Match each network attack type to its description.
Drag a concept onto its matching description — or click a concept then click the description.
Social engineering via email to steal credentials
Overwhelming a target with traffic from multiple sources
Intercepting communications between two parties
Injecting malicious SQL queries into input fields
Associating attacker's MAC with victim's IP
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Phishing: A social engineering attack where attackers trick users into revealing sensitive information by impersonating a legitimate entity.
Common attack types: Phishing is a social engineering attack, DDoS is a volumetric attack, Man-in-the-Middle intercepts communications, and SQL Injection targets databases. Distractors confuse Phishing with DDoS and SQL Injection with Man-in-the-Middle.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Phishing: A social engineering attack where attackers trick users into revealing sensitive information by impersonating a legitimate entity.
Why this is correct
Correctly matches Phishing with its definition.
DDoS: An attack that overwhelms a target server with traffic from multiple sources to disrupt services.
Why this is correct
Correctly matches DDoS with its definition.
Man-in-the-Middle (MitM): An attack where the attacker intercepts communication between two parties to eavesdrop or alter data.
Why this is correct
Correctly matches MitM with its definition.
SQL Injection: An attack that injects malicious SQL code into a database query to access or manipulate data.
Why this is correct
Correctly matches SQL Injection with its definition.
Phishing: An attack that overwhelms a target server with traffic from multiple sources to disrupt services.
Why it's wrong here
Incorrect — this describes DDoS, not Phishing.
SQL Injection: An attack where the attacker intercepts communication between two parties to eavesdrop or alter data.
Why it's wrong here
Incorrect — this describes Man-in-the-Middle, not SQL Injection.
Go deeper
About these practice questions
Courseiva writes every 200-201 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.