Threat Vector Quiz: How Do Attackers Get In?

1. A rootkit is a type of malware that primarily targets which layer of a system?

Application layer only

Kernel and operating system level

Network layer exclusively

User interface only

2. Which of the following best represents an internal threat vector?

A disgruntled employee with system access

An external hacker scanning the network

A misconfigured DNS server

An unpatched web application

Submit

4. Which threat vector allows attackers to escalate privileges after gaining initial access?

Firewall evasion

Privilege escalation exploits

Network segmentation

Encryption algorithms

5. A watering hole attack targets which threat vector?

Direct server vulnerabilities

Websites frequently visited by a target group

Email servers exclusively

Firewall configurations

6. What does a vulnerability scanner help identify?

Active threat vectors and potential security weaknesses

Legitimate user login attempts

Encrypted network traffic only

Physical server locations

7. Which threat vector involves an attacker pretending to be an authorized user to gain system access?

Privilege escalation

Impersonation or identity spoofing

Port scanning

Packet fragmentation

Submit

9. Cross-site scripting (XSS) attacks primarily target which type of application?

Desktop applications

Web applications and browsers

Mobile operating systems

Server firmware

10. Which of the following is a passive threat vector that does not directly modify data?

Malware infection

Packet sniffing and eavesdropping

Ransomware deployment

Website defacement

11. Which of the following best describes a threat vector in the context of cybersecurity?

A mathematical model used to encrypt data

A method or path an attacker uses to gain unauthorized access to a system

A type of firewall rule that blocks malicious traffic

A backup procedure for recovering compromised data

12. Which threat vector exploits weak or default credentials?

Cross-site scripting (XSS)

Brute force or dictionary attacks

Packet sniffing

DNS spoofing

Submit

14. What is the primary threat vector used in ransomware attacks?

Encrypted network protocols

Malicious email attachments or compromised websites

Firewall rule violations

Physical server access only

15. Which of the following is an example of a zero-day exploit?

An attack using a known vulnerability that has been patched

An attack exploiting an unknown vulnerability before a patch exists

A brute force attempt on a password-protected system

A phishing email sent to random users

Submit

17. Which threat vector involves deceiving users into revealing sensitive information by impersonating a trusted entity?

Brute force attack

Social engineering

Buffer overflow

SQL injection

18. What is the primary goal of a man-in-the-middle (MITM) attack?

To crash the target server

To intercept and alter communications between two parties

To encrypt all network traffic

To install antivirus software remotely

19. Phishing attacks primarily target which vulnerability?

Outdated software patches

Human trust and social engineering

Unencrypted network protocols

Weak firewall configurations

Threat Vector Quiz: How Do Attackers Get In?

1. A rootkit is a type of malware that primarily targets which layer of a system?

2.

What first name or nickname would you like us to use?

2. Which of the following best represents an internal threat vector?

3. A ______ attack tricks users into clicking malicious links or downloading infected files.

4. Which threat vector allows attackers to escalate privileges after gaining initial access?

5. A watering hole attack targets which threat vector?

6. What does a vulnerability scanner help identify?

7. Which threat vector involves an attacker pretending to be an authorized user to gain system access?

8. A ______ is a malicious program that appears legitimate but contains hidden harmful code.

9. Cross-site scripting (XSS) attacks primarily target which type of application?

10. Which of the following is a passive threat vector that does not directly modify data?

11. Which of the following best describes a threat vector in the context of cybersecurity?

12. Which threat vector exploits weak or default credentials?

13. SQL ______ is a code injection technique that exploits vulnerable database queries.

14. What is the primary threat vector used in ransomware attacks?

15. Which of the following is an example of a zero-day exploit?

16. A ______ attack floods a network with traffic to make services unavailable.

17. Which threat vector involves deceiving users into revealing sensitive information by impersonating a trusted entity?

18. What is the primary goal of a man-in-the-middle (MITM) attack?

19. Phishing attacks primarily target which vulnerability?