Common Threats and Attack Vectors Questions

Be able to identify common categories of attacks and how they arise from design or configuration weaknesses. Cover distributed denial of service attacks, privilege escalation, structured query language injection and command injection, cross site scripting and cross site request forgery, man in the middle attacks, supply chain compromise and social engineering. For each category explain typical detection approaches, mitigation controls across network, application, identity, and endpoint layers, and how threat modelling and attack surface reduction inform defensive design.