🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 20 (10 MCQs)

This set of multiple-choice questions evaluates understanding of cryptography fundamentals, key management, encryption techniques, and network security. It covers symmetric and asymmetric encryption, OS fingerprinting, TTL values, WiFi security, and data interception methods. The questions also assess knowledge of cyber security threats, including phishing, social engineering, and cyber deception techniques.

Quiz Instructions

Select an option to see the correct answer instantly.

1. Information that is spread across the internet which is not true is called

Correct Answer: Correct answer is: (C) Hoax.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A hoax is false information spread across the internet, often intended to deceive or mislead people.

Common Mistakes: A common mistake is confusing a hoax with spam, which is unsolicited or unwanted messages, or with a press release, which is an official statement from an organization.

Explanations: A hoax is false information spread across the internet, often intended to deceive or mislead people. This makes it the correct term for information that is not true and is spread across the internet.

Option Analysis:

Option A: A fact is true information, not false information.
Option B: Spam refers to unsolicited or unwanted messages, not necessarily false information.
Option C: A hoax is false information spread across the internet, often intended to deceive or mislead people.
Option D: A press release is an official statement from an organization, not necessarily false information.

2. The term "phishing" refers to .....

Correct Answer: Correct answer is: (D) An email that tries to steal personal information.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Phishing is a cyber security term that refers to fraudulent attempts to obtain sensitive information such as usernames, passwords, and credit card details by disguising as a trustworthy entity in an electronic communication.

Common Mistakes: A common misunderstanding is that phishing is related to creating or managing email accounts, which is incorrect.

Explanations: Phishing is a form of social engineering where attackers send emails that appear to be from a legitimate source to trick individuals into providing personal information. This is a key concept in cyber security as it involves the manipulation of individuals to compromise their security.

Option Analysis:

Option A: This is incorrect as creating a new email address is unrelated to phishing.
Option B: This is incorrect as recovering a deleted email is unrelated to phishing.
Option C: This is incorrect as accidentally sending an email to the wrong recipient is unrelated to phishing.
Option D: This is correct as phishing involves emails that attempt to steal personal information.

3. What information can an attacker use within ICMP to determine what type of OS the device is running?

Correct Answer: Correct answer is: (B) TTL value.

Exam Relevance: CEH, CISSP, CompTIA Security+

Difficulty: Moderate

Concept notes: The Time to Live (TTL) value in an ICMP packet can be used to infer the operating system of a device. Different operating systems use different default TTL values, which can be observed and used to identify the OS.

Common Mistakes: A common misunderstanding is that other fields in the ICMP packet, such as the total length or checksum, can be used to determine the OS. However, these fields do not provide reliable information about the OS.

Explanations: The TTL value in an ICMP packet is decremented by each router the packet passes through. Different operating systems set different initial TTL values. For example, Windows typically sets the initial TTL to 128, while Linux sets it to 64. By observing the TTL value in an ICMP packet, an attacker can make an educated guess about the operating system of the device.

Option Analysis:

Option A: The total length field in an ICMP packet does not provide information about the operating system. It simply indicates the size of the packet.
Option B: The TTL value is used to determine the operating system because different OSes use different default TTL values.
Option C: The version field is not a standard field in ICMP packets and does not provide information about the operating system.
Option D: The checksum field is used for error checking and does not provide information about the operating system.

4. Networks or websites which require a password or security code to gain access

Correct Answer: Correct answer is: (A) Secure Network.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A secure network is a network that requires authentication, such as a password or security code, to gain access.

Common Mistakes: A common mistake is confusing a secure network with a firewall, which is a security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.

Explanations: A secure network is designed to protect data and resources by requiring users to authenticate themselves before gaining access. This authentication process often involves entering a password or security code, ensuring that only authorized users can access the network.

Option Analysis:

Option A: Secure Network is the correct answer as it refers to networks that require a password or security code for access.
Option B: Firewall is incorrect because it is a security system that monitors and controls network traffic, not a network that requires a password.
Option C: Hyperlink is incorrect because it is a reference to a resource on the internet, not a security measure.
Option D: Host name is incorrect because it is the name assigned to a device connected to a network, not a security measure.

5. What type of key can be freely shared with anyone so that they can encrypt a message?

Correct Answer: Correct answer is: (D) Public key.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: In cyber security, a public key is a cryptographic key that can be freely shared with anyone to encrypt messages. The corresponding private key is kept secret and used to decrypt the messages.

Common Mistakes: A common misunderstanding is that a private key can be shared, but it must remain secret to ensure the security of the encrypted messages.

Explanations: A public key is designed to be shared openly. It is used to encrypt messages that can only be decrypted by the corresponding private key, which is kept secret. This ensures that only the intended recipient can read the message, maintaining confidentiality.

Option Analysis:

Option A: A personal key is not a standard term in cryptography and does not imply the ability to be shared freely.
Option B: A private key must remain secret and cannot be shared freely.
Option C: A free key is not a recognized term in cryptography.
Option D: A public key is designed to be shared freely to encrypt messages.

Mnemonic: Public key, share it wide, encrypt with pride.

6. What type of encryption employs a single key for both encryption and decryption?

Correct Answer: Correct answer is: (B) Symmetric encryption.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Symmetric encryption uses the same key for both encryption and decryption processes.

Common Mistakes: A common misunderstanding is that asymmetric encryption also uses a single key, but it actually uses a pair of keys: a public key for encryption and a private key for decryption.

Explanations: Symmetric encryption employs a single key for both encryption and decryption. This means that the same key is used to transform plaintext into ciphertext and to transform ciphertext back into plaintext. This method is efficient and fast, but it requires secure key distribution.

Option Analysis:

Option A: Asymmetric encryption uses a pair of keys: a public key for encryption and a private key for decryption.
Option B: Symmetric encryption uses the same key for both encryption and decryption.
Option C: Key exchange is a method for securely exchanging cryptographic keys over a public channel, but it does not describe the type of encryption.
Option D: Database encryption refers to the process of encrypting data stored in a database, but it does not specify the type of encryption used.

7. Social engineering is:

Correct Answer: Correct answer is: (B) Scams distributed through email such as phishing and impersonation.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Social engineering is a technique used by cyber criminals to manipulate individuals into divulging confidential information or performing actions that can compromise security. This often involves deception and can be carried out through various mediums, including email.

Common Mistakes: A common misunderstanding is that social engineering is limited to email-based scams. However, it can also involve phone calls, text messages, and in-person interactions.

Explanations: Social engineering involves tricking individuals into revealing sensitive information or performing actions that can compromise security. Email-based scams, such as phishing and impersonation, are common methods used in social engineering attacks. These scams often involve deceptive emails designed to trick recipients into providing personal information or clicking on malicious links.

Option Analysis:

Option A: This option describes a social networking site, not a cyber security concept.
Option B: This option correctly identifies social engineering as scams distributed through email, such as phishing and impersonation.
Option C: This option describes a targeted attack on a personal computer, which is a different concept from social engineering.
Option D: This option describes a social media platform, not a cyber security concept.

8. Which tracking program records every keystroke you make on the computer .....

Correct Answer: Correct answer is: (B) Key logger.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A key logger is a type of software or hardware that records every keystroke made on a computer.

Common Mistakes: A common misunderstanding is that other tracking programs like EFollow or stalking software might also record keystrokes, but they typically focus on different types of monitoring.

Explanations: Key loggers are specifically designed to capture every keystroke made on a computer, making them the most accurate and direct answer to the question. Other options like EFollow or stalking software may monitor activity but do not necessarily record keystrokes.

Option Analysis:

Option A: EFollow is not specifically designed to record keystrokes, but rather to monitor general activity.
Option B: Key logger is the correct answer as it is designed to record every keystroke made on a computer.
Option C: Stalking software typically monitors activity but does not necessarily record keystrokes.
Option D: This option is incorrect as Key logger is the correct answer.

9. Malicious modification or destruction of data such as changing information on Web sites is called .....

Correct Answer: Correct answer is: (A) Vandalism.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Vandalism in the context of cyber security refers to the malicious modification or destruction of data, such as altering information on websites.

Common Mistakes: A common misunderstanding is that spamming involves the same actions as vandalism. Spamming typically refers to the sending of unsolicited messages, while vandalism involves the alteration or destruction of data.

Explanations: Vandalism in cyber security specifically refers to the act of maliciously altering or destroying data, such as changing information on websites. This aligns with the definition provided in the question, making vandalism the correct answer.

Option Analysis:

Option A: Correct. Vandalism is the act of maliciously altering or destroying data, fitting the description given in the question.
Option B: Incorrect. Spamming involves sending unsolicited messages, not altering or destroying data.
Option C: Incorrect. Not all options are correct; only vandalism fits the description.
Option D: Incorrect. There is a correct answer among the options provided.

10. Which of the following is one of the methods used by cyber criminals to capture personal information?

Correct Answer: Correct answer is: (B) WiFi eavesdropping.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: WiFi eavesdropping is a method used by cyber criminals to capture personal information transmitted over wireless networks.

Common Mistakes: A common misunderstanding is that only malware like computer worms or rootkits can be used to capture personal information, but WiFi eavesdropping is also a significant threat.

Explanations: WiFi eavesdropping involves intercepting and monitoring wireless network traffic to capture sensitive information such as login credentials, financial data, and other personal information. This method is particularly effective in public WiFi networks where security measures may be lax.

Option Analysis:

Option A: Computer Worms are a type of malware that can spread across networks, but they are not specifically a method for capturing personal information over WiFi.
Option B: WiFi eavesdropping is a method used by cyber criminals to capture personal information transmitted over wireless networks.
Option C: Rootkits are stealthy malware that can hide their presence on a system, but they are not specifically a method for capturing personal information over WiFi.
Option D: This option is incorrect as WiFi eavesdropping is a valid method for capturing personal information.

Frequently Asked Questions

What is cyber deception?

Cyber deception involves using techniques to mislead attackers, such as creating fake systems or data to divert their attention away from real assets.

How does encryption protect data?

Encryption converts data into a secure format that can only be accessed with a decryption key, ensuring that unauthorized users cannot read the information.

What is the purpose of OS fingerprinting?

OS fingerprinting is used to identify the operating system of a remote host by analyzing its network traffic, which can help in tailoring security measures.

How does social engineering work in cyber attacks?

Social engineering involves manipulating individuals into divulging confidential information or performing actions that compromise security, often through deceptive tactics.

What is the role of a key logger in cyber security?

A key logger is a type of malware that records keystrokes to capture sensitive information like passwords, which can then be used for unauthorized access.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books