer.
