Explain common threat vectors and attack surfaces.
9 practice questions under this official exam objective (SY0-701), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
9 total · page 1 of 1Identifying Business Email Compromise Scenarios
This question tests recognition of Business Email Compromise (BEC) by distinguishing it from ransomware and general phishing. The correct answer ident
Was the CFO Impersonation Call Social Engineering or Whaling?
A help-desk user recognized a pretext call pressing for credit card information 'on behalf of the CFO' as social engineering rather than executive wha
Which Social Engineering Techniques Are Used in a Payroll Text Message?
An employee receives an SMS that claims to come from the payroll department and asks for credential verification. The page establishes that this scena
Which Attack Vector Uses Fake HR Onboarding Email Links?
A new hire sees an onboarding email from HR whose links resolve to non-company domains — a classic phishing lure. This page establishes that the attac
Low-Cost IoT in Infrastructure: Data Storage vs. Country of Origin
This SY0-701 question asks whether country of origin or data storage is the more likely security concern for low-cost IoT devices in infrastructure en
What Is the Main Security Concern With Low-Cost IoT Devices?
Low-cost IoT devices installed in infrastructure environments create their most direct security risk through how the data they collect and transmit is
Bank-Impersonation Wire Transfer Request: Which Attack Is It?
An urgent wire-transfer instruction that appears to come from the company's own bank is a business email compromise (BEC) — a finance-targeted social-
Which Attack Intercepts and Reuses Login Credentials?
An on-path attack (formerly man-in-the-middle) places the malicious actor between the user and the financial database so credentials can be captured i
Which Attack Vector Caused the Resume-Based Ransomware Infection?
A workstation encrypted by ransomware right after a user opened a resume received in a message points to a spear-phishing attachment as the initial ve