Qwissit Cybersecurity

Security+ SY0-801

Recognizing Attacks and Indicators

12 of 60 questions in the app

Malware

  1. Which malware encrypts data and demands a ransom for its release? Easy
  2. How does a Trojan typically get onto a system? Easy
  3. What distinguishes a worm from a classic virus? Easy
  4. Which malware records keystrokes, for example to steal passwords? Easy
  5. A program deletes data only once a particular employee is removed from the payroll. What is this malware called? Easy
  6. What is the main goal of a rootkit? Easy
  7. What characterizes fileless malware? Easy

Social engineering

  1. What is smishing? Easy

Credential attacks

  1. An attacker tries the password "Autumn2026!" once on each of 5,000 accounts. What is this attack called, and why is it insidious? Medium
  2. A user receives dozens of push requests to confirm a sign-in at night and finally taps "Approve". Which technique is the attacker using? Medium

Indicators of compromise

  1. On an office PC, winword.exe starts a powershell.exe process with a long Base64-encoded command. What is the most plausible assessment? Hard
  2. During an investigation, system files show a modification date from 2009 but, according to the file system journal, were written yesterday. What does this suggest? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications