🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 4 (10 MCQs)

This set of multiple-choice questions evaluates understanding of data protection, legal methods, unauthorized access, and ethical hacking. It covers cybersecurity roles, types of cyber attacks, including DDoS and ransomware, and explores attack vectors, infrastructure resilience, and privacy concerns. The material aims to enhance cybersecurity preparedness and threat mitigation skills.

Quiz Instructions

Select an option to see the correct answer instantly.

1. What best describes an attack vector?

Correct Answer: Correct answer is: (B) A path, method, or route by which an attack was carried out.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: An attack vector in cybersecurity refers to the specific path or method used by an attacker to gain unauthorized access to a system or network.

Common Mistakes: A common misunderstanding is that an attack vector refers to the outcome or damage caused by an attack, rather than the method used to carry out the attack.

Explanations: An attack vector is the means by which an attacker gains access to a system or network. It describes the specific path or method used to exploit a vulnerability. This can include various methods such as phishing emails, malware, or exploiting software vulnerabilities. The resolution of an attack, the result of an attack, and the last stage of the attack continuum are not considered attack vectors.

Option Analysis:

Option A: The resolution of an attack is not an attack vector; it refers to the steps taken to mitigate or resolve the attack.
Option B: This correctly defines an attack vector as the path, method, or route by which an attack was carried out.
Option C: The result of an attack or the damage caused by an attack is not an attack vector; it is the consequence of the attack.
Option D: The last stage of the attack continuum is not an attack vector; it is a phase in the attack lifecycle.

2. Consider the impact of cyber warfare on national security. What strategic measures can a nation take to prepare for and mitigate the effects of a cyber attack?

Correct Answer: Correct answer is: (B) Investing in cybersecurity education and infrastructure resilience.

Exam Relevance: CISSP, CISM, CompTIA Security+

Difficulty: Moderate

Concept notes: Investing in cybersecurity education and infrastructure resilience is crucial for preparing and mitigating the effects of cyber attacks. This approach ensures that both individuals and systems are better equipped to prevent, detect, and respond to cyber threats.

Common Mistakes: A common misunderstanding is that focusing solely on military responses or ignoring cyber threats is sufficient. However, these approaches do not address the underlying vulnerabilities and lack of preparedness that can exacerbate the impact of cyber attacks.

Explanations: Investing in cybersecurity education enhances awareness and skills among individuals, making them less susceptible to cyber threats. Infrastructure resilience involves strengthening systems and networks to withstand and recover from cyber attacks. This dual approach ensures a comprehensive defense strategy against cyber warfare.

Option Analysis:

Option A: Focusing only on military responses to cyber attacks is insufficient as it neglects the need for broader preparedness and resilience.
Option B: Investing in cybersecurity education and infrastructure resilience is the correct approach as it addresses both human and technical vulnerabilities.
Option C: Ignoring cyber threats and focusing on traditional warfare is a flawed strategy as cyber attacks can have significant impacts on national security.
Option D: Relying solely on international aid during a cyber attack is not a proactive or reliable strategy for national security.

3. I want to be safe on the internet. I should focus on:

Correct Answer: Correct answer is: (C) Avoid browsing what you don't want others to see.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: In cyber security, maintaining privacy and avoiding exposure of sensitive information is crucial. Browsing habits can reveal personal information that could be exploited by cybercriminals.

Common Mistakes: A common mistake is assuming that using a VPN or going incognito mode will completely protect one's privacy and security online.

Explanations: Avoiding browsing what you don't want others to see is a fundamental principle in cyber security. This practice helps prevent the exposure of sensitive information that could be used for identity theft, phishing, or other malicious activities. While tools like a VPN or incognito mode can enhance privacy, they do not guarantee complete anonymity or security.

Option Analysis:

Option A: Using a VPN can enhance privacy by encrypting internet traffic, but it does not guarantee complete security or privacy.
Option B: Going Incognito mode only prevents the browser from saving browsing history, cookies, and site data. It does not provide complete privacy or security.
Option C: Avoiding browsing what you don't want others to see is a direct way to protect your privacy and security online.
Option D: This option is incorrect as avoiding browsing sensitive content is a valid and important security practice.

4. Which of the following is okay to share online?

Correct Answer: Correct answer is: (A) Your favorite sport.

Exam Relevance: CEH, CISSP, CompTIA Security+

Difficulty: Easy

Concept notes: Sharing personal information online can pose security risks. It is important to distinguish between information that is safe to share and information that could compromise your privacy or security.

Common Mistakes: A common mistake is sharing sensitive information such as passwords, birthdays, or school names online, which can be used for identity theft or other malicious activities.

Explanations: Your favorite sport is a piece of information that does not compromise your personal security. It is safe to share online without risking your privacy or identity. Other options like your birthday, password, or school name can be used by malicious actors to gain unauthorized access to your accounts or personal information.

Option Analysis:

Option A: Your favorite sport is safe to share online as it does not reveal sensitive personal information.
Option B: Sharing your birthday online can be risky as it can be used to guess passwords or verify identity in security questions.
Option C: Sharing your password online is extremely dangerous as it can give others direct access to your accounts.
Option D: Sharing the name of your school can be risky as it can provide additional information that could be used in social engineering attacks.

5. What is DDoSing?

Correct Answer: Correct answer is: (A) A computer attack that uses a number of hosts to overwhelm a server, causing a complete system crash.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: DDoS stands for Distributed Denial of Service. It is a type of cyber attack where multiple compromised computer systems attack a target, such as a server, website, or other network resource, causing it to become inaccessible to legitimate users.

Common Mistakes: A common misunderstanding is that DDoS attacks are the same as DoS (Denial of Service) attacks. While both aim to disrupt services, DDoS attacks use multiple sources, making them more difficult to mitigate.

Explanations: DDoS attacks involve multiple compromised systems, often referred to as a botnet, which are used to flood the target with traffic. This overwhelming amount of traffic can cause the server to crash or become unresponsive, effectively denying service to legitimate users. The use of multiple hosts makes DDoS attacks more challenging to defend against compared to a single-source DoS attack.

Option Analysis:

Option A: Correct. This accurately describes a DDoS attack, where multiple hosts are used to overwhelm a server.
Option B: Incorrect. This describes a virus, which is a type of malware that can replicate and spread, but does not specifically describe a DDoS attack.
Option C: Incorrect. This describes a type of malware known as a Trojan, which can allow remote control of a computer, but is not related to DDoS attacks.
Option D: Incorrect. This describes a backdoor, which is a method for bypassing normal authentication, but is not related to DDoS attacks.

Mnemonic: DDoS: Distributed Denial of Service

6. Which of the following refers to an ethical computer hacker, or a computer security expert?

Correct Answer: Correct answer is: (A) White Hat Hacker.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Easy

Concept notes: In cyber security, a white hat hacker is an ethical computer hacker or security expert who is employed to find and fix security vulnerabilities in a system.

Common Mistakes: A common misunderstanding is that all hackers are malicious. However, white hat hackers are specifically hired to improve security, not to cause harm.

Explanations: White hat hackers are ethical professionals who use their skills to identify and mitigate security vulnerabilities. They work within legal and ethical boundaries to enhance the security of computer systems and networks.

Option Analysis:

Option A: Correct. White Hat Hackers are ethical hackers who work to improve security.
Option B: Incorrect. Grey Hat Hackers operate in a grey area, sometimes performing unauthorized activities.
Option C: Incorrect. Blue Hat Hackers typically refer to individuals who are invited to test a system's security, but the term is less commonly used and can vary in meaning.
Option D: Incorrect. The correct answer is provided in the options.

Mnemonic: White Hat: "W" for "Wholesome" and "W" for "White" - think of them as the "good guys" in cybersecurity.

7. The goal of a ..... is to bring down a web server by overloading it with access requests

Correct Answer: Correct answer is: (A) Dos attack.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A DoS (Denial of Service) attack aims to make a web server unavailable by overwhelming it with traffic.

Common Mistakes: A common mistake is confusing a DoS attack with other types of cyber attacks, such as malware or spyware.

Explanations: A DoS attack is designed to flood a web server with a large number of access requests, causing it to become unresponsive or crash. This makes the server unavailable to legitimate users. The goal is to disrupt the normal functioning of the server by overloading its resources.

Option Analysis:

Option A: Correct. A DoS attack aims to bring down a web server by overloading it with access requests.
Option B: Incorrect. Malicious Spyware is software designed to gather information without the user's consent, not to overload a server.
Option C: Incorrect. A Rootkit is a type of malware designed to gain unauthorized access to a computer, not to overload a server.
Option D: Incorrect. Scareware is software designed to trick users into buying unnecessary security software, not to overload a server.

Mnemonic: DoS: "Drown the Server"

8. What is a potential risk associated with ICT?

Correct Answer: Correct answer is: (B) Increased privacy concerns.

Exam Relevance: CISSP, CISM, CompTIA Security+

Difficulty: Moderate

Concept notes: Information and Communication Technology (ICT) can lead to increased privacy concerns due to the vast amount of personal data that is collected, stored, and transmitted through digital systems.

Common Mistakes: A common misunderstanding is that ICT only improves data security and access to information, without considering the potential risks to privacy.

Explanations: ICT systems often involve the collection and storage of personal data, which can be vulnerable to unauthorized access, breaches, and misuse. This can lead to increased privacy concerns as individuals may be worried about their personal information being exposed or misused. Improved data security and greater access to information are benefits of ICT, but they do not address the potential risks to privacy.

Option Analysis:

Option A: Improved data security is a benefit of ICT, not a risk.
Option B: Increased privacy concerns is a potential risk associated with ICT.
Option C: Enhanced job security is not directly related to the risks of ICT.
Option D: Greater access to information is a benefit of ICT, not a risk.

9. Which of the following actions is NOT considered to be a computer crime?

Correct Answer: Correct answer is: (A) Encryption.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Encryption is a legal method to protect data and is not considered a computer crime.

Common Mistakes: A common misunderstanding is that encryption might be illegal or associated with criminal activities.

Explanations: Encryption is the process of converting information into a code to prevent unauthorized access. It is a legal and widely used method to protect data and is not considered a computer crime. Piracy, industrial espionage, and hacking are all illegal activities that involve unauthorized access to or theft of information, and are considered computer crimes.

Option Analysis:

Option A: Encryption is a legal method to protect data and is not considered a computer crime.
Option B: Piracy involves unauthorized copying and distribution of copyrighted material, which is illegal.
Option C: Industrial espionage involves stealing trade secrets or confidential information from a business, which is illegal.
Option D: Hacking involves unauthorized access to computer systems, which is illegal.

10. Which encrypts files on your system's hard drive and sometimes on shared network drives, USB drives, external hard drives etc.,

Correct Answer: Correct answer is: (D) Encryption Ransomware.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Encryption Ransomware is a type of malware that encrypts files on a victim's system, including hard drives, network drives, USB drives, and external hard drives, making them inaccessible until a ransom is paid.

Common Mistakes: A common misunderstanding is that all ransomware locks the screen, but encryption ransomware specifically targets and encrypts files.

Explanations: Encryption Ransomware targets and encrypts files on the victim's system, including hard drives, network drives, USB drives, and external hard drives. This type of ransomware makes the files inaccessible until a ransom is paid, often in cryptocurrency. The other options do not specifically target and encrypt files in the same manner.

Option Analysis:

Option A: Computer Worms are self-replicating malware that spread across networks, but they do not specifically encrypt files.
Option B: Malicious Spyware is designed to gather information from a user's system without their knowledge, but it does not encrypt files.
Option C: Lock Screen Ransomware locks the user out of their device by displaying a message demanding a ransom, but it does not encrypt files.
Option D: Encryption Ransomware specifically targets and encrypts files on the victim's system, making them inaccessible until a ransom is paid.

Frequently Asked Questions

What is a DDoS attack?

A DDoS (Distributed Denial of Service) attack is a cyber attack where multiple compromised systems overwhelm a target's web server with traffic, causing it to crash or become inaccessible.

How does encryption protect personal information?

Encryption converts personal information into a coded format that can only be accessed with a decryption key, ensuring that even if data is intercepted, it remains unreadable to unauthorized users.

What is ransomware and how does it work?

Ransomware is a type of malware that encrypts a victim's files, making them inaccessible, and demands a ransom payment in exchange for the decryption key.

What is the role of an ethical hacker?

An ethical hacker, also known as a white hat hacker, is a cybersecurity professional who legally tests and identifies vulnerabilities in systems to improve security and prevent cyber attacks.

How can browsing habits affect online safety?

Browsing habits can expose users to various cyber threats, such as malware and phishing attacks, if they visit unsecured websites or download suspicious files.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books