🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 15 (10 MCQs)

This set of multiple-choice questions evaluates understanding of unauthorized access, technical expertise, and malicious intent. It covers hacker roles, cybersecurity terminology, security exploits, vulnerabilities, Wi-Fi security, encryption methods, and network protection. The material also assesses knowledge of cyber attacks, email fraud, social engineering, secure transactions, blockchain technology, and public Wi-Fi risks.

Quiz Instructions

Select an option to see the correct answer instantly.

1. Phishing is .....

Correct Answer: Correct answer is: (B) An e mail that tries to get you to log on to a fake website.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Phishing is a cyber attack where attackers send fraudulent emails to trick recipients into providing sensitive information or clicking on malicious links.

Common Mistakes: A common misunderstanding is that phishing is only about spreading viruses, but it primarily aims to deceive users into revealing personal information.

Explanations: Phishing attacks typically involve sending emails that appear legitimate, often mimicking trusted entities. These emails often contain links to fake websites designed to look like legitimate sites, tricking users into entering their login credentials or other sensitive information.

Option Analysis:

Option A: This is incorrect because phishing is indeed dangerous as it can lead to identity theft and financial loss.
Option B: This is correct as it accurately describes the primary method of phishing attacks.
Option C: This is incorrect as phishing is a cyber security term and not related to activities at the seaside.
Option D: This is incorrect because while phishing emails can contain viruses, the primary goal is to trick users into providing sensitive information.

2. A person who uses computers to gain unauthorized access to data

Correct Answer: Correct answer is: (B) Hacker.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A hacker is an individual who uses computers to gain unauthorized access to data.

Common Mistakes: A common misunderstanding is that all hackers are malicious. However, some hackers work ethically to improve security systems.

Explanations: A hacker is defined as a person who uses computers to gain unauthorized access to data. This aligns with the description provided in the question. Antivirus software, gateways, and cyber exercises are not individuals but rather tools or activities related to cybersecurity.

Option Analysis:

Option A: Antivirus software is a program designed to detect and remove malicious software, not a person.
Option B: A hacker is a person who uses computers to gain unauthorized access to data, which matches the description in the question.
Option C: A gateway is a network device that routes traffic between different networks, not a person.
Option D: A cyber exercise is a simulated cybersecurity event or drill, not a person.

3. Which technology is primarily used for secure transactions?

Correct Answer: Correct answer is: (A) Blockchain.

Exam Relevance: CISSP, CISM, CompTIA Security+

Difficulty: Easy

Concept notes: Blockchain technology is primarily used for secure transactions due to its decentralized and immutable nature.

Common Mistakes: A common misunderstanding is that other technologies like Virtual Reality, Artificial Intelligence, or 5G are primarily used for secure transactions, when in fact they serve different purposes.

Explanations: Blockchain technology ensures secure transactions by creating a decentralized, distributed ledger that records transactions across many computers in such a way that the registered transactions cannot be altered retroactively. This makes it highly secure and resistant to tampering, making it ideal for secure transactions.

Option Analysis:

Option A: Blockchain is correct because it provides a secure, decentralized ledger for transactions.
Option B: Virtual Reality is not primarily used for secure transactions; it is used for immersive experiences.
Option C: Artificial Intelligence is not primarily used for secure transactions; it is used for intelligent decision-making and automation.
Option D: 5G is not primarily used for secure transactions; it is a high-speed mobile network technology.

4. What should you do if someone you do not know wants to chat?

Correct Answer: Correct answer is: (C) Block them from chatting with you and tell a grown up.

Exam Relevance: Cyber Security Awareness Tests, Online Safety Exams, Digital Literacy Assessments

Difficulty: Easy

Concept notes: In cyber security, it is important to protect personal information and avoid interactions with unknown individuals online. Blocking and reporting such individuals is a key safety measure.

Common Mistakes: A common mistake is to engage with unknown individuals online, which can lead to personal information being compromised.

Explanations: Blocking unknown individuals from chatting and informing a grown-up is the safest approach. This prevents potential risks such as identity theft, cyberbullying, or other malicious activities. Engaging with unknown individuals can expose you to various online threats.

Option Analysis:

Option A: Emailing a picture of yourself to an unknown individual is highly risky and can lead to privacy violations and potential exploitation.
Option B: Telling an unknown individual to chat with your friend does not address the safety concern and may still expose you to risks.
Option C: Blocking the individual and informing a grown-up is the safest and most responsible action to take.
Option D: Sending a text message to an unknown individual can also expose you to potential risks and is not advisable.

5. It is a prepared application that takes advantage of a known weakness.

Correct Answer: Correct answer is: (A) Security exploit.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A security exploit is a prepared application or method that takes advantage of a known weakness or vulnerability in a system, software, or network to gain unauthorized access or cause harm.

Common Mistakes: A common misunderstanding is that a security exploit is the same as a vulnerability. However, a vulnerability is a weakness in a system, while an exploit is the method used to take advantage of that weakness.

Explanations: A security exploit is a prepared application that takes advantage of a known weakness. This aligns with the definition provided in the question. An exploit is designed to leverage a specific vulnerability to achieve a malicious goal, such as gaining unauthorized access or causing damage.

Option Analysis:

Option A: Correct. A security exploit is a prepared application that takes advantage of a known weakness.
Option B: Incorrect. A vulnerability scanner is a tool used to identify vulnerabilities in a system, not an application that exploits them.
Option C: Incorrect. A packet sniffer is a tool used to capture and analyze network traffic, not an application that exploits vulnerabilities.
Option D: Incorrect. A rootkit is a type of malicious software designed to gain unauthorized access to a system, but it is not specifically a prepared application that exploits a known weakness.

6. What are scammers trying to do?

Correct Answer: Correct answer is: (D) All of the above.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Scammers in the realm of cyber security often employ various tactics to achieve their goals, which can include stealing money, personal information, and even infecting computers with viruses.

Common Mistakes: A common misunderstanding is that scammers only aim to steal money, but they can have multiple objectives.

Explanations: Scammers in cyber security can have multiple objectives. They may attempt to steal money directly through fraudulent transactions or phishing attacks. They can also steal personal information such as social security numbers, bank account details, and login credentials to use for identity theft or further fraudulent activities. Additionally, scammers can deploy viruses or malware to gain unauthorized access to systems, disrupt operations, or steal sensitive data. Therefore, the correct answer is that scammers can aim to achieve all of these objectives.

Option Analysis:

Option A: Scammers can indeed steal money through various cyber attacks.
Option B: Scammers can steal personal information to commit identity theft or other fraudulent activities.
Option C: Scammers can put viruses on computers to gain unauthorized access or disrupt operations.
Option D: This option correctly encompasses all the potential objectives of scammers in cyber security.

7. Which options are two activities you should avoid when using a public Wi-Fi network? (Choose two)

Correct Answer: Correct answer is: (D) Only (A) & (B).

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Public Wi-Fi networks are often unsecured, making them vulnerable to various cyber threats. Activities that involve sensitive information, such as banking and online purchases, should be avoided to prevent data breaches and unauthorized access.

Common Mistakes: A common mistake is assuming that all activities are equally safe on public Wi-Fi networks. However, certain activities, especially those involving financial transactions, are more vulnerable to cyber attacks.

Explanations: Public Wi-Fi networks are often unsecured, which means that data transmitted over these networks can be intercepted by malicious actors. Activities such as checking your bank account or making online purchases involve sensitive information, such as financial details and personal data, which can be easily compromised. Browsing the news, on the other hand, does not involve sensitive information and is generally safer on public Wi-Fi networks.

Option Analysis:

Option A: Checking your bank account involves sensitive financial information and should be avoided on public Wi-Fi networks.
Option B: Making an online purchase involves sharing payment details and personal information, which can be intercepted on unsecured networks.
Option C: Browsing the news does not involve sensitive information and is generally safe on public Wi-Fi networks.
Option D: This option correctly identifies that checking your bank account and making an online purchase are activities that should be avoided on public Wi-Fi networks.

8. Your computing device supports several Wi-Fi encryption standards. Which of these Wi-Fi standards is the most secure?

Correct Answer: Correct answer is: (B) WPA2.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: WPA2 is the most secure Wi-Fi encryption standard among the options provided.

Common Mistakes: A common mistake is to confuse WPA2 with older, less secure standards like WPA or WEP.

Explanations: WPA2 (Wi-Fi Protected Access II) is the most secure Wi-Fi encryption standard among the options provided. It uses AES (Advanced Encryption Standard) for data encryption, which is significantly more secure than the encryption methods used in WEP (Wired Equivalent Privacy) and TKIP (Temporal Key Integrity Protocol). WPA2 also includes additional security features such as message integrity checks and stronger key management, making it the preferred choice for secure Wi-Fi networks.

Option Analysis:

Option A: TKIP is an older encryption protocol used in WPA, which is less secure than WPA2.
Option B: WPA2 is the most secure Wi-Fi encryption standard among the options provided.
Option C: WEP is the least secure of the options, using outdated encryption methods that are easily compromised.
Option D: WPA is more secure than WEP but less secure than WPA2.

Mnemonic: WPA2: "WPA2 Wins Protection Always"

9. A person who uses his expertise to gain access to other people's computers to get information illegally or to cause damage is a

Correct Answer: Correct answer is: (C) Hacker.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Easy

Concept notes: A hacker is an individual who uses their technical expertise to gain unauthorized access to computer systems, often to steal information or cause damage.

Common Mistakes: A common misunderstanding is that all hackers are malicious. However, there are also ethical hackers who use their skills for security testing and improving system defenses.

Explanations: A hacker is defined as someone who uses their technical skills to gain unauthorized access to computer systems. This aligns with the description provided in the question, where the person uses their expertise to illegally access other people's computers to steal information or cause damage.

Option Analysis:

Option A: A programmer is someone who writes code to develop software, not necessarily someone who gains unauthorized access to systems.
Option B: An analyst typically evaluates data and systems to improve efficiency and security, but does not necessarily engage in unauthorized access.
Option C: A hacker fits the description of someone who uses their expertise to gain unauthorized access to computer systems for illegal purposes.
Option D: A spammer is someone who sends unsolicited messages, typically via email, but does not necessarily gain unauthorized access to computer systems.

10. What is the main goal of intercepting emails?

Correct Answer: Correct answer is: (A) To steal sensitive information.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Intercepting emails is a common cyber security threat aimed at gaining unauthorized access to sensitive information.

Common Mistakes: A common misunderstanding is that intercepting emails is primarily for distributing malware or spam, but the primary goal is to steal sensitive information.

Explanations: Intercepting emails allows attackers to access confidential data such as login credentials, financial information, and personal details. This stolen information can be used for identity theft, financial fraud, or other malicious activities. While distributing malware and spam are also potential uses of intercepted emails, the primary and most significant threat is the theft of sensitive information.

Option Analysis:

Option A: Correct. Intercepting emails is primarily aimed at stealing sensitive information.
Option B: Incorrect. While malware can be distributed through intercepted emails, this is not the main goal.
Option C: Incorrect. Sending spam emails is not the primary goal of intercepting emails.
Option D: Incorrect. Blocking legitimate emails is not a common goal of email interception.

Frequently Asked Questions

What is the definition of a hacker?

A hacker is an individual who uses their technical skills to find and exploit vulnerabilities in computer systems, often for unauthorized access or other malicious purposes.

What is WPA2 and why is it important?

WPA2 stands for Wi-Fi Protected Access II, a security standard for Wi-Fi networks that provides strong encryption to protect data transmitted over the network from unauthorized access.

How does blockchain technology enhance security?

Blockchain technology uses a decentralized ledger to record transactions, making it difficult for hackers to alter or tamper with data, thus enhancing the security of transactions and sensitive information.

What are some common cyber safety practices?

Common cyber safety practices include using strong passwords, avoiding public Wi-Fi for sensitive transactions, and being cautious of unknown contacts and fake websites to prevent phishing and other scam tactics.

What are the main objectives of cyber security?

The main objectives of cyber security are to protect computer systems and networks from unauthorized access, ensure the privacy and integrity of data, and prevent cyber threats such as hacking and phishing.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books