CompTIA · Security+ SY0-801
Social, application, and credential attacks
Security+ SY0-801 · Lesson 12 of 32 · 1:34:50
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Security+ SY0-801 exam (CompTIA Security+ V8). In this lesson: social engineering (phishing, smishing, vishing, whaling, and impersonation), application attacks like injection, buffer overflows, replay, and privilege escalation, credential attacks like password spraying and brute force, and indicators of compromise in logs and behavior. Includes three original practice questions.
Preview the topics
- An Ashgrove finance clerk receives a phone call in the voice of the chief financial officer, asking for an urgent transfer to a new supplier. At that moment, the real officer is on a plane. Which attack is this?
- Overnight, the sign-in logs show one attempt on each of four hundred Ashgrove accounts, all with the same password, Spring2026, and no account is locked out. Which attack is this?
- A buyer’s account signs in from the head office at 9:00, and from another continent at 9:20, while the first session is still open. Which indicators does this show?