Security+ quiz 1: threats, vulnerabilities and attacks

Ransomware encrypts (and often steals) data, then demands a ransom. Offline backups are the most important defence.

A worm self-replicates over the network, usually by exploiting a vulnerability. A trojan needs the user to run it.

Vishing is voice phishing. Smishing uses SMS, pharming redirects users to fake sites, and tailgating is following someone through a secure door.

Spraying tries a few common passwords across many accounts to avoid lockouts. Credential stuffing reuses leaked username/password pairs.

That input tries to change a database query. Parameterised queries (prepared statements) are the main fix.

XSS injects script into pages viewed by others. Output encoding and a Content Security Policy help prevent it.

A zero-day has no patch available when it is first exploited, so defences rely on other layers such as segmentation and monitoring.

Nation-state groups (often called APTs) have large resources and long-term goals such as espionage.

Baiting uses a tempting item to trick someone. Whaling targets executives; a watering hole compromises a site the victims visit.

An on-path attacker sits between the two sides. Encryption with proper certificate checks (TLS) is the main defence.

Smishing is SMS phishing. Vishing uses voice calls, and whaling targets senior executives.

A rootkit hides itself and other malware, often at a low level of the operating system.

A distributed denial-of-service (DDoS) attack uses many sources, often a botnet, to exhaust resources.

Credential stuffing exploits password reuse by trying leaked pairs on other services.

A logic bomb waits for a trigger condition before acting.

A watering hole attack infects a site the victims trust and visit regularly.

Typosquatting uses lookalike or misspelled domains to trick users.

Cross-site request forgery tricks a logged-in browser into sending unwanted requests. Anti-CSRF tokens prevent it.

Tailgating (or piggybacking) is a physical social engineering technique.

Supply chain attacks poison a trusted component or update so many downstream customers are affected.