Question

1. An attacker compromises the Washington Post's web server and proceeds to modify the homepage slightly by inserting a 1x1 pixel iframe that directs all website visitors to a webpage of his choosing that then installs malware on the visitors' computers. The attacker did this explicitly because he knows that US policymakers frequent the website. This would be an example of a ___________ attack.

5. Man-in-the-middle
6. Remote Code Execution
7. Waterholing
8. Replay

2. During a log review, you discover a series of logs that shows the following multiple failed login attempts:

Jan 31 11:39:20 ip-10.0.0.2 sshd[10102]: Invalid user admin from remotehost passwd=bears
Jan 31 11:39:20 ip-10.0.0.2 sshd[10108]: Invalid user admin from remotehost passwd=eat
Jan 31 11:39:20 ip-10.0.0.2 sshd[10114]: Invalid user admin from remotehost passwd=beats
Jan 31 11:39:20 ip-10.0.0.2 sshd[10118]: Invalid user admin from remotehost passwd=battlestar
Jan 31 11:39:20 ip-10.0.0.2 sshd[10120]: Invalid user admin from remotehost passwd=galactica

What type(s) of attack have you discovered?

1. A brute force attack
2. A rainbow table attack
3. A man-in-the-middle attack

d. A dictionary attack

3. In a virtualized environment, the ___________ is responsible for managing resources and requests from the guest operating systems.

Answer 1

1) Waterholing

2) A dictionary attack

3) Hypervisors