Soru

Zorluk: OrtaInformation Technology and Cybersecurity

Match the Cyber Security Threat Vectors in List-I with their corresponding Operational Descriptions in List-II:

  • Spear PhishingTargeted fraudulent communication tailored with personalized information to deceive a specific organization or high-profile individual
  • Man-in-the-Middle (MitM) AttackAttacker secretly eavesdrops or alters communication between two legitimate systems that believe they are directly connected
  • Drive-by DownloadUnintentional installation of malicious code triggered merely by visiting a compromised web page without user interaction
  • Zero-Day ExploitCyber attack exploiting a software vulnerability that is undisclosed to the software developer and has no available security patch

Cevap

Spear Phishing corresponds to targeted fraudulent communication using personalized details. Man-in-the-Middle attack corresponds to secretly intercepting communications between two connected systems. Drive-by Download corresponds to unintentional malware installation when accessing a compromised web page. Zero-Day Exploit corresponds to attacking software vulnerabilities that lack an available vendor patch.
Each cyber security threat vector is accurately paired with its operational definition: Spear Phishing uses tailored social engineering for specific targets; Man-in-the-Middle attacks intercept active channel communications; Drive-by Downloads install payload scripts automatically upon page load; and Zero-Day Exploits target undisclosed software flaws lacking patches.

Adım Adım Çözüm

1
Identify the characteristic features of Spear Phishing
Spear Phishing relies on tailored, personalized intelligence to target specific victims, distinguishing it from mass phishing.
Personalized context is used to trick high-value targets.
2
Analyze the mechanism of Man-in-the-Middle (MitM) attacks
MitM attack secretly intercepts and potentially alters communication between two endpoints without their awareness.
The attacker positions themselves between sender and receiver.
3
Distinguish between Drive-by Download and Zero-Day Exploit mechanisms
Drive-by download occurs automatically upon visiting infected web pages, while zero-day exploits specifically leverage unpatched software flaws.
Drive-by downloads exploit browser/plugin scripts, whereas zero-day exploits relate to vendor vulnerability timelines.

Anahtar Kavram

Classification and Mechanics of Cyber Threats
Tahmini Süre:1m 30s
Bu soruyu puanla