🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 13 (10 MCQs)

This set of multiple-choice questions evaluates understanding of cryptography fundamentals, key management, secure communication, and various cyber security threats such as DNS spoofing, man-in-the-middle attacks, and unauthorized network access. It also covers password security, malware protection, and online safety practices.

Quiz Instructions

Select an option to see the correct answer instantly.

1. What type of key is not shared and computers cannot decrypt a message without it?

Correct Answer: Correct answer is: (B) Private key.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: In cryptography, a private key is a type of key that is kept secret and is used for decrypting messages that have been encrypted with the corresponding public key.

Common Mistakes: A common misunderstanding is that the public key is the one that is kept secret, but in fact, the public key is meant to be shared openly, while the private key must remain confidential.

Explanations: The private key is not shared and is essential for decrypting messages that have been encrypted with the corresponding public key. Without the private key, a computer cannot decrypt the message, ensuring the confidentiality and security of the communication.

Option Analysis:

Option A: Free key is not a recognized term in cryptography.
Option B: Private key is the correct answer as it is not shared and is necessary for decryption.
Option C: Public key is shared openly and is used for encryption, not decryption.
Option D: Personal key is not a standard term in cryptography.

2. A ..... is anything that can cause harm.

Correct Answer: Correct answer is: (B) Threat.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: In cyber security, a threat is any potential cause of harm to an information system or network.

Common Mistakes: A common mistake is confusing a threat with a specific attack method, such as phishing or spoofing, which are types of threats rather than the definition of a threat itself.

Explanations: A threat in cyber security is defined as anything that can cause harm to an information system or network. This includes various types of malicious activities, such as phishing, spoofing, and other forms of cyber attacks. The term "threat" encompasses all potential sources of harm, making it the most accurate answer to the question.

Option Analysis:

Option A: Phish is a specific type of cyber attack, not a general term for anything that can cause harm.
Option B: Threat is the correct term for anything that can cause harm in the context of cyber security.
Option C: Spoof is another specific type of cyber attack, not a general term for anything that can cause harm.
Option D: All of the above is incorrect because not all options are correct.

3. What type of password attack is characterized by trying every possible character combination until all combinations have been exahusted?

Correct Answer: Correct answer is: (C) Brute force.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Brute force attacks involve systematically trying every possible combination of characters until the correct password is found.

Common Mistakes: A common misunderstanding is that brute force attacks are quick and easy, but they can be very time-consuming and resource-intensive.

Explanations: Brute force attacks are characterized by trying every possible character combination until all combinations have been exhausted. This method is exhaustive and can be very time-consuming, but it guarantees that the correct password will eventually be found if given enough time and computational power.

Option Analysis:

Option A: Phishing involves tricking individuals into revealing their passwords, not trying every possible combination.
Option B: Dictionary attacks use a list of common words and phrases, not every possible combination.
Option C: Brute force attacks involve trying every possible combination of characters until the correct password is found.
Option D: Guessing involves making educated guesses based on personal information, not systematically trying every combination.

4. To guard against malware, you will need to have .....

Correct Answer: Correct answer is: (A) Antivirus software.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Antivirus software is designed to protect against malware, which includes viruses, trojans, and other malicious software.

Common Mistakes: A common mistake is to confuse antivirus software with other types of software like word processors or spyware, which do not provide protection against malware.

Explanations: Antivirus software is specifically designed to detect, prevent, and remove malware from a computer system. It continuously monitors the system for any suspicious activity and can quarantine or remove detected threats. This makes it an essential tool for protecting against malware.

Option Analysis:

Option A: Antivirus software is the correct choice as it is designed to protect against malware.
Option B: A word processor is used for creating and editing documents and does not provide protection against malware.
Option C: A can of compressed air is used for cleaning computer hardware and does not provide protection against malware.
Option D: Spyware is a type of malware, not a tool to protect against it.

5. Piggybacking is also known as .....

Correct Answer: Correct answer is: (A) Wi-Fi squatting.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Piggybacking in the context of cyber security refers to unauthorized access to a network, typically a Wi-Fi network, by attaching to an existing connection without the owner's permission.

Common Mistakes: A common misunderstanding is that piggybacking involves stealing data directly, but it actually refers to unauthorized access to the network itself.

Explanations: Piggybacking is also known as Wi-Fi squatting because it involves an unauthorized user "squatting" on a Wi-Fi network, using the connection without permission. This unauthorized access can lead to various security risks, including data breaches and network vulnerabilities.

Option Analysis:

Option A: Wi-Fi squatting is the correct term for piggybacking in the context of cyber security.
Option B: Phishing is a different type of cyber attack where attackers trick individuals into providing sensitive information.
Option C: Spam refers to unsolicited messages or emails, not unauthorized network access.
Option D: This option is incorrect as Wi-Fi squatting is the correct term for piggybacking.

6. You should follow the ..... rules while online.

Correct Answer: Correct answer is: (B) Safety.

Exam Relevance: CEH, CISSP, CompTIA Security+

Difficulty: Easy

Concept notes: Online safety rules are essential to protect oneself from cyber threats and ensure secure internet usage.

Common Mistakes: A common misunderstanding is that strict rules are necessary, but safety rules are more comprehensive and practical for online behavior.

Explanations: Safety rules encompass a range of practices designed to protect individuals from various online risks, such as phishing, malware, and identity theft. These rules include using strong passwords, avoiding suspicious links, and being cautious with personal information. Following safety rules ensures a secure online experience.

Option Analysis:

Option A: Strict rules are too rigid and may not cover all aspects of online safety.
Option B: Safety rules are designed to protect users from online threats and are the correct choice.
Option C: Shouting is not relevant to online behavior and does not contribute to safety.
Option D: None of these is incorrect because safety rules are indeed relevant and necessary.

7. What is a major safety precaution online?

Correct Answer: Correct answer is: (D) Cross-check a website.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Cross-checking a website is a crucial safety precaution in online activities to ensure the website is legitimate and secure.

Common Mistakes: A common misunderstanding is that all websites are safe, leading to potential exposure to phishing sites or malicious content.

Explanations: Cross-checking a website involves verifying its authenticity and security. This can be done by checking the URL for any suspicious elements, looking for security indicators such as HTTPS, and ensuring the website has a valid SSL certificate. This precaution helps prevent users from falling victim to phishing attacks or other online scams.

Option Analysis:

Option A: Trusting everyone you meet online can lead to identity theft, scams, and other cyber threats.
Option B: Clicking on all links can expose users to malware, phishing sites, and other malicious content.
Option C: Disclosing personal information online can result in identity theft, financial fraud, and other privacy violations.
Option D: Cross-checking a website is a major safety precaution that helps ensure the website is legitimate and secure.

8. Should you share your password online?

Correct Answer: Correct answer is: (A) No.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Sharing passwords online is a significant security risk as it can lead to unauthorized access to personal and sensitive information.

Common Mistakes: A common misunderstanding is that sharing passwords with trusted individuals is safe, but this can still compromise security.

Explanations: Sharing passwords online is a fundamental security risk. Passwords are designed to be unique and kept confidential to protect personal and sensitive information. If a password is shared, it can be intercepted or misused, leading to unauthorized access to accounts and potential data breaches. Therefore, it is crucial to maintain the confidentiality of passwords and never share them online.

Option Analysis:

Option A: This is the correct answer as sharing passwords online is a significant security risk.
Option B: This is incorrect because sharing passwords online can lead to unauthorized access and data breaches.
Option C: This is incorrect because there is no scenario where sharing passwords online is considered safe.
Option D: This is incorrect because even with permission, sharing passwords online is still a security risk.

9. The type of access attack that allows an attacker to take over a session or spoof a session is done using which technique?

Correct Answer: Correct answer is: (C) Man-in-the-middle.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: A man-in-the-middle (MITM) attack involves an attacker intercepting and possibly altering the communication between two parties without their knowledge. This type of attack can be used to take over a session or spoof a session by intercepting session tokens or credentials.

Common Mistakes: A common misunderstanding is that brute-force or password attacks are the primary methods for session hijacking. However, these methods typically involve guessing or cracking passwords, not intercepting ongoing sessions.

Explanations: In a man-in-the-middle attack, the attacker positions themselves between the victim and the server, allowing them to intercept and modify the session data. This can enable the attacker to take over the session or spoof a session by using the intercepted session tokens or credentials. This technique is particularly effective in unsecured networks, such as public Wi-Fi, where the attacker can more easily intercept and manipulate the communication.

Option Analysis:

Option A: Brute-force attacks involve systematically trying all possible combinations to guess a password or key. This does not directly involve intercepting or spoofing a session.
Option B: Password attacks typically involve guessing or cracking passwords, which is different from intercepting and manipulating session data.
Option C: Man-in-the-middle attacks involve intercepting and possibly altering the communication between two parties, which can be used to take over or spoof a session.
Option D: Malware insertion involves deploying malicious software to compromise a system, but it does not directly involve intercepting or spoofing a session.

Mnemonic: MITM: Middle Intercept Takeover

10. When a hacker taps into a DNS server and changes the IP address to send you to an impostor website, this is called .....

Correct Answer: Correct answer is: (D) Spoofing.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: Spoofing is a cyber attack where a malicious party impersonates another user or device to gain unauthorized access or to deceive users.

Common Mistakes: A common misunderstanding is that spoofing is only related to email or IP address impersonation, but it can also involve DNS manipulation.

Explanations: Spoofing involves the act of disguising a communication from an unknown source as being from a known, trusted source. In the context of DNS, when a hacker changes the IP address in a DNS server to redirect users to an impostor website, this is a form of DNS spoofing. This attack can be used to deceive users into visiting malicious websites, which can lead to further security breaches.

Option Analysis:

Option A: Cybercrime is a broad term that encompasses various illegal activities conducted via the internet, including spoofing, but it is not specific to the described scenario.
Option B: Domain Hacking typically refers to techniques used to exploit vulnerabilities in domain names, but it does not specifically describe the act of changing IP addresses in a DNS server.
Option C: IP Theft is not a standard term in cybersecurity and does not accurately describe the act of changing IP addresses in a DNS server to redirect users.
Option D: Spoofing is the correct term for the described scenario where a hacker changes the IP address in a DNS server to redirect users to an impostor website.

Mnemonic: DNS Spoofing: "DNS Switcheroo"

Frequently Asked Questions

What is cyber security?

Cyber security is the practice of protecting systems, networks, and programs from digital attacks, theft, and damage. It involves various measures to ensure confidentiality, integrity, and availability of information.

What is a brute force attack?

A brute force attack is a method used by attackers to guess passwords or encryption keys by trying every possible combination until the correct one is found. This exhaustive search can be time-consuming but is effective against weak passwords.

How does malware protection work?

Malware protection involves using software to detect, prevent, and remove malicious software from a system. Antivirus software scans files and programs for known malware signatures and can also use heuristic analysis to identify new or unknown threats.

What is a man-in-the-middle attack?

A man-in-the-middle attack occurs when an attacker intercepts and possibly alters the communication between two parties who believe they are directly communicating with each other. This can lead to unauthorized access to sensitive information.

What is the role of cryptography in cyber security?

Cryptography is used in cyber security to protect data by converting it into a secure format that can only be decrypted with a specific key. This ensures that even if data is intercepted, it remains confidential and unreadable to unauthorized users.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books