CySA+ Practice Quiz: C00-002 Quiz 11

1. During which phase of the Kill Chain framework does an intruder extract or destroy data?

• Action on Objectives
• Command and Control
• Weaponization
• Exploitation

2. MITRE provides three main categories for attack vectors. Which of the following is an example of a human attack?

• Compromised user accounts
• Portable storage devices
• Messaging apps
• Social engineering techniques

3. An attacker has made their way into an organization's network and run an LDAP enumeration tool. What is the attacker MOST likely accessing and extracting information from?

• HR system
• E-mail Server
• Active Directory
• DNS

4. Which port does a DNS zone transfer use?

• TCP 23
• TCP 445
• TCP 53
• TCP 139

5. Which of the following is an attack in which all traffic is blocked by taking up all available bandwidth between the target computer and the internet?

• Fragmentation attack
• Volumetric attack
• Amplification attack
• Phlashing attack

6. A compromised computer that is used by an attacker to conduct malicious activities, like DDoS attacks, is known as which of the following?

• Keylogger
• Zombie device
• IoT device
• Trojan

7. Which of the following attacks targets the managed service provider itself?

• Wrapping
• Cloud hopper
• Cybersquatting
• Side-channel

8. Mary has discovered that someone hacked in and stole personal files from her Google Drive. Which type of attack was MOST likely carried out against her?

• XSS
• MITC
• Wrapping
• Cloud hopper

9. As you're investigating a cyber crime in your organization, you suspect that important files have been deleted. Which of the following techniques can you use to bypass the file system and recover files based only on their structure by scanning raw bytes of disk data in order to reassemble them for examination?

• Code analysis
• File carving
• Dynamic analysis
• Logical copy extraction

10. The DKIM tool can provide security for your company's e-mails because it contains which of the following?

• A timestamp
• A block signature
• A digital signature
• A header