<section data-block="SingleChoice"><h3>Microsoft reported on Peach Sandstorm, which is either a stone fruit or an Iranian nation-state TA involved in espionage operations.Which one of these were used to conduct reconnaissance on victims' Active Directory?</h3><ul><li>AzureHound</li><li>BloodHound</li><li>AD Explorer</li><li>AdFind</li></ul></section><section data-block="SingleChoice"><h3>Which U.S Casino chain recently paid a ransom in the hopes of avoiding the online leak of customer data stolen in a recent cyberattack</h3><ul><li>Caesars</li><li>MGM Resorts International</li><li>Mandalay Resort Group</li><li>Station Casinos</li></ul></section><section data-block="SingleChoice"><h3>Which group is allegedly behind the cyberattack on MGM Resorts, which have resulted in significant impact to their operations.</h3><ul><li>ALPHV | Scattered Spider</li><li>Zeppelin | Vice Spider</li><li>Medusa | Frozen Spider</li><li>LockBit | Bitwise Spider</li></ul></section><section data-block="SingleChoice"><h3>Huntress provided an overview of Scattered Spider’s TTPs, following the MGM hack.What, according to Huntress, is being increasingly targeted by adversaries as a mechanism to evade or circumvent security controls?</h3><ul><li>Identities</li><li>Critical Vulnerabilities</li><li>Open RDP</li><li>On-Prem Exchange</li></ul></section><section data-block="SingleChoice"><h3>Citizen Lab and Access Now reported on an exiled Russian journalist who was targeted with Pegasus malware. What was the name of the zero-click exploit used?</h3><ul><li>PWNYOURHOME</li><li>FINDMYPWN</li><li>DUDEWHERESMYPWN</li><li>ILOSTMYPWN</li></ul></section><section data-block="SingleChoice"><h3>Europol released a spotlight report titled “Cyber-Attacks: The Apex of Crime-As-A-Service”Which one of these are deemed cyber’s “most prominent threat”?</h3><ul><li>Malware-based cyber-attacks</li><li>Critical Vulnerabilities</li><li>Phishing</li><li>Business Email Compromise</li></ul></section><section data-block="SingleChoice"><h3>Brian Krebs reported on a cybercriminal going by the name “USDoD”. Which aerospace giant's sensitive employee data was leaked by the TA? </h3><ul><li>Airbus</li><li>Boeing</li><li>Lockheed Martin</li><li>Embraer</li></ul></section><section data-block="SingleChoice"><h3>Cybercx provided insights into their recent Akira ransomware investigations. From their analysis, how did the TA manage to bypass EDR tooling during their attacks?</h3><ul><li>Creating new unmonitored VM’s</li><li>DLL Sideloading</li><li>Disable EDR with GPO</li><li>Deploying AuKill</li></ul></section><section data-block="SingleChoice"><h3>Wired reported on Symantec’s findings of a Chinese hacker group who targeted an Asian country’s power grid.What is the name given by Symantec to this group?</h3><ul><li>RedFly</li><li>RedWasp</li><li>AmberPanda</li><li>PowerPanda</li></ul></section><section data-block="SingleChoice"><h3>According to the 2024 “Homeland Threat Assessment” report from the US DHS, which one of these is the most costliest cybercrime activity?</h3><ul><li>E-mail Hacking Schemes</li><li>Ransomware</li><li>Social Engineering</li><li>Supply Chain Attacks</li></ul></section>
