Soru

Zorluk: OrtaKey Security Concepts, Threats, Vulnerabilities, and Mitigations

Match each enterprise network security threat on the left with its corresponding operational description or attack vector characteristic on the right.

  • Distributed Denial of Service (DDoS)An attack that floods network bandwidth or system resources from multiple distributed compromised endpoints to degrade or deny service availability.
  • Man-in-the-Middle (MitM)An attack where an unauthorized device secretly positions itself in the active communication path to intercept, inspect, or modify traffic between two endpoints.
  • Spear PhishingA highly targeted social engineering attack using tailored communications to deceive specific individuals into divulging sensitive credentials or corporate data.
  • Zero-Day ExploitAn attack that targets a previously undisclosed software vulnerability before the system vendor has developed or distributed an official security patch.

Cevap

Distributed Denial of Service (DDoS) matches flooding resources from multiple distributed endpoints; Man-in-the-Middle (MitM) matches intercepting traffic in the active communication path; Spear Phishing matches targeted social engineering targeting specific individuals; Zero-Day Exploit matches attacking an undisclosed vulnerability before a patch exists.
Each security threat term is accurately mapped to its primary attack vector and operational impact within enterprise network environments.

Adım Adım Çözüm

1
Analyze Distributed Denial of Service (DDoS)
Identified as a multi-source resource exhaustion attack targeting availability.
DDoS specifically leverages multiple distributed hosts to saturate network bandwidth or host processing capacity.
2
Analyze Man-in-the-Middle (MitM)
Identified as an active path insertion and packet interception attack.
MitM relies on tricking two endpoints into routing data through an adversary's host to eavesdrop or modify traffic.
3
Analyze Spear Phishing
Identified as a tailored social engineering vector.
Spear phishing differs from generic mass phishing by customizing content to deceive specific targeted individuals or organizations.
4
Analyze Zero-Day Exploit
Identified as an attack on unpatched, publicly unknown code vulnerabilities.
Zero-day refers to software flaws exploited prior to patch availability or public security advisory release.

Anahtar Kavram

Key Security Concepts, Threats, Vulnerabilities, and Mitigations
Bu soruyu puanla