🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 18 (10 MCQs)

This set of multiple-choice questions evaluates understanding of DNS vulnerabilities, cyber threats, and network security. It covers legislation governing cybercrime, unauthorized access, hacking laws, and cybersecurity terminology. The material also assesses knowledge of email security, interception of communications, online privacy, and personal data protection. Students will be tested on their ability to identify and manage risks associated with cyber attacks, phishing techniques, and social engineering.

Quiz Instructions

Select an option to see the correct answer instantly.

1. Which software protects your computers from viruses?

Correct Answer: Correct answer is: (B) Anti-malware/anti-virus.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Anti-malware/anti-virus software is designed to protect computers from viruses and other malicious software.

Common Mistakes: A common mistake is to think that the operating system or internet browser alone can protect against viruses.

Explanations: Anti-malware/anti-virus software is specifically designed to detect, prevent, and remove malicious software, including viruses. It actively scans files, emails, and web traffic to identify and neutralize threats. While operating systems and internet browsers have some built-in security features, they are not sufficient to provide comprehensive protection against all types of malware.

Option Analysis:

Option A: Images are not software and do not provide protection against viruses.
Option B: Anti-malware/anti-virus software is designed to protect against viruses and other malicious software.
Option C: The operating system provides some security features but is not specifically designed to protect against viruses.
Option D: An internet browser can have security features, but it is not designed to protect against all types of malware.

2. I'm online and I met someone my age in a chat room. Is it ok to give to him or her my address or phone number?

Correct Answer: Correct answer is: (B) No.

Exam Relevance: CEH, CISSP, CompTIA Security+

Difficulty: Easy

Concept notes: Sharing personal information such as your address or phone number with someone you met online can pose significant security risks.

Common Mistakes: A common mistake is assuming that because someone is your age, they can be trusted with personal information.

Explanations: In cyber security, it is crucial to protect personal information from potential threats. Sharing your address or phone number with someone you met online can lead to identity theft, stalking, or other forms of harassment. It is safer to maintain privacy and not share such sensitive information with strangers.

Option Analysis:

Option A: Incorrect. Sharing personal information with someone you met online is not safe and can lead to various security risks.
Option B: Correct. It is not safe to share your address or phone number with someone you met online, as it can expose you to potential cyber threats and personal safety risks.

3. DNS is also susceptible to ..... attacks

Correct Answer: Correct answer is: (B) Cyber.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: DNS (Domain Name System) is a critical component of the internet that translates domain names into IP addresses. It is vulnerable to cyber attacks, which can disrupt its functionality and compromise network security.

Common Mistakes: A common misunderstanding is that DNS is only susceptible to technical or protocol-based attacks, but it is also vulnerable to broader cyber threats.

Explanations: DNS is susceptible to cyber attacks because it is a fundamental part of internet infrastructure. Cyber attacks can include DNS spoofing, DNS cache poisoning, and DNS amplification attacks, all of which can disrupt the normal functioning of DNS and lead to security breaches.

Option Analysis:

Option A: Internetworking Protocol is not a type of attack. It refers to protocols used for communication between different networks.
Option B: Cyber attacks are a broad category of malicious activities that target computer systems and networks, including DNS.
Option C: IP Address is a numerical label assigned to each device connected to a computer network, not a type of attack.
Option D: Domains are the human-readable names used to identify internet resources, not a type of attack.

4. Which among the following is not a security /privacy risk?

Correct Answer: Correct answer is: (A) Spam.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Spam is not considered a direct security or privacy risk in the context of cyber security.

Common Mistakes: A common misunderstanding is that spam is a significant threat to security and privacy, similar to viruses, hacking, and phishing.

Explanations: Spam is unsolicited and often irrelevant messages sent in bulk. While spam can be annoying and can sometimes contain malicious links or attachments, it is not inherently a security or privacy risk. Viruses, hacking, and phishing are direct threats to security and privacy as they involve unauthorized access, data theft, or malicious software.

Option Analysis:

Option A: Spam is not a direct security or privacy risk.
Option B: Viruses are malicious software that can harm systems and steal data.
Option C: Hacking involves unauthorized access to systems and can lead to data breaches.
Option D: Phishing involves deceptive practices to steal personal information.

5. Which legislation governs the act of hacking?

Correct Answer: Correct answer is: (D) The Computer Misuse Act.

Exam Relevance: CISSP, CISM, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: The Computer Misuse Act is a piece of legislation that governs unauthorized access to computer systems and data, which includes hacking activities.

Common Mistakes: A common misunderstanding is that the Data Protection Act or the Freedom of Information Act might govern hacking, but these acts deal with data privacy and access to information, not the act of unauthorized access itself.

Explanations: The Computer Misuse Act specifically addresses the unauthorized access to computer systems and data, which is the core definition of hacking. This act provides legal frameworks and penalties for various forms of unauthorized computer access, including unauthorized access to computer material, unauthorized access with intent to commit or facilitate commission of further offences, and unauthorized modification of computer material.

Option Analysis:

Option A: The Freedom of Information Act is related to the right to access information held by public authorities, not to the act of hacking.
Option B: The Data Protection Act is concerned with the protection of personal data and privacy, not the act of unauthorized access to computer systems.
Option C: Creative Commons License is a set of public copyright licenses that enable the free distribution of creative works, unrelated to hacking.
Option D: The Computer Misuse Act is the correct legislation that governs hacking activities.

Mnemonic: CMA for hacking, not DPA or FOIA.

6. What does the term 'Spam' mean?

Correct Answer: Correct answer is: (C) Emails that are unwanted.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Spam refers to unsolicited and unwanted emails that are often sent in bulk to a large number of recipients.

Common Mistakes: A common misunderstanding is that spam refers to the internet or the vast network of computers, which is incorrect. Spam specifically pertains to unwanted emails.

Explanations: Spam is a term used in cybersecurity to describe unsolicited and unwanted emails. These emails are often sent in bulk and can contain malicious content or be used for phishing attacks. The term does not refer to the internet as a whole, the vast network of computers, or internet services like VoIP or the WWW.

Option Analysis:

Option A: This option refers to the internet, which is incorrect. Spam is specifically about unwanted emails.
Option B: This option refers to the internet network, which is incorrect. Spam is specifically about unwanted emails.
Option C: This option correctly defines spam as unwanted emails.
Option D: This option refers to internet services, which is incorrect. Spam is specifically about unwanted emails.

7. It involves listening to output transmissions over telecommunications lines. Available technologies enable perpetrators to intercept messages being sent over unprotected telephone lines and microwave channels.

Correct Answer: Correct answer is: (C) Eavesdropping.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: Eavesdropping involves intercepting and listening to communications without the consent of the parties involved. In the context of cyber security, this can include intercepting messages sent over unprotected telephone lines and microwave channels.

Common Mistakes: A common misunderstanding is that eavesdropping only involves listening to conversations in person. However, in cyber security, eavesdropping can also involve intercepting digital communications.

Explanations: Eavesdropping is the act of intercepting and listening to communications without the consent of the parties involved. In the context of cyber security, this can include intercepting messages sent over unprotected telephone lines and microwave channels. This aligns with the description provided in the question, making eavesdropping the correct answer.

Option Analysis:

Option A: Scavenging typically refers to the act of searching for and collecting discarded items, which is not related to intercepting communications.
Option B: Operations fraud involves fraudulent activities related to business operations, which does not involve intercepting communications.
Option C: Eavesdropping involves intercepting and listening to communications, which matches the description in the question.
Option D: Database management fraud involves fraudulent activities related to database management, which does not involve intercepting communications.

Mnemonic: Eavesdropping: "Eavesdrop on the line, not in the line."

8. Send victim a fake site to enter personal information

Correct Answer: Correct answer is: (D) Phishing.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Phishing is a cyber attack where attackers send victims a fake website or email to trick them into entering personal information.

Common Mistakes: A common mistake is confusing phishing with pharming, which involves redirecting users to a fraudulent site without their knowledge.

Explanations: Phishing involves tricking victims into entering personal information on a fake site. This matches the description given in the question. The attacker sends a fake site to the victim,诱使他们输入个人信息，这是典型的网络钓鱼攻击。

Option A: Pharming involves redirecting users to a fraudulent site without their knowledge, which is different from the scenario described.
Option B: Spam refers to unsolicited messages, often sent in bulk, but does not specifically involve tricking users into entering personal information.
Option C: Spyware is software that secretly monitors a user's activities, but does not involve sending a fake site to trick the user.
Option D: Phishing involves sending a fake site to trick the user into entering personal information, which matches the scenario described.

phishing attack, fake site, personal information

phishing techniques, cyber attack methods, social engineering

CISSP, CompTIA Security+, CEH

Option Analysis:

Option A: Pharming involves redirecting users to a fraudulent site without their knowledge, which is different from the scenario described.
Option B: Spam refers to unsolicited messages, often sent in bulk, but does not specifically involve tricking users into entering personal information.
Option C: Spyware is software that secretly monitors a user's activities, but does not involve sending a fake site to trick the user.
Option D: Phishing involves sending a fake site to trick the user into entering personal information, which matches the scenario described.

9. If you have a question or do not know if something online is safe, you should .....

Correct Answer: Correct answer is: (A) Ask an adult.

Exam Relevance: Cybersecurity Awareness Exams, Online Safety Certification

Difficulty: Easy

Concept notes: In cyber security, it is important to seek guidance from a trusted adult when unsure about the safety of online content or links.

Common Mistakes: A common mistake is to click on unknown links out of curiosity, which can lead to malware or other security risks.

Explanations: Asking an adult for help ensures that you receive guidance from someone with more experience and knowledge about online safety. This approach minimizes the risk of encountering harmful content or falling victim to online scams.

Option Analysis:

Option A: This is the correct choice as it aligns with best practices in cyber security for seeking advice from a trusted adult.
Option B: This is incorrect because clicking on unknown links can expose you to various cyber threats, such as malware, phishing, or other malicious activities.

10. ..... is an electronic fraud tactic in which individuals are tricked into revealing critical financial or personal information to unauthorized entities over the telephone.

Correct Answer: Correct answer is: (C) Vishing.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Vishing is a form of social engineering attack where attackers use the telephone to trick individuals into revealing sensitive information.

Common Mistakes: A common mistake is confusing vishing with phishing or pharming, which are similar attacks but conducted through email or malicious websites, respectively.

Explanations: Vishing involves the use of the telephone to deceive individuals into providing critical financial or personal information. This method relies on the attacker's ability to manipulate the victim over the phone, often by posing as a trusted entity such as a bank or government agency.

Option Analysis:

Option A: Phishing involves tricking individuals into revealing information through email or malicious websites, not over the telephone.
Option B: Pharming involves redirecting users to fraudulent websites, typically through DNS poisoning, and is not related to telephone-based attacks.
Option C: Vishing is the correct term for telephone-based social engineering attacks aimed at obtaining sensitive information.
Option D: While all options are related to cyber security attacks, only vishing specifically involves telephone-based deception.

Mnemonic: V for Voice, I for Internet, S for Social Engineering, H for Hacking.

Frequently Asked Questions

What is the Computer Misuse Act?

The Computer Misuse Act is a law that criminalizes unauthorized access to computer systems and data, as well as the creation and distribution of malicious software.

How can DNS security help protect against cyber attacks?

DNS security helps protect against cyber attacks by ensuring that domain names are correctly resolved to their intended IP addresses, preventing users from being redirected to malicious sites.

What is the difference between anti-malware and anti-virus software?

Anti-malware software focuses on detecting and removing a wide range of malicious software, while anti-virus software specifically targets viruses and similar threats.

What is social engineering in the context of cybersecurity?

Social engineering involves manipulating individuals into divulging confidential information or performing actions that compromise security, often through deceptive tactics like phishing or vishing.

How can I protect my personal information from privacy risks?

To protect personal information, use strong, unique passwords, enable two-factor authentication, and be cautious about sharing sensitive data online or over the phone.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books