🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 21 (10 MCQs)

This set of multiple-choice questions evaluates understanding of encryption, secure communication, and internet privacy. It covers cyber security terminology, denial of service attacks, and various types of cyber attacks. The material also assesses knowledge of WiFi vulnerabilities, data interception, and protection against unauthorized access. Key concepts include firewall functions, password security, and identity verification methods.

Quiz Instructions

Select an option to see the correct answer instantly.

1. What is a major safety precaution when using the internet?

Correct Answer: Correct answer is: (D) Cross-check websites before transactions.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: Cross-checking websites before transactions is a crucial safety precaution in cyber security to ensure the website is legitimate and secure.

Common Mistakes: A common misunderstanding is that all websites are safe for transactions, which can lead to financial and personal data theft.

Explanations: Cross-checking websites before transactions helps verify the authenticity and security of the site. This can be done by checking for HTTPS in the URL, looking for a padlock icon, and verifying the site's reputation and reviews. This precaution helps prevent phishing attacks and other cyber threats.

Option Analysis:

Option A: Clicking on all links without hesitation can lead to phishing attacks and malware infections.
Option B: Disclosing personal information freely can result in identity theft and other cybercrimes.
Option C: Trusting everyone you meet online can expose you to scams and fraudulent activities.
Option D: Cross-checking websites before transactions is a major safety precaution to ensure the security and legitimacy of the site.

2. What do you call a person who gains illegal access to a computer system?

Correct Answer: Correct answer is: (B) Hacker.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Easy

Concept notes: In the context of cyber security, a hacker is a person who gains unauthorized access to computer systems, often with malicious intent.

Common Mistakes: A common misunderstanding is that all hackers are malicious. However, in cyber security, the term "hacker" typically refers to someone who gains unauthorized access, regardless of their intent.

Explanations: The term "hacker" is widely used in the field of cyber security to describe individuals who gain unauthorized access to computer systems. This aligns with the definition provided in the question, making "hacker" the correct answer.

Option Analysis:

Option A: "Electronic enthusiast" is not a term commonly used in cyber security to describe someone who gains unauthorized access to computer systems.
Option B: "Hacker" is the correct term used in cyber security to describe someone who gains unauthorized access to computer systems.
Option C: "Computer pirate" is not a standard term in cyber security and is less precise than "hacker."
Option D: "All of the choices" is incorrect because not all options are correct terms in the context of cyber security.

3. What is a potential disadvantage of WiFi networks mentioned in the text?

Correct Answer: Correct answer is: (C) Increased security issues.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: WiFi networks can be vulnerable to security threats such as unauthorized access, eavesdropping, and data interception, which are significant disadvantages in the context of cyber security.

Common Mistakes: A common misunderstanding is that WiFi networks are inherently secure due to their widespread use and convenience, leading to underestimation of potential security risks.

Explanations: WiFi networks are often less secure than wired networks because they transmit data over radio waves, which can be intercepted by unauthorized users. This makes them susceptible to various cyber attacks, including man-in-the-middle attacks, where an attacker intercepts and possibly alters the communication between two parties. Additionally, weak encryption methods and default settings can further exacerbate security vulnerabilities.

Option Analysis:

Option A: High cost is not typically a disadvantage of WiFi networks, as they are generally cost-effective compared to wired networks.
Option B: Limited range is a potential issue but is not as significant a disadvantage as security concerns in the context of cyber security.
Option C: Increased security issues are a major disadvantage of WiFi networks, as they are more vulnerable to cyber attacks and unauthorized access.
Option D: Incompatibility with devices is not a common issue with modern WiFi networks, as they are designed to be compatible with a wide range of devices.

4. What is a significant challenge for e-businesses?

Correct Answer: Correct answer is: (B) Cybersecurity risks.

Exam Relevance: CISSP, CISM, CompTIA Security+

Difficulty: Moderate

Concept notes: Cybersecurity risks are a significant challenge for e-businesses due to the potential for data breaches, hacking, and other cyber threats that can compromise sensitive information and disrupt operations.

Common Mistakes: A common misunderstanding is that high customer loyalty (Option A) or low competition (Option C) are the primary challenges for e-businesses, when in fact cybersecurity risks pose a more significant threat.

Explanations: Cybersecurity risks are a significant challenge for e-businesses because they can lead to data breaches, loss of customer trust, financial losses, and legal repercussions. E-businesses handle large amounts of sensitive data, making them attractive targets for cybercriminals. Effective cybersecurity measures are essential to protect against these risks.

Option Analysis:

Option A: High customer loyalty is generally a positive attribute for businesses and not a challenge.
Option B: Cybersecurity risks are a significant challenge for e-businesses due to the potential for data breaches and other cyber threats.
Option C: Low competition is not typically a challenge for e-businesses; it is often a favorable condition.
Option D: Stable technology is generally desirable and not a challenge for e-businesses.

5. Two-factor authentication (2FA) is an identity and access management security method that requires two forms of identification to access resources and data to help safeguard companies' most vulnerable information and networks.

Correct Answer: Correct answer is: (A) True.

Exam Relevance: CISSP, CompTIA Security+, CISM

Difficulty: Easy

Concept notes: Two-factor authentication (2FA) is a security method that requires two forms of identification to access resources and data, enhancing security by adding an additional layer of protection.

Common Mistakes: A common misunderstanding is that 2FA is only used for personal accounts, but it is also widely used in corporate environments to protect sensitive information and networks.

Explanations: Two-factor authentication (2FA) is a security method that requires two forms of identification to access resources and data. This method enhances security by adding an additional layer of protection, making it more difficult for unauthorized users to gain access. The two factors typically include something the user knows (like a password) and something the user has (like a smartphone or token). This dual-layer approach helps safeguard companies' most vulnerable information and networks.

Option Analysis:

Option A: This option is correct because 2FA does indeed require two forms of identification to access resources and data, which helps in safeguarding sensitive information and networks.
Option B: This option is incorrect because 2FA is a well-established and effective method for enhancing security by requiring two forms of identification.

6. MAKES SPEECH UNINTELLIGIBLE DURING TRANSMISSION AND RESTORES IT AT RECEPTION

Correct Answer: Correct answer is: (D) SCRAMBLER.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: A scrambler is a device used in communication systems to make speech unintelligible during transmission and then restore it at the receiving end. This is a common technique in cyber security to protect the confidentiality of transmitted data.

Common Mistakes: A common misunderstanding is that video systems, sets, or TV equipment are primarily designed for scrambling speech. These devices are typically used for video and audio transmission but do not inherently scramble speech for security purposes.

Explanations: A scrambler is specifically designed to scramble speech during transmission to prevent unauthorized interception and eavesdropping. It then unscrambles the speech at the receiving end to restore the original message. This process ensures that the transmitted speech remains confidential and secure.

Option Analysis:

Option A: A video system is primarily used for transmitting video content and does not inherently scramble speech.
Option B: A set typically refers to a collection of devices or components and does not specifically refer to a device that scrambles speech.
Option C: TV equipment is designed for broadcasting and receiving television signals and does not inherently scramble speech.
Option D: A scrambler is specifically designed to scramble speech during transmission and restore it at the receiving end, making it the correct answer.

Mnemonic: SPEECH SCRAMBLE: Secure Protection Ensures Confidentiality, Hide And Restore

7. What does DoS attack stand for?

Correct Answer: Correct answer is: (B) Denial of Service.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Easy

Concept notes: A DoS attack is a cyber attack where the attacker aims to make a service unavailable to its intended users by overwhelming the service with traffic or requests.

Common Mistakes: A common misunderstanding is that DoS attacks are intended to steal data or cause permanent damage, but they are primarily focused on disrupting service availability.

Explanations: DoS stands for Denial of Service. In a DoS attack, the attacker floods the target system with traffic or requests, causing it to become unresponsive to legitimate users. This disrupts the availability of the service, which is a key aspect of the attack.

Option Analysis:

Option A: "Doom of System" is not a recognized term in cybersecurity and does not accurately describe the nature of a DoS attack.
Option B: "Denial of Service" is the correct term for a DoS attack, where the attacker aims to make a service unavailable to its intended users.
Option C: "Don't Open Service" is not a recognized term in cybersecurity and does not describe the nature of a DoS attack.
Option D: "Didn't Order Security" is not a recognized term in cybersecurity and does not describe the nature of a DoS attack.

Mnemonic: DoS: Denial of Service

8. To protect yourself from computer hacker intrusions you should install a .....

Correct Answer: Correct answer is: (A) Firewall.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A firewall is a security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.

Common Mistakes: A common mistake is to confuse a firewall with other security measures like macros or scripts, which do not provide the same level of protection against hacker intrusions.

Explanations: A firewall is designed to protect a computer or network from unauthorized access by monitoring and controlling network traffic. It acts as a barrier between a trusted internal network and untrusted external networks, such as the internet. By filtering traffic based on security rules, a firewall can prevent unauthorized access and protect against hacker intrusions.

Option Analysis:

Option A: Firewall is the correct choice as it is specifically designed to protect against unauthorized access and hacker intrusions.
Option B: A macro is a set of instructions that can be executed repeatedly, but it does not provide security against hacker intrusions.
Option C: A script is a series of commands that can be executed, but it does not offer protection against unauthorized access.
Option D: None of these is incorrect because a firewall is the appropriate choice for protecting against hacker intrusions.

9. What is an advantage of using VPN?

Correct Answer: Correct answer is: (A) Your communications over the internet are more secure.

Exam Relevance: CISSP, CompTIA Security+, CCNA Security

Difficulty: Easy

Concept notes: A Virtual Private Network (VPN) encrypts your internet traffic and routes it through a secure server, making your communications more secure.

Common Mistakes: A common misunderstanding is that a VPN makes your internet traffic visible to your Internet Service Provider (ISP), but in fact, it does the opposite by encrypting the traffic.

Explanations: A Virtual Private Network (VPN) encrypts your internet traffic and routes it through a secure server, which makes it difficult for third parties to intercept and read your data. This encryption and secure routing enhance the security of your communications over the internet.

Option Analysis:

Option A: Correct. A VPN encrypts your internet traffic, making it more secure.
Option B: Incorrect. A VPN does not make your communications less secure; it enhances security.
Option C: Incorrect. A VPN encrypts your internet traffic, making it less visible to your ISP.
Option D: Incorrect. A VPN can sometimes slow down your internet speed due to the encryption and routing processes.

10. It's a good practice to use the same password for all your web conferencing accounts.

Correct Answer: Correct answer is: (B) FALSE.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: Using the same password for all accounts is a risky practice in cybersecurity. It increases the likelihood of a security breach if one password is compromised.

Common Mistakes: A common mistake is believing that using the same password simplifies account management and reduces the risk of forgetting passwords.

Explanations: Using the same password for all web conferencing accounts is a poor security practice. If one password is compromised, all accounts using that password become vulnerable. This increases the risk of unauthorized access and potential data breaches. Therefore, it is recommended to use unique, strong passwords for each account to enhance security.

Option Analysis:

Option A: This option suggests using the same password for all web conferencing accounts, which is incorrect and poses a significant security risk.
Option B: This option correctly states that it is not a good practice to use the same password for all web conferencing accounts, aligning with cybersecurity best practices.

Frequently Asked Questions

What is a Denial of Service (DoS) attack?

A Denial of Service (DoS) attack is a cyber attack where a hacker overwhelms a system with traffic to make it unavailable to legitimate users.

How does a Virtual Private Network (VPN) enhance security?

A Virtual Private Network (VPN) encrypts internet traffic and routes it through a secure server, protecting data confidentiality and privacy.

What is the main purpose of a firewall in cybersecurity?

A firewall monitors and controls incoming and outgoing network traffic based on predetermined security rules to prevent unauthorized access.

Why is two-factor authentication important for online transactions?

Two-factor authentication adds an extra layer of security by requiring a second form of verification, making it harder for unauthorized users to access accounts.

What is a man-in-the-middle attack?

A man-in-the-middle attack occurs when a hacker intercepts and possibly alters the communication between two parties without their knowledge.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books