Security+ Attack Surface and Vector Analysis Quiz

1. Which type of malware replicates itself and spreads to other systems without user interaction?

Virus

Trojan

Worm

Ransomware

Submit

3. Which control type focuses on identifying and documenting threats before they cause harm?

Detective control

Preventive control

Corrective control

Compensating control

Submit

5. What does a denial-of-service (DoS) attack primarily attempt to do?

Steal sensitive data

Make a service unavailable to legitimate users

Encrypt user files

Modify system configurations

6. Which of the following is a proactive threat mitigation technique?

Waiting for vulnerabilities to be discovered in production

Implementing security patches before systems are compromised

Ignoring low-severity vulnerabilities

Disabling all security alerts

Submit

8. What is the main purpose of network segmentation as a mitigation strategy?

To limit lateral movement and isolate critical assets from compromised systems

To increase internet bandwidth

To reduce the number of employees

To eliminate all network traffic

9. Which mitigation reduces attack surface by disabling unnecessary services and features?

Hardening

Segmentation

Encryption

Monitoring

Submit

11. Which of the following best describes an attack surface?

The total sum of exploitable vulnerabilities in a system or network

Only the perimeter firewall protecting an organization

The physical location where cyberattacks originate

A visual map of all employee workstations

12. What is the primary benefit of conducting a vulnerability assessment?

To identify and document security weaknesses before attackers find them

To guarantee 100% security against all threats

To replace the need for firewalls

To monitor user behavior on the network

13. Which of the following best defines risk in a security context?

The likelihood that a threat will exploit a vulnerability and cause harm

Any unauthorized access attempt

The cost of implementing security controls

The number of active malware infections

Submit

15. Which mitigation strategy involves installing security patches and updates?

Vulnerability remediation

Threat intelligence

Risk acceptance

Penetration testing

16. What does CVSS stand for?

Common Vulnerability Scoring System

Cybersecurity Vulnerability Security Standard

Critical Virus Software Suite

Compliance Verification Security System

17. Which of the following is NOT a common attack vector for web applications?

Cross-Site Scripting (XSS)

SQL Injection

RAID failure

Cross-Site Request Forgery (CSRF)

Submit

19. Which attack vector exploits human psychology rather than technical weaknesses?

SQL injection

Phishing

Buffer overflow

Cross-site scripting

20. What is a primary goal of threat modeling?

To identify potential attack vectors and vulnerabilities before exploitation

To install antivirus software on all endpoints

To monitor employee internet usage

To physically secure server rooms

Security+ Attack Surface and Vector Analysis Quiz

1. Which type of malware replicates itself and spreads to other systems without user interaction?

2.

What first name or nickname would you like us to use?

2. An organization decides to accept the risk of a known vulnerability rather than implement a costly mitigation. This is an example of ____.

3. Which control type focuses on identifying and documenting threats before they cause harm?

4. The practice of ____ involves testing a system for vulnerabilities with the owner's permission.

5. What does a denial-of-service (DoS) attack primarily attempt to do?

6. Which of the following is a proactive threat mitigation technique?

7. A successful ____ attack tricks a user into revealing sensitive information through deception.

8. What is the main purpose of network segmentation as a mitigation strategy?

9. Which mitigation reduces attack surface by disabling unnecessary services and features?

10. A ____ is a weakness in software or hardware that can be exploited by an attacker.

11. Which of the following best describes an attack surface?

12. What is the primary benefit of conducting a vulnerability assessment?

13. Which of the following best defines risk in a security context?

14. An attacker gains unauthorized access to a system through an open network port. This is an example of exploiting a(n) ____.

15. Which mitigation strategy involves installing security patches and updates?

16. What does CVSS stand for?

17. Which of the following is NOT a common attack vector for web applications?

18. A vulnerability that is unknown to the vendor and security community is called a ____.

19. Which attack vector exploits human psychology rather than technical weaknesses?

20. What is a primary goal of threat modeling?