Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
CompTIA · Security+ SY0-801

Threat vectors, part 1

Security+ SY0-801 · Lesson 8 of 32 · 1:04:16

YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗

In this lesson

Prepare for the Security+ SY0-801 exam (CompTIA Security+ V8). In this lesson: message-based vectors (email, SMS, instant messaging, and collaboration tools), images and attachments (QR codes, CAPTCHAs, macros, and PDFs), browser-based vectors (extensions, scripts, and password managers), networks and remote access, and advanced persistent threats. Includes three original practice questions.

Preview the topics
  • Visitors to the factory canteen scan the code on the menu to order lunch, and land on a page that asks for their company sign-in. Someone had taped a new code over the original. Which vector did the attacker use?
  • An Ashgrove buyer installs a free coupon extension, and two weeks later, the buyer’s supplier portal sessions are used from another country, without any password prompt. What most likely happened?
  • Ashgrove’s firewall logs show thousands of sign-in attempts against a remote desktop port that a technician opened to the internet for a supplier last year. Which vector does this exposure create?