SY0-701 domain 2: threat actors, attack vectors, social engineering, application and OS vulnerabilities, indicators and mitigations.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What is a nation-state threat actor?
Show answer
A government-sponsored group with significant funding and sophisticated capabilities seeking political, military, or economic advantage.- What is the primary motivation of cybercriminals?
Show answer
Financial gain through theft, extortion, fraud, or sale of stolen data.- What is an insider threat?
Show answer
A malicious or negligent employee, contractor, or authorized user who abuses their access to harm the organization.- Define hacktivist.
Show answer
An attacker motivated by political or social causes who targets organizations to promote ideology or protest.- What is a script kiddie?
Show answer
An unsophisticated attacker with limited skills who uses pre-written tools and publicly known exploits.- What is a supply chain attack?
Show answer
Compromising a vendor or supplier to gain access to target organizations through trusted relationships.- What does a network-based attack vector involve?
Show answer
Exploiting vulnerabilities in network protocols, services, or topology to gain unauthorized access or disrupt operations.- What is a wireless attack vector?
Show answer
Exploiting vulnerabilities in wireless protocols (Wi-Fi, Bluetooth) to intercept traffic or gain network access.- What is a physical attack vector?
Show answer
Gaining unauthorized access by physically tampering with hardware, facilities, or devices.- What is phishing?
Show answer
Mass-sending deceptive emails designed to trick users into revealing credentials or clicking malicious links.- What is spear phishing?
Show answer
Targeted phishing attack against a specific individual or group using personalized information.- What is whaling?
Show answer
A spear phishing attack targeting senior executives or high-value individuals.- What is vishing?
Show answer
Social engineering attack conducted via phone calls to trick victims into revealing sensitive information.- What is smishing?
Show answer
Social engineering attack using SMS text messages to trick victims into clicking links or providing information.- What is pretexting?
Show answer
Creating a fabricated scenario or false identity to deceive someone into disclosing confidential information.
FlashKeepers