A doctor receives an email about her upcoming holiday in France. When she clicks the URL website link in the email, the connection is blocked by her office firewall because it's a known malware website. Which type of attack includes a link to a malware website in an email?
Correct Answer: B
Phishing is a type of attack that involves sending fraudulent emails that appear to be from legitimate sources, such as banks, companies, or individuals, in order to trick recipients into clicking on malicious links, opening malicious attachments, or providing sensitive information12. The link to a malware website in the email is an example of a malicious link, which may lead to the installation of malware, ransomware, spyware, or other malicious software on the user's device, or the redirection to a fake website that mimics a legitimate one, where the user may be asked to enter their credentials, personal information, or financial details34. Phishing emails often use social engineering techniques, such as creating a sense of urgency, curiosity, or fear, to persuade the user to click on the link or attachment, or to reply to the email5. Phishing emails may also spoof the sender's address, domain, or logo, to make them look more authentic and trustworthy6. Whaling, pharming, and spam are not the correct answers for this question. Whaling is a specific type of phishing that targets high-profile individuals, such as executives, celebrities, or politicians, with the aim of stealing their confidential information or influencing their decisions7. Pharming is a type of attack that involves redirecting the user's web browser to a fake website, even if they enter the correct URL, by modifying the DNS server or the user's hosts file. Spam is the unsolicited or unwanted electronic messages, such as emails, texts, or instant messages, that are sent in bulk to a large number of recipients, usually for advertising, marketing, or scamming purposes. References: * What is phishing? | Malwarebytes * Phishing - Wikipedia * Don't Panic! Here's What To Do If You Clicked On A Phishing Link * How can Malware spread through Email and How to Protect * What is phishing? How this cyber attack works and how to prevent it ... * Identifying Illegitimate Email Links | Division of Information Technology * What is whaling? | NortonLifeLock * [What is pharming? | NortonLifeLock] * [What is spam? | NortonLifeLock]
Question 27
Which product functions as part of a SASE solution?
Correct Answer: D
Prisma SD-WAN is a key component of a SASE (Secure Access Service Edge) solution. It provides intelligent routing, traffic optimization, and secure connectivity between users and applications, supporting the networking part of SASE alongside security services like those in Prisma Access.
Question 28
Which two statements describe the Jasager attack? (Choose two.)
Correct Answer: B,D
A Jasager attack is a type of wireless man-in-the-middle attack that exploits the way mobile devices search for known wireless networks. A Jasager device will respond to any beacon request from a mobile device by saying "Yes, I'm here", pretending to be one of the preferred networks. This way, the Jasager device can trick the mobile device into connecting to it, without the user's knowledge or consent. The Jasager device can then intercept, modify, or redirect the traffic of the victim. For this attack to work, the attacker needs to be within close proximity of the victim, and the victim must have at least one known network in their preferred list. The victim does not need to manually choose the attacker's access point, nor does the attacker try to get victims to connect at random. References: Wireless Man in the Middle - Palo Alto Networks, Man-in-the-middle attacks with malicious & rogue Wi-Fi access points - Privacy Guides
Question 29
Which feature is part of an intrusion prevention system (IPS)?
Correct Answer: B
An Intrusion Prevention System (IPS) includes automated security actions, such as blocking malicious traffic, resetting connections, or alerting administrators when it detects suspicious activity, helping to stop attacks in real time.
Question 30
Which attacker profile acts independently or as part of an unlawful organization?
Correct Answer: A
Cybercriminals are attackers who act independently or as part of an unlawful organization, such as a crime syndicate or a hacker group. Their main motivation is to make money by exploiting vulnerabilities in systems, networks, or applications. They use various methods, such as ransomware, phishing, identity theft, fraud, or botnets, to steal data, extort victims, or disrupt services. Cybercriminals often target individuals, businesses, or institutions that have valuable or sensitive information, such as financial, personal, or health data. Cybercriminals are constantly evolving their techniques and tools to evade detection and countermeasures. They may also collaborate with other cybercriminals or hire hackers to perform specific tasks. References: * Cybersecurity Threats: Cybercriminals * Attackers Profile
