Attack Identification & Remediation

Scenario 1: During peak business hours, a company's public-facing web application becomes intermittently unavailable. Network monitoring tools report a sustained increase in incomplete TCP connection attempts from many different external IP addresses.

Attack Type -- Select -- Worm Botnet Keylogger RAT Backdoor Remediation -- Select -- Implement MFA Enable DDoS Protection Conduct Code Review Disable Remote Access Services Change Default Passwords

Scenario 2: A help desk technician notices that an employee's workstation is periodically establishing outbound connections to an unknown external system. Shortly afterward, unauthorized system commands are executed without the user's knowledge.

Attack Type -- Select -- Botnet RAT Worm Backdoor Keylogger Remediation -- Select -- Conduct Code Review Disable Remote Access Services Enable DDoS Protection Change Default Passwords Implement MFA

Scenario 3: Multiple systems within the same network segment begin exhibiting similar abnormal behavior within a short period of time. Investigation reveals that a backend database service was exposed using vendor-default credentials.

Attack Type -- Select -- RAT Worm Botnet Keylogger Backdoor Remediation -- Select -- Implement MFA Change Default Application Passwords Enable DDoS Protection Disable Remote Access Services Conduct Code Review

Scenario 4: An executive reports repeated account compromises despite antivirus scans showing no signs of malware. A physical inspection reveals an unauthorized device connected between the keyboard and the workstation.

Attack Type -- Select -- RAT Keylogger Botnet Worm Backdoor Remediation -- Select -- Enable DDoS Protection Implement MFA Using Push Notification Conduct Code Review Disable Remote Access Services Change Default Passwords

Scenario 5: A security review of a custom-developed application uncovers undocumented logic that allows system access without standard authentication checks.

Attack Type -- Select -- RAT Backdoor Worm Keylogger Botnet Remediation -- Select -- Implement MFA Conduct Code Review Enable DDoS Protection Disable Remote Access Services Change Default Passwords