Take this Quiz: T Level Digital: Security Threats and Controls | Zestly

Question 1

Tarvin Bookings, a ticketing site, finds that typing a quotation mark and extra text into its search box causes the site to return rows from a customer database that the search was never meant to access. What kind of attack is this?

Accepted Answer

SQL injection

Answer

A denial-of-service attack

Answer

Phishing

Answer

A brute-force attack

Question 2

Brackley Utilities finds its website unreachable for four hours while it receives an enormous volume of requests from thousands of different addresses at once. No data is stolen or altered. What kind of attack is this?

Accepted Answer

A distributed denial-of-service attack

Answer

Ransomware

Answer

SQL injection

Answer

A man-in-the-middle attack

Question 3

A departing employee at Rossett Design copies the entire client list to a personal drive during their notice period, using an account they are still entitled to use. What kind of threat is this?

Accepted Answer

An insider threat

Answer

A brute-force attack

Answer

A supply chain attack

Answer

A zero-day exploit

Question 4

Ilkley Accounts is implementing multi-factor authentication. Which risk does this control most directly reduce?

Answer

An attacker who has obtained a valid password being able to use it

Answer

A member of staff emailing a spreadsheet to the wrong recipient

Answer

A hard disk failing and taking the only copy of the data with it

Answer

A supplier's invoice being altered in transit

Question 5

Malton Logistics applies a software patch released by a vendor. What does this most directly protect the firm against?

Answer

An employee choosing a weak password

Answer

A fire in the server room

Answer

A customer disputing a delivery charge

Answer

A weakness in the software that is already publicly known and being exploited