Cisco Cyber Security Practice Exam

What category of attack involves an unauthorized method of accessing a system by exploiting computer vulnerabilities?

1. Social engineering

2. Malware

3. Network intrusion

4. Phishing

The correct answer is: Network intrusion

Network intrusion falls under the category of attacks that involve unauthorized access to systems by taking advantage of vulnerabilities present within the network or the systems connected to it. This typically includes methods that exploit weaknesses in software, misconfigured settings, or other security gaps that have not been adequately addressed. Network intrusions are often characterized by techniques such as scanning for open ports, exploiting unpatched vulnerabilities, and executing commands remotely to gain control over systems. The intruder may look to steal data, disrupt services, or use the compromised systems as a foothold to further penetrate the organizational infrastructure. In contrast, social engineering typically involves manipulation of individuals to gain confidential information or access rather than directly exploiting system vulnerabilities. Malware refers to malicious software designed to disrupt, damage, or gain unauthorized access to computer systems but does not solely focus on the method of accessing through vulnerabilities. Phishing, while it may lead to unauthorized access, primarily relies on deceiving users into providing credentials rather than exploiting technical vulnerabilities in systems. Therefore, understanding how network intrusion specifically targets system vulnerabilities clarifies why it is the correct answer in this context.