🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 2 (10 MCQs)

This set of multiple-choice questions evaluates knowledge of network scanning, stealth techniques, and tool identification, including Nmap and stealth mode. It also tests understanding of cybersecurity threats, such as malware, unauthorized access, and malicious hacking, as well as the legal and ethical aspects of software piracy and copyright law. The questions cover authentication methods, password security, and online privacy, emphasizing the importance of proactive security measures and international cyber law.

Quiz Instructions

Select an option to see the correct answer instantly.

1. While using internet, don't share your ..... to anyone.

Correct Answer: Correct answer is: (A) Personal information and photographs.

Exam Relevance: CEH, CISSP, CompTIA Security+

Difficulty: Easy

Concept notes: In cyber security, sharing personal information and photographs online can lead to identity theft, privacy breaches, and other security risks.

Common Mistakes: A common mistake is to believe that sharing non-sensitive items like food and water, books and notebooks, or dresses and footwear is more dangerous than sharing personal information and photographs.

Explanations: Personal information and photographs are highly sensitive data that can be exploited by cybercriminals. Sharing such information online can lead to identity theft, phishing attacks, and other cyber threats. Therefore, it is crucial to protect personal information and photographs from unauthorized access.

Option Analysis:

Option A: Correct. Personal information and photographs are sensitive data that should not be shared online.
Option B: Incorrect. Sharing food and water is not relevant to cyber security.
Option C: Incorrect. Sharing books and notebooks is not relevant to cyber security.
Option D: Incorrect. Sharing dresses and footwear is not relevant to cyber security.

2. Coded entries which are used to gain access to a computer system are called .....

Correct Answer: Correct answer is: (B) Passwords.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: In cyber security, passwords are the most common form of authentication used to gain access to a computer system.

Common Mistakes: A common misunderstanding is that "entry codes" or "security commands" might be the correct term, but in the context of cyber security, "passwords" is the standard term used.

Explanations: Passwords are coded entries that are used to verify the identity of a user attempting to access a computer system. They are a fundamental component of authentication in cyber security.

Option Analysis:

Option A: Entry codes are not a standard term in cyber security for authentication purposes.
Option B: Passwords are the correct term for coded entries used to gain access to a computer system.
Option C: Security commands refer to commands used to manage security settings, not for authentication.
Option D: Code words are used in other contexts but not specifically for authentication in cyber security.

3. It is a tool used to quickly check computers on a network for known weaknesses.

Correct Answer: Correct answer is: (B) Vulnerability scanner.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: A vulnerability scanner is a tool used to identify security weaknesses in a network or system.

Common Mistakes: A common misunderstanding is confusing a vulnerability scanner with a security exploit, which is a method to take advantage of a known weakness rather than detect it.

Explanations: A vulnerability scanner is designed to quickly check computers on a network for known weaknesses. It systematically scans systems and identifies potential vulnerabilities that could be exploited by attackers. This tool is essential for proactive security management and helps organizations to identify and mitigate risks before they can be exploited.

Option Analysis:

Option A: A security exploit is a method to take advantage of a known weakness, not a tool for detection.
Option B: A vulnerability scanner is the correct tool for quickly checking computers on a network for known weaknesses.
Option C: A packet sniffer is used to capture and analyze network traffic, not to detect vulnerabilities.
Option D: A rootkit is a type of malicious software designed to gain unauthorized access, not a tool for vulnerability detection.

4. Which one of the following utilities allows an attacker to scan the network in stealth mode?

Correct Answer: Correct answer is: (C) Nmap.

Exam Relevance: CEH, CISSP, CompTIA Security+

Difficulty: Moderate

Concept notes: Nmap is a powerful network scanning tool that can be used to discover hosts and services on a computer network. It can perform various types of scans, including stealth scans, which are designed to avoid detection by network security systems.

Common Mistakes: A common misunderstanding is that Wireshark, Whois, or Cain & Abel are primarily used for network scanning. While these tools have their own specific uses, they do not offer the stealth scanning capabilities that Nmap provides.

Explanations: Nmap is specifically designed for network scanning and includes features for stealth scanning. This allows an attacker to scan a network without being easily detected by network security systems. Wireshark is a packet analyzer, Whois is used for domain information lookup, and Cain & Abel is a password recovery tool. None of these tools are primarily designed for stealth network scanning.

Option Analysis:

Option A: Wireshark is a packet analyzer and does not perform network scanning.
Option B: Whois is used for domain information lookup and does not perform network scanning.
Option C: Nmap is a network scanning tool with stealth scanning capabilities.
Option D: Cain & Abel is a password recovery tool and does not perform network scanning.

Mnemonic: Nmap: Network Mapping

5. Type of surveillance software that has the capability to record every key stroke you make on a Log file, usually encrypted

Correct Answer: Correct answer is: (D) Keylogger.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Keyloggers are a type of surveillance software designed to record every keystroke made on a computer, typically storing this information in a log file, which can be encrypted for security.

Common Mistakes: A common misunderstanding is that keyloggers are the same as viruses or spyware. While keyloggers can be used maliciously, they are a specific type of software designed to capture keystrokes, whereas viruses and spyware have broader functionalities.

Explanations: Keyloggers are specifically designed to record every keystroke made on a computer, which aligns with the description provided in the question. They often store this information in a log file, which can be encrypted to protect the recorded data. This makes keyloggers the most appropriate answer for the given description.

Option Analysis:

Option A: Worms are self-replicating malware that spread across networks, not designed to record keystrokes.
Option B: Viruses are malicious software that can replicate and spread to other computers, but they are not specifically designed to record keystrokes.
Option C: Spyware is software that can gather information about a user's activities, but it is not specifically designed to record every keystroke.
Option D: Keyloggers are designed to record every keystroke made on a computer, which matches the description in the question.

Mnemonic: Keyloggers Log Keystrokes

6. Which is the best definition of a black hat hacker?

Correct Answer: Correct answer is: (C) Someone who breaks into computers systems to cause damage or make money.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: Black hat hackers are individuals who engage in unauthorized access to computer systems with malicious intent, such as causing damage or financial gain.

Common Mistakes: A common misunderstanding is that all hackers are malicious, but there are different types of hackers, including white hat and grey hat hackers, who operate with different intentions.

Explanations: Black hat hackers are known for their illegal activities aimed at causing harm or financial gain. They exploit vulnerabilities in computer systems to gain unauthorized access, often with the intent to steal data, disrupt services, or cause other forms of damage. This definition aligns with the intent to cause damage or make money, which is characteristic of malicious hacking activities.

Option Analysis:

Option A: This describes a white hat hacker, who tests systems for security vulnerabilities with permission.
Option B: This describes a government agent or ethical hacker working for the government, not a black hat hacker.
Option C: This accurately describes a black hat hacker, who engages in illegal activities for malicious purposes.
Option D: This describes a characteristic of a black hat hacker but does not fully capture the intent behind their actions.

7. This is a secret code to protect your information

Correct Answer: Correct answer is: (C) Password.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A password is a secret code used to protect information and ensure that only authorized individuals can access it.

Common Mistakes: A common misunderstanding is that a password is the same as a username or a PIN. However, a password is specifically a secret code used for authentication.

Explanations: A password is a secret code used to protect information and ensure that only authorized individuals can access it. The phrase "This is a secret code to protect your information" directly aligns with the definition of a password in the context of cybersecurity.

Option Analysis:

Option A: Phishing is a fraudulent attempt to obtain sensitive information by disguising oneself as a trustworthy entity. It does not fit the description of a secret code to protect information.
Option B: A textbox is an input field in a user interface where users can enter text. It does not serve as a secret code to protect information.
Option C: A password is a secret code used to protect information and ensure that only authorized individuals can access it. This matches the description given in the question.
Option D: None of the above is incorrect because a password fits the description provided.

8. Software piracy involves .....

Correct Answer: Correct answer is: (C) The unauthorized copying, use or selling of software that is copyrighted.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Software piracy involves the unauthorized copying, use, or selling of software that is copyrighted.

Common Mistakes: A common misunderstanding is that software piracy involves authorized actions, which is incorrect.

Explanations: Software piracy is defined as the unauthorized copying, use, or selling of software that is copyrighted. This means that any unauthorized action involving copyrighted software is considered piracy. The term "unauthorized" is key, as it distinguishes piracy from legal activities such as authorized copying or use of software.

Option Analysis:

Option A: This option incorrectly states that software piracy involves authorized actions, which is not true.
Option B: This option incorrectly states that software piracy involves software that is not copyrighted, which is not true.
Option C: This option correctly defines software piracy as the unauthorized copying, use, or selling of copyrighted software.
Option D: This option incorrectly states that software piracy involves software that is not copyrighted, which is not true.

9. Which of the following is a disadvantage of the internet?

Correct Answer: Correct answer is: (C) Risk of malware and hacking.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: The internet provides numerous benefits such as up-to-date information, easy access to resources, and instant communication. However, it also poses significant risks, including the threat of malware and hacking.

Common Mistakes: A common mistake is overlooking the security risks associated with the internet, focusing only on its advantages.

Explanations: The internet is a powerful tool that offers many benefits, but it also introduces significant security risks. Malware and hacking are major concerns as they can compromise user data, privacy, and system integrity. These risks make the internet a double-edged sword, highlighting the need for robust cybersecurity measures.

Option Analysis:

Option A: Up-to-date information is a benefit of the internet, not a disadvantage.
Option B: Easy access to resources is another benefit of the internet, not a disadvantage.
Option C: Risk of malware and hacking is a significant disadvantage of the internet, as it poses serious security threats.
Option D: Instant communication is a benefit of the internet, not a disadvantage.

10. Evaluate the role of international law in addressing cybercrime. What strategic steps can nations take to strengthen these laws?

Correct Answer: Correct answer is: (B) By participating in international treaties and agreements that promote cooperation and standardization.

Exam Relevance: CISSP, CISM, CISA

Difficulty: Moderate

Concept notes: International law plays a crucial role in addressing cybercrime by fostering cooperation and standardization among nations. This helps in creating a unified approach to combat cyber threats.

Common Mistakes: A common misunderstanding is that national laws alone are sufficient to address cybercrime, without the need for international cooperation.

Explanations: Participating in international treaties and agreements is essential because cybercrime often transcends national borders. International cooperation allows for the sharing of information, resources, and best practices, which can enhance the effectiveness of cybercrime prevention and response efforts. Standardization of laws and procedures ensures consistency and reduces legal loopholes that cybercriminals might exploit.

Option Analysis:

Option A: Relying solely on national laws is insufficient as cybercrime often involves cross-border activities that require international coordination.
Option B: Participating in international treaties and agreements promotes cooperation and standardization, which are critical for addressing cybercrime effectively.
Option C: Ignoring international law would limit the ability to collaborate with other nations, making it harder to combat cybercrime.
Option D: Using international law only as a last resort would delay effective action and reduce the overall effectiveness of cybercrime prevention efforts.

Frequently Asked Questions

What is the difference between cyber security and cybersecurity?

Cyber security and cybersecurity refer to the same concept, which is the protection of internet-connected systems, including hardware, software, and data, from attack, damage, or unauthorized access.

What is a black hat hacker?

A black hat hacker is an individual who uses their technical skills to exploit vulnerabilities in computer systems for malicious purposes, such as stealing data or disrupting services.

How does network scanning help in cybersecurity?

Network scanning tools like Nmap help identify open ports and services on a network, which can reveal potential vulnerabilities that need to be addressed to improve security.

What is the role of international cyber law?

International cyber law aims to establish a framework for regulating cyber activities across borders, addressing issues such as cybercrime, data protection, and the use of cyber weapons.

What is a keylogger and how does it work?

A keylogger is a type of malware that records keystrokes made on a computer, allowing attackers to capture sensitive information such as passwords and personal data.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books