What is the primary goal of a denial-of-service (DoS) attack?

To disrupt the availability of a service

Which of the following best describes a zero-day vulnerability?

A vulnerability that is unknown to the software vendor

A vulnerability that is publicly known

A vulnerability that affects hardware only

A vulnerability for which a patch is available

What is the primary intent of a brute-force attack?

To guess passwords or encryption keys

To create a backdoor in a system

What is the key characteristic of a man-in-the-middle (MitM) attack?

Intercepting and relaying communications between two parties

Exploiting software vulnerabilities

Disguising malware as legitimate software

Which of the following describes a vulnerability in cybersecurity?

A weakness in a system that can be exploited by threats

What is the primary purpose of a threat assessment in cybersecurity?

To identify and evaluate potential threats to an organization

To train employees in computer skills

To enhance software performance

To secure physical infrastructure

Which of the following best describes a zero-day vulnerability?

A security flaw that is unknown to the vendor and therefore has no available patch

A weakness found in outdated software

A vulnerability that is publicly known and patched

A flaw that requires user authentication to exploit

In the context of cybersecurity, what does the term 'threat vector' refer to?

The method or pathway through which a threat can access a system

The software used to counteract threats

The type of threat affecting a system

What is the primary goal of implementing a firewall in a network?

To control incoming and outgoing network traffic based on security rules

To provide antivirus protection

What does the term 'phishing' refer to in cybersecurity?

A method of tricking individuals into revealing sensitive information

Which of the following defines a DDoS attack?

An attempt to make a machine or network resource unavailable by overwhelming it with traffic

A technique for password cracking

Vulnerability and Threats

Reading Passage: The Anatomy of a Kill Chain In the lexicon of modern warfare, the term "kill chain" describes the end-to-end process of a military attack, from the initial identification of a target to its eventual destruction and the subsequent evaluation of the strike's effectiveness. Conceptually, the kill chain is a structural model used to understand and optimize the speed and precision of military operations. The fundamental principle of this model is that an attack functions as a sequence of interdependent stages; if any single link in the chain is broken, the entire operation fails. For strategic planners, this creates a dual objective: to accelerate one's own kill chain while simultaneously finding ways to disrupt the adversary's. Strategic Concept: The Kinetic Model (F2T2EA) The traditional military kill chain is often summarized by the acronym F2T2EA, representing a continuous cycle of find, fix, track, target, engage, and assess. The kinetic kill chain begins with Find, the reconnaissance phase where intelligence assets identify a potential target within a theater of operations. Once found, the process moves to Fix, which involves pinning down the target's specific location and ensuring it can be distinguished from friendly forces or non-combatants. Track follows, maintaining a persistent watch on the target's movements to prevent its escape. In the Target phase, commanders select the appropriate weapon system and verify the legality and strategic value of the strike. Engage is the kinetic moment—the actual deployment of ordnance against the objective. Finally, Assess involves battle damage assessment (BDA) to determine if the desired effects were achieved or if further engagement is required. This model emphasizes "compressing the sensor-to-shooter timeline," meaning the faster a military can move through these steps, the more lethal it becomes. The Evolution: The Cyber Kill Chain® As warfare expanded into the digital domain, Lockheed Martin adapted the kinetic model into the Cyber Kill Chain. This framework assists defenders in identifying and stopping Advanced Persistent Threats (APTs). Unlike a physical missile, a cyberattack often unfolds over weeks or months, but the sequential logic remains the same. The model consists of seven distinct stages: Stage Description of Attacker Activity 1. Reconnaissance The harvesting of information. Attackers research targets via social media, public records, and technical scanning to find vulnerabilities. 2. Weaponization Coupling a remote access trojan with an exploit into a deliverable payload (e.g., a malicious PDF or Microsoft Office document). 3. Delivery Transmission of the weapon to the target environment. Common vectors include email attachments, malicious websites, or USB drives. 4. Exploitation The weapon triggers. The code executes on the victim's system, typically by taking advantage of a software or operating system vulnerability. 5. Installation The attacker installs a persistent backdoor or malware on the victim's system, allowing them to maintain access even after a reboot. 6. Command & Control (C2) The compromised system opens a communication channel back to the attacker's server, allowing the intruder to give manual instructions. 7. Actions on Objective The final stage where the attacker achieves their goal, such as data exfiltration, encryption for ransom, or destruction of critical infrastructure. Strategic Implications for Defense The strategic value of the Cyber Kill Chain lies in its ability to provide a roadmap for "proactive defense." By understanding the sequence, security professionals can implement controls at every stage. For instance, robust email filtering can break the chain at the Delivery stage, while endpoint detection can stop the Installation phase. Crucially, the earlier a defender breaks the chain, the lower the cost of mitigation and the lower the risk of damage. If an attacker is stopped during Reconnaissance, they have gained nothing. If they are stopped during Actions on Objective, the damage may already be catastrophic. In both kinetic and cyber environments, the goal is the same: to create a "defensive depth" that makes the cost of a successful attack prohibitively high for the adversary.

Vulnerability and resilience to environmental change

Global Climate - Vulnerability and Resilience Vocabulary

Global Climate - Vulnerability and Resilience

Ethical hacking and vulnerability assessment

Related quizzes

Related quizzes