🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 10 (10 MCQs)

This set of multiple-choice questions evaluates understanding of cyber security threats, including identity theft, phishing, and keystroke logging. It covers security practices such as password management, secure network usage, and the prevention of unauthorized access. Concepts like digital signatures, public key cryptography, and non-repudiation are also assessed. The material aims to test knowledge of cyber security basics and the ability to identify and mitigate risks.

Quiz Instructions

Select an option to see the correct answer instantly.

1. A ..... is anything that puts computer information at risk.

Correct Answer: Correct answer is: (A) Security threat.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A security threat is any potential danger that can compromise the integrity, confidentiality, or availability of computer information.

Common Mistakes: A common misunderstanding is that only malicious software (malware) constitutes a security threat. However, a security threat can include a wide range of risks, such as unauthorized access, data breaches, and physical damage to hardware.

Explanations: A security threat is defined as anything that can put computer information at risk. This includes various types of risks such as malware, unauthorized access, data breaches, and physical damage. Therefore, the correct answer is "Security threat."

Option Analysis:

Option A: Correct. A security threat is anything that can compromise computer information.
Option B: Incorrect. A file management system is a tool for organizing and managing files, not a risk to computer information.
Option C: Incorrect. A system management tool is used to manage and maintain computer systems, not a risk to computer information.
Option D: Incorrect. The correct answer is provided in option A.

2. What characterizes a secure network?

Correct Answer: Correct answer is: (B) It requires a password or security code for entry.

Exam Relevance: CISSP, CompTIA Security+, CCNA Security

Difficulty: Easy

Concept notes: A secure network is characterized by measures that restrict unauthorized access, such as requiring a password or security code.

Common Mistakes: A common misunderstanding is that a secure network is always free to access, which is incorrect. Security measures often involve restrictions and authentication.

Explanations: A secure network requires a password or security code for entry to ensure that only authorized users can access the network. This authentication process helps prevent unauthorized access and enhances the overall security of the network.

Option Analysis:

Option A: This is incorrect because a secure network is not always free to access. Security measures often involve restrictions and authentication.
Option B: This is correct because requiring a password or security code for entry is a fundamental characteristic of a secure network.
Option C: This is incorrect because a secure network is not a type of web browser. A web browser is a software application used to access the internet, while a secure network is a system designed to protect data and resources.
Option D: This is incorrect because a secure network typically has restrictions on access to prevent unauthorized users from gaining entry.

3. ..... is an illegal act that involves stealing someone's personal information and using that information to commit theft or fraud.

Correct Answer: Correct answer is: (A) Identity theft.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Identity theft is the illegal act of stealing someone's personal information and using it to commit theft or fraud.

Common Mistakes: A common misunderstanding is that identity theft only involves credit card fraud, but it can involve a broader range of personal information and fraudulent activities.

Explanations: Identity theft involves stealing personal information such as Social Security numbers, bank account details, and other sensitive data. This stolen information is then used to commit various fraudulent activities, such as opening new accounts, making unauthorized purchases, or filing false tax returns. The other options, while related to cyber security, do not encompass the broad range of activities that identity theft can involve.

Option Analysis:

Option A: Correct. Identity theft involves stealing personal information and using it for fraudulent purposes.
Option B: Incorrect. Credit card fraud is a specific type of fraud that involves unauthorized use of a credit card, but it does not encompass the broader scope of identity theft.
Option C: Incorrect. Phishing is a method used to obtain personal information through deceptive means, but it is not the act of using that information for fraudulent purposes.
Option D: Incorrect. Hacking involves unauthorized access to computer systems, but it does not necessarily involve the theft and misuse of personal information.

4. What is social engineering?

Correct Answer: Correct answer is: (A) Content that tricks you into revealing personal information, like your password or credit card number.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Social engineering is a tactic used by cyber criminals to manipulate individuals into divulging confidential information or performing actions that compromise security.

Common Mistakes: A common misunderstanding is that social engineering involves the use of technical hacking methods, when in fact it relies on psychological manipulation.

Explanations: Social engineering is a form of deception where attackers use psychological manipulation to trick individuals into revealing sensitive information or performing actions that can compromise security. This can include phishing emails, pretexting, baiting, and other tactics designed to exploit human trust and curiosity. The correct answer accurately describes this deceptive practice.

Option Analysis:

Option A: This option correctly defines social engineering as content that tricks individuals into revealing personal information.
Option B: This option is incorrect as it describes the correct use of social networks, which is unrelated to the deceptive tactics of social engineering.

5. Which of the following best represents safe online behavior?

Correct Answer: Correct answer is: (C) Keeping personal information private and using strong passwords.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: Safe online behavior involves protecting personal information and using strong passwords to prevent unauthorized access to accounts.

Common Mistakes: A common misunderstanding is that sharing passwords with close friends or using public Wi-Fi for personal accounts is safe.

Explanations: Keeping personal information private and using strong passwords is crucial for maintaining online security. Personal information should not be shared unnecessarily, and strong passwords make it more difficult for unauthorized individuals to access accounts.

Option Analysis:

Option A: Using public Wi-Fi to access personal accounts is risky because public networks can be insecure and vulnerable to attacks.
Option B: Downloading software from unknown websites can expose your device to malware and other security threats.
Option C: Keeping personal information private and using strong passwords is a fundamental practice in cyber security to protect against unauthorized access and data breaches.
Option D: Sharing your password with close friends is a security risk as it increases the likelihood of unauthorized access to your accounts.

6. Which of the following is NOT a good practice in creating a blog?

Correct Answer: Correct answer is: (A) Tell your password to others.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Very Easy

Concept notes: In cyber security, sharing passwords is a significant security risk as it can lead to unauthorized access to personal information and accounts.

Common Mistakes: A common mistake is believing that sharing passwords with trusted individuals is safe, but this can still compromise security.

Explanations: Sharing your password with others is a poor practice in cyber security because it increases the risk of unauthorized access to your accounts and personal information. This can lead to identity theft, data breaches, and other security issues.

Option Analysis:

Option A: Sharing passwords is a significant security risk and should be avoided.
Option B: Posting sensitive information online can lead to privacy breaches and identity theft.
Option C: Posting safe and pleasant photos is a good practice to maintain a positive online presence.
Option D: Thinking before posting and avoiding offensive content is important to maintain a respectful online environment.

7. An example of social engineering is:

Correct Answer: Correct answer is: (D) Phishing.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Social engineering involves manipulating individuals into divulging confidential information or performing actions that can compromise security. Phishing is a common form of social engineering where attackers trick individuals into providing sensitive information, such as passwords or financial details, often through deceptive emails or websites.

Common Mistakes: A common mistake is to confuse phishing with other types of malware like viruses, worms, or Trojans, which are different forms of cyber threats that do not involve social manipulation.

Explanations: Phishing is a form of social engineering because it relies on tricking individuals into revealing sensitive information. Unlike viruses, worms, or Trojans, which are types of malware that exploit software vulnerabilities, phishing exploits human behavior and trust.

Option Analysis:

Option A: A virus is a type of malware that can replicate itself and spread to other computers, but it does not involve social manipulation.
Option B: A worm is a type of malware that can spread across networks without user intervention, but it does not involve social manipulation.
Option C: A Trojan is a type of malware that disguises itself as a legitimate program, but it does not involve social manipulation.
Option D: Phishing involves tricking individuals into providing sensitive information, which is a form of social engineering.

8. Most of the internet banking sites provide which of the following feature to reduce the risk of keystroke logging for the password entry?

Correct Answer: Correct answer is: (A) Virtual keyboard.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: Virtual keyboards are a security feature used to prevent keystroke logging by allowing users to enter their passwords by clicking on on-screen keys rather than typing on a physical keyboard.

Common Mistakes: A common misunderstanding is that other options like finger touching, touch screens, or ShapeWriter might also prevent keystroke logging, but these do not specifically address the issue of keystroke logging in the same way a virtual keyboard does.

Explanations: Virtual keyboards are designed to reduce the risk of keystroke logging by allowing users to enter their passwords using a graphical interface rather than a physical keyboard. This method makes it difficult for malicious software to capture the keystrokes, thereby enhancing the security of password entry.

Option Analysis:

Option A: Virtual keyboard is the correct answer as it is specifically designed to prevent keystroke logging.
Option B: Finger Touching is not a specific security feature and does not prevent keystroke logging.
Option C: Touch screen is a general technology and does not inherently prevent keystroke logging.
Option D: ShapeWriter is a text input method but does not specifically address keystroke logging.

9. Which type of non-repudiation verifies the identity of the sender and the integrity of the data?

Correct Answer: Correct answer is: (D) Digital Signature.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Non-repudiation is a property of information systems that ensures a party cannot deny the authenticity of their signature on a document or the sending of a message. Digital signatures are a form of non-repudiation that verifies both the identity of the sender and the integrity of the data.

Common Mistakes: A common misunderstanding is that encryption alone provides non-repudiation. While encryption ensures confidentiality, it does not verify the identity of the sender or the integrity of the data.

Explanations: Digital signatures use public key cryptography to verify the identity of the sender and ensure the integrity of the data. The sender uses their private key to sign the data, and the recipient uses the sender's public key to verify the signature. This process ensures that the data has not been tampered with and that the sender cannot deny having sent the data.

Option Analysis:

Option A: Primary Key is a database concept used to uniquely identify records and does not provide non-repudiation.
Option B: Encryption ensures confidentiality but does not verify the identity of the sender or the integrity of the data.
Option C: CAPTCHA is used to verify that a user is human and does not provide non-repudiation.
Option D: Digital Signature verifies the identity of the sender and the integrity of the data, providing non-repudiation.

10. Which is a security system designed to detect and counteract unauthorized access or use of a computer system?

Correct Answer: Correct answer is: (C) Honeypot.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: A honeypot is a security mechanism designed to detect, deflect, or counteract unauthorized access or use of a computer system.

Common Mistakes: A common misunderstanding is that flaming or favicon are related to security systems. Flaming refers to online harassment, and favicon is a small icon associated with a website.

Explanations: A honeypot is a decoy system designed to attract and trap unauthorized users. It is used to detect and study malicious activities, providing valuable information about potential threats and attack methods. This makes it an effective security system for detecting and countering unauthorized access.

Option Analysis:

Option A: Flaming is a form of online harassment and is not related to security systems.
Option B: Favicon is a small icon associated with a website and is not a security system.
Option C: Honeypot is a security system designed to detect and counteract unauthorized access or use of a computer system.
Option D: All the above is incorrect because only the honeypot is a security system.

Mnemonic: Honeypot: Honey for Hackers

Frequently Asked Questions

What is cyber security?

Cyber security involves protecting systems, networks, and programs from digital attacks, theft, and damage. It encompasses various measures to ensure the confidentiality, integrity, and availability of information.

What is a honeypot in cyber security?

A honeypot is a decoy system designed to lure cyber attackers and monitor their activities. It helps in understanding attack patterns and improving security measures without risking actual systems.

How can I protect my personal information online?

To protect personal information online, use strong passwords, enable two-factor authentication, and be cautious of phishing attempts. Regularly update your software and avoid sharing sensitive data on unsecured networks.

What is social engineering in the context of cyber security?

Social engineering involves psychological manipulation to trick individuals into divulging confidential information. It often includes tactics like phishing emails or pretexting to gain unauthorized access to systems or data.

What is the role of public key cryptography in cyber security?

Public key cryptography uses a pair of keys for secure communication: a public key for encryption and a private key for decryption. It ensures secure data transmission and supports non-repudiation, making it crucial for secure online transactions.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books