Threats, Attacks, and Vulnerabilities
S. Russell Christy, Chuck Easttom · 2018
This chapter offers guidance on how to prepare for the CompTIA Security+ Exam SY0-501, covering various topics related to social engineering, driver manipulation, and penetration testing concepts. The chapter also contains multiple choice questions for the exam. One of the questions relates to a sales manager with a major insurance company, who has received an email that is encouraging him to click on a link and fill out a survey. He is suspicious of the email, but it does mention a major insurance association, and that makes him think it might be legitimate. Another question relates to a network administrator for a small accounting firm, the users on whose network are complaining of slow connectivity. A question also relates to a company that outsourced development of an accounting application to a local programming firm. One of the accountants accidentally discovers a way to log in and bypass all security and authentication.