Malware & Threat Landscape
by Froga
The threats that work even when every cryptographic protocol is implemented correctly: malware types, social engineering, supply-chain attacks, and the defenses -- IDS/IPS, honeypots, backups -- built to catch each one.
You're previewing this room. Log in or create a free account to answer the questions and track your progress.
Study material
Every other room in this path defends a specific technical guarantee -- a shared key, a certificate, a tunnel. This room is about the threats that do not care whether any of that is implemented correctly: malicious software that runs once it is on a machine, and people who are simply asked, convincingly, to hand something over.
Every other room in this path is about breaking or protecting a mathematical guarantee -- a key, a certificate, a protocol. Which of these attacks instead works even when every cryptographic protocol involved is implemented perfectly?
multiple choice
An email that impersonates a company's IT department and asks an employee to type their password into a fake login page.
A meet-in-the-middle attack against a weak block cipher.
Intercepting an unencrypted Wi-Fi connection at a coffee shop.
Exploiting a bug in how a certificate's signature is verified.
Which of these four does not depend on any weakness in math or protocol design at all?
Log in to answer
Ready to test yourself?
Sign up free to answer, score points, and build your streak.