Quiz – Common Security Threats Results #1. Which of the following is NOT a motivation of malicious actors? Disruption Bug bounty awards Financial Geopolitical #2. Which of the following is NOT considered a type of DDoS attack? Directed Cached Reflected Amplified #3. Why is UDP the “protocol of choice” for reflected DDoS attack? There are more application choices when using UDP TCP requires a three-way handshake to stablish a connection UDP is much more easily spoofed TCP cannot be used in DDos attacks #4. Which of the following is leveraged in social engineering? Software vulnerabilities Human nature Protocol violation Application issues #5. Which of the following is NOT a form of social engineering Phone scams Phising Denial of service (DoS) Malvertising #6. Which of the following is NOT a valid defense against social engineering? Two-factor authentication Information classification Infrastructure hardening Physical security #7. Which tool provides the most granular information to help in the identification of malware? NetFlow Syslog Packet capture Server logs #8. NetFlow provides which of the following? Detailed data about each packet on the network Troubleshooting messages about the network devices information on the types of traffic traversing the network Network names of routers, end hosts, servers #9. Which of the following is NOT used for identification of malware on the network? NetFlow IPS events Routing Information Base (RIB) Packet captures #10. Which type of data is not often attractive to malicious actors? Personally identifiable information (PII) Training schedules Credit and debit card data Intelectual property (IP) Previous Finish
