StudyXY
RegisterLog in
Information Technology /CompTIA Sec+ SY0-701 PBQ #1

CompTIA Sec+ SY0-701 PBQ #1

Information Technology5 CardsCreated about 2 months ago

This content outlines various cyberattacks including Botnets for DDoS, Remote Access Trojans (RATs) for unauthorized control, Worms targeting databases with default credentials, and Keyloggers for capturing keystrokes—along with the best practices to prevent or remediate each attack type.

PrintEmbedImportReport

Attack Description:

An attacker sends multiple SYN packets from multiple sources.

Intended target: Web Server

Attack Type:

Botnet

BEST Preventative or Remediation Action: Enable DDoS protection

Tap or swipe ↕ to flip
Swipe ←→Navigate
SSpeak
FFocus
1/5

Key Terms

Term
Definition

Attack Description:

An attacker sends multiple SYN packets from multiple sources.

Intended target: Web Server

Attack Type:

Botnet

BEST Preventative or Re...

Attack Description:

The attack establishes a connection, which allows remote commands to be executed

Intended Target: User

Attack Type:

RAT (Remote Access Trojan)

BES...

Attack Description:

The attack is self-propagating and compromises a SQL database using well-known credentials as it moves through the network.

Intended target: Database Server

Attack Type:

Worm

BEST Preventative or Reme...

Attack Description:

The attack uses hardware to remotely monitor a user’s input activity to harvest credentials

Intended target: Executive

Attack Type:

Keylogger

BEST Preventative or...

Attack Description:

The attack embeds hidden access in an internally developed application that bypasses account login

Intended target: Application

Attack Type:

Backdoor

BEST Preventative or ...

Log in to view all terms

Related Flashcard Decks

Information Technology

Security+ (SY0-701): Additional Knowledge

This flashcard set explores various cybersecurity topics including credential-stuffing attacks, data classification (e.g., private data), and key disaster recovery metrics like RTO. It also highlights protective measures such as hashing for data integrity, automation support challenges, and the use of URL scanning in web filtering to prevent malware infections.

10 cards
View Deck
Information Technology

Security+ (SY0-701): Cert Master Practice: 5.0 Security Program Management and Oversight

This flashcard set covers key concepts in cybersecurity governance frameworks, including centralized governance, data stewardship roles, and compliance laws like SOX. It also addresses environments supporting development and change management, as well as recovery strategies like Recovery Point Objective (RPO) to minimize data loss during system failures.

8 cards
View Deck
Information Technology

Security+ (SY0-701): Cert Master Practice: 4.0 Security Operations

This flashcard set explores advanced cybersecurity practices including refining SIEM alert handling, email security protocols (DKIM, DMARC), secure authentication methods, and strategic threat-hunting. It emphasizes how to enhance incident response efficiency and leverage proactive defense techniques like maneuvering to counteract potential threats.

11 cards
View Deck
Information Technology

Security+ (SY0-701): Cert Master Practice; 2.0 Threats, Vulnerabilities, and Mitigations

This deck covers key concepts related to threats, vulnerabilities, and mitigations in cybersecurity, focusing on virtual machine security.

1 cards
View Deck
Information Technology

Security+ (SY0-701): Cert Master Practice; 1.0 General Security Concepts

This flashcard deck covers key concepts from the Security+ (SY0-701) exam, focusing on general security concepts such as technical and operational controls, policy enforcement, and tokenization.

6 cards
View Deck
Information Technology

Security+ (SY0-701): Lesson 16: Summarize Data Protection Part 2

This flashcard deck covers key concepts from the Security+ (SY0-701) Lesson 16, focusing on data protection methods, DLP components, and security awareness training.

25 cards
View Deck

Study Tips

  • Press F to enter focus mode for distraction-free studying
  • Review cards regularly to improve retention
  • Try to recall the answer before flipping the card
  • Share this deck with friends to study together
CompTIA Sec+ SY0-701 PBQ #1
TermDefinition

Attack Description:

An attacker sends multiple SYN packets from multiple sources.

Intended target: Web Server

Attack Type:

Botnet

BEST Preventative or Remediation Action: Enable DDoS protection

Attack Description:

The attack establishes a connection, which allows remote commands to be executed

Intended Target: User

Attack Type:

RAT (Remote Access Trojan)

BEST Preventative or Remediation Action: Disable remote access services

Attack Description:

The attack is self-propagating and compromises a SQL database using well-known credentials as it moves through the network.

Intended target: Database Server

Attack Type:

Worm

BEST Preventative or Remediation Action: Change the default application password

Attack Description:

The attack uses hardware to remotely monitor a user’s input activity to harvest credentials

Intended target: Executive

Attack Type:

Keylogger

BEST Preventative or Remediation Action: Implement 2FA using push notification

Attack Description:

The attack embeds hidden access in an internally developed application that bypasses account login

Intended target: Application

Attack Type:

Backdoor

BEST Preventative or Remediation Action: Conduct a code review