🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 12 (10 MCQs)

This set of multiple-choice questions evaluates understanding of authentication methods, security layers, and 2FA implementation. It covers identifying cyber crimes, distinguishing between criminal and non-criminal computer issues, and understanding technical failures such as the Blue Screen of Death. The material also assesses knowledge of network security, firewall functions, and prevention of identity theft and misinformation.

Quiz Instructions

Select an option to see the correct answer instantly.

1. Failure of passwords security due to exposure can result from

Correct Answer: Correct answer is: (C) Both 'a' and 'b'.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Passwords can be exposed through various methods, including electronic monitoring and visual observation.

Common Mistakes: A common mistake is to overlook the combination of both electronic and visual methods, focusing on only one.

Explanations: Passwords can be compromised through electronic monitoring, such as keyloggers or network sniffers, which capture keystrokes or data transmitted over a network. Additionally, visual observation, such as shoulder surfing, where someone watches a user typing their password, is another common method of exposure. Both methods are significant threats to password security, and therefore, the correct answer is that both 'a' and 'b' are valid.

Option Analysis:

Option A: Electronic monitoring is a valid method of password exposure, but it is not the only method.
Option B: Visual observation is also a valid method of password exposure, but it is not the only method.
Option C: Both electronic monitoring and visual observation are valid methods of password exposure, making this the correct answer.
Option D: Light is not a method of password exposure in the context of cyber security.

2. Which of the following is an electronic or paper log used to track computer activity?

Correct Answer: Correct answer is: (C) Audit trail.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: An audit trail is a record used to track and examine the sequence of activities in a computer system. It is used to monitor and log user actions, system changes, and other activities for security and compliance purposes.

Common Mistakes: A common misunderstanding is confusing an audit trail with a cookie or a weblog. Cookies are small data files stored on a user's device to track browsing activity, while a weblog (or blog) is a website where entries are made in journal style.

Explanations: An audit trail is an electronic or paper log used to track computer activity. It records actions taken by users, system changes, and other relevant events. This makes it a critical tool for monitoring and ensuring the security and integrity of a system.

Option Analysis:

Option A: A cookie is a small piece of data sent from a website and stored in a user's web browser while they are browsing a website. It is not a log used to track computer activity.
Option B: A weblog, or blog, is a website where entries are made in journal style and displayed in a reverse chronological order. It is not a log used to track computer activity.
Option C: An audit trail is an electronic or paper log used to track computer activity, making it the correct answer.
Option D: This option is incorrect as the correct answer is provided in option C.

3. Which of the following are not an example of computer crimes or cyber crimes?

Correct Answer: Correct answer is: (B) Blue Screen of Death (BSD).

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: The Blue Screen of Death (BSD) is a system crash screen displayed by a computer's operating system. It is not an example of a computer crime or cyber crime.

Common Mistakes: A common misunderstanding is that any technical issue with a computer, such as a Blue Screen of Death, is a form of cyber crime. However, a BSD is a technical failure and not an intentional criminal act.

Explanations: The Blue Screen of Death (BSD) is a technical issue that occurs when a computer's operating system encounters a critical error and cannot continue to operate safely. It is not an example of a computer crime or cyber crime, which involve illegal activities such as fraud, copyright infringement, and attacks.

Option Analysis:

Option A: Fraud is a form of cyber crime involving deception for financial gain.
Option B: Blue Screen of Death (BSD) is a technical issue, not a cyber crime.
Option C: Copyright Infringement is a form of cyber crime involving unauthorized use of copyrighted material.
Option D: Attacks, such as hacking or malware, are forms of cyber crime.

4. A person who breaks in to a computer through a network, without authorization and with mischievous or destructive intent.

Correct Answer: Correct answer is: (A) Cracker.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Easy

Concept notes: In cyber security, a "cracker" refers to an individual who gains unauthorized access to a computer system or network with malicious intent.

Common Mistakes: A common misunderstanding is confusing a "cracker" with a "hacker." While both terms are often used interchangeably in popular media, in the context of cyber security, a "cracker" specifically refers to someone with malicious intent, whereas a "hacker" can refer to someone who uses technical skills for various purposes, not necessarily malicious.

Explanations: A cracker is a person who breaks into a computer system or network without authorization and with the intent to cause mischief or destruction. This aligns with the definition provided in the question, making "Cracker" the correct answer.

Option Analysis:

Option A: Correct. A cracker is someone who gains unauthorized access to a computer system with malicious intent.
Option B: Incorrect. "Crash" refers to a system failure, not a person.
Option C: Incorrect. "Terabytes (TB)" is a unit of data storage, not a person.
Option D: Incorrect. The correct answer is provided in the options.

5. Which of the following is NOT acceptable to share online?

Correct Answer: Correct answer is: (A) Full name (first and last).

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: In cyber security, sharing personal information such as your full name online can lead to identity theft and other security risks.

Common Mistakes: A common misunderstanding is that sharing a full name online is harmless, but it can be used to gather more personal information and potentially compromise your identity.

Explanations: Sharing your full name online can be dangerous because it can be used to gather additional personal information, such as your address or other identifying details. This information can be used for identity theft or other malicious activities. Therefore, it is not acceptable to share your full name online.

Option Analysis:

Option A: Full name (first and last) is not acceptable to share online due to the risk of identity theft and other security issues.
Option B: Pictures of your football game are generally acceptable to share online as they do not contain sensitive personal information.
Option C: Pictures of your dog are generally acceptable to share online as they do not contain sensitive personal information.
Option D: Your favourite food is not sensitive personal information and is generally acceptable to share online.

6. Which method adds an extra layer of security?

Correct Answer: Correct answer is: (C) 2FA.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: Two-Factor Authentication (2FA) adds an extra layer of security by requiring two different forms of verification to access an account or system.

Common Mistakes: A common misunderstanding is that a password alone or a backup method provides sufficient security, but these methods can be compromised more easily than 2FA.

Explanations: Two-Factor Authentication (2FA) enhances security by requiring users to provide two different forms of verification, typically something the user knows (like a password) and something the user has (like a code sent to a mobile device). This dual-layer approach makes it significantly harder for unauthorized individuals to gain access, even if they have obtained the password.

Option Analysis:

Option A: A Virtual Private Network (VPN) encrypts internet traffic and hides the user's IP address, but it does not add an extra layer of authentication.
Option B: A password is a single form of authentication and can be compromised through various means, such as phishing or brute force attacks.
Option C: 2FA adds an extra layer of security by requiring two different forms of verification, making it more secure than a single method.
Option D: A backup method, such as a recovery email or phone number, is used for account recovery but does not add an extra layer of authentication during login.

7. What is meant by the ethics of communicating on the internet "Be careful of hoaxes" ?

Correct Answer: Correct answer is: (B) Prevent the spread of false information or hoaxes.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: The ethics of communicating on the internet include being cautious about the spread of false information or hoaxes. This is crucial in maintaining the integrity of online communication and preventing misinformation.

Common Mistakes: A common misunderstanding is believing that all information on the internet is true, leading to the spread of hoaxes and false information.

Explanations: The correct answer is to prevent the spread of false information or hoaxes. This is a key aspect of ethical internet communication. Hoaxes can cause confusion, misinformation, and even harm. By being vigilant and verifying information before sharing, individuals can help maintain the reliability and trustworthiness of online communication.

Option Analysis:

Option A: This is incorrect because believing all news spread on the internet can lead to the spread of false information.
Option B: This is correct because preventing the spread of false information or hoaxes is a key ethical consideration in internet communication.
Option C: This is incorrect because using capital letters well is not directly related to the ethics of preventing hoaxes.
Option D: This is incorrect because respecting other people's private lives, while important, is not the specific focus of preventing hoaxes.

8. A security system consisting of hardware and/or software that prevents unauthorized access to data and information on a network .....

Correct Answer: Correct answer is: (A) Firewall.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A firewall is a security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.

Common Mistakes: A common misunderstanding is that a firewall is the only security measure needed, when in fact it is part of a broader security strategy.

Explanations: A firewall is designed to prevent unauthorized access to data and information on a network by filtering traffic based on security rules. It acts as a barrier between trusted and untrusted networks, ensuring that only authorized traffic is allowed to pass through.

Option Analysis:

Option A: Correct. A firewall is a security system that prevents unauthorized access to data and information on a network.
Option B: Incorrect. A blocker typically refers to software that blocks specific types of content, not a comprehensive security system.
Option C: Incorrect. A database is a collection of data, not a security system.
Option D: Incorrect. Cookies are small pieces of data stored on a user's device, not a security system.

9. If you suspect someone knows your passwords, what should you do?

Correct Answer: Correct answer is: (B) Change it immediately.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: In cyber security, if you suspect that someone knows your passwords, the immediate action is to change them to prevent unauthorized access.

Common Mistakes: A common mistake is to ignore the situation or assume that the password is still secure, which can lead to potential security breaches.

Explanations: Changing your password immediately is crucial to prevent unauthorized access to your accounts. If someone knows your password, they can potentially use it to access your personal information, financial data, or other sensitive information. By changing the password, you ensure that the compromised password is no longer valid, thereby securing your accounts.

Option Analysis:

Option A: Telling your parents is not a direct action to secure your accounts. While it may be a good idea to inform them, it does not address the immediate security concern.
Option B: Changing the password immediately is the correct action to take to secure your accounts and prevent unauthorized access.
Option C: Crying is an emotional response and does not address the security issue at hand.
Option D: Doing nothing leaves your accounts vulnerable to potential security breaches.

10. Mia thinks her computer has a virus. What should she do?

Correct Answer: Correct answer is: (C) She should tell a grown up.

Exam Relevance: CEH, CISSP, CompTIA Security+

Difficulty: Easy

Concept notes: In cyber security, it is important to seek help from knowledgeable individuals when encountering potential threats or issues. Informing a grown-up is a safe and effective way to address a suspected virus.

Common Mistakes: A common mistake is to attempt to fix the issue oneself without proper knowledge, which can potentially worsen the situation.

Explanations: When a computer user suspects a virus, it is crucial to inform a knowledgeable adult who can take appropriate steps to address the issue. Attempting to fix the virus oneself without proper knowledge can lead to further complications. E-mailing friends or downloading more games can also introduce additional risks. Therefore, the safest and most effective course of action is to tell a grown-up.

Option Analysis:

Option A: Attempting to fix the virus herself can be risky and may lead to further damage or data loss.
Option B: E-mailing friends about the issue is not a secure or effective way to address a potential virus.
Option C: Telling a grown-up is the safest and most effective way to handle a suspected virus.
Option D: Downloading more games can introduce additional risks and potentially worsen the situation.

Frequently Asked Questions

What is cyber security?

Cyber security involves protecting systems, networks, and programs from digital attacks, theft, and damage. It encompasses various measures to ensure the confidentiality, integrity, and availability of information.

How does two-factor authentication enhance security?

Two-factor authentication adds an extra layer of security by requiring users to provide two different authentication factors to verify their identity. This typically includes something the user knows (like a password) and something the user has (like a smartphone).

What is a firewall and how does it work?

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between trusted and untrusted networks, preventing unauthorized access.

What is the purpose of an audit trail in cyber security?

An audit trail is a record of system activities that can be used to track and investigate security breaches or unauthorized access. It helps in identifying the source of security incidents and maintaining accountability.

How can I protect myself from identity theft?

To protect yourself from identity theft, use strong, unique passwords, enable two-factor authentication, regularly monitor your financial accounts, and be cautious about sharing personal information online. Also, keep your software and systems up to date.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books