Select ALL examples identified in the course material as possible attack-related methods or activity.

### Why this is right - **Phishing**: The material lists phishing as an example associated with attacks. - **Exposed-device misconfigurations**: A misconfigured exposed device can provide an attacker with an opportunity for entry. - **Weak default accounts**: Weak default accounts are another example of a potential route into an environment. ### The concept The listed examples describe possible ways attackers may gain or extend access. They are not themselves the seven stages; they are examples of activity or weaknesses that can relate to stages in an attack. Risk reassessment, in contrast, is a defensive assessment activity. ### The other options - **Routine reassessment of residual risk**: This is a defensive risk management activity, not an attack method or attacker activity. ### Terms - **Phishing**: A deceptive message or communication used to induce a target to take an unsafe action. - **Misconfiguration**: An incorrect or unsafe system setting. ### Remember Separate attacker techniques from defensive assessment tasks.