100-160: CCST Cybersecurity

Move each cybersecurity term from the list on the left to its matching description on the right. Note: Partial credit is awarded for every correct answer. <DragDrop items={["Risk","Asset","Threat","Vulnerability"]} slots={[{"answer":"Asset","id":"slot1","label":"People, property, or data"},{"answer":"Threat","id":"slot2","label":"An action that causes a negative impact"},{"answer":"Risk","id":"slot3","label":"The potential for loss, damage, or destruction"},{"answer":"Vulnerability","id":"slot4","label":"A weakness that potentially exposes organizations to cyber attacks"}]} explanation={"Assets are people, property, or data of value. Threats can cause negative impacts, risk is the potential for loss or damage, and vulnerabilities are weaknesses that expose an organization to cyberattacks."} reuse={false} />

Move each framework from the list on the left to its corresponding purpose on the right. Note: Partial credit is awarded for each correct answer. <DragDrop items={["FERPA","FISMA","GDPR","HIPAA","PCI-DSS"]} slots={[{"answer":"GDPR","id":"eu_personal_information","label":"Protects the personal information of members of the European Union"},{"answer":"HIPAA","id":"healthcare_information","label":"Protects the healthcare information of individuals"},{"answer":"PCI-DSS","id":"credit_card_information","label":"Protects the credit card information of individuals"},{"answer":"FERPA","id":"educational_records","label":"Protects the educational records of individuals"},{"answer":"FISMA","id":"federal_agencies_information","label":"Protects information about individuals that is stored by federal agencies"}]} explanation={"GDPR protects the personal data of people in the European Union. HIPAA safeguards protected health information, PCI-DSS protects cardholder data, FERPA protects student education records, and FISMA establishes information-security requirements for U.S. federal agencies."} reuse={false} />

A corporation employs a group of experienced cybercriminals to establish a prolonged, in-depth presence within a competitor's network. This presence enables the corporation to steal or sabotage sensitive data belonging to that competitor. What type of attack does this scenario depict?