🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 5 (10 MCQs)

This set of multiple-choice questions evaluates understanding of DDoS attacks, ICMP exploitation, broadcast address, DNS security, and cyber attacks. It tests knowledge on data manipulation, file type security, malware risks, Layer 2 security, ARP manipulation, network traffic interception, MITM attack principles, session hijacking, unauthorized access, and data tampering. The questions also cover drive-by-download attacks, types of cyber attacks, malware distribution methods, and ethical use of ICT.

Quiz Instructions

Select an option to see the correct answer instantly.

1. What type of attack describes malicious JavaScript, which redirects an unsuspecting user to download malware from a remote website?

Correct Answer: Correct answer is: (A) Drive-by-download.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Drive-by-download attacks occur when a user visits a malicious website that automatically downloads and installs malware on their device without their knowledge or consent.

Common Mistakes: A common misunderstanding is that drive-by-download attacks require user interaction, such as clicking on a link or downloading a file. However, these attacks can occur simply by visiting a compromised website.

Explanations: Drive-by-download attacks involve malicious JavaScript that redirects users to download malware from a remote website. This type of attack does not require user interaction beyond visiting the compromised site, making it a form of drive-by-download.

Option Analysis:

Option A: Correct. Drive-by-download attacks involve malicious JavaScript that redirects users to download malware without their knowledge.
Option B: Incorrect. Session hijacking involves stealing a user's session ID to gain unauthorized access to their account.
Option C: Incorrect. SQL injection involves inserting malicious SQL statements into a database to manipulate or extract data.
Option D: Incorrect. Denial of service attacks aim to make a service unavailable by overwhelming it with traffic.

Mnemonic: Drive-by-download: "Drive-by" for "Drive-by-download."

2. Modifying data in a Domain Name System (DNS) server so that calls to particular Websites or even entire domains are misdirected for fraudulent purposes is termed as .....

Correct Answer: Correct answer is: (A) DNS cache poisoning.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: DNS cache poisoning involves altering DNS server data to misdirect users to fraudulent websites.

Common Mistakes: A common misunderstanding is confusing DNS cache poisoning with phishing, which involves deceptive emails or websites rather than DNS manipulation.

Explanations: DNS cache poisoning is a cyber attack where the attacker modifies the DNS server data so that requests to specific websites or domains are redirected to malicious sites. This misdirection can lead to users accessing fraudulent websites without realizing it, making DNS cache poisoning a significant threat in cybersecurity.

Option Analysis:

Option A: Correct. DNS cache poisoning involves altering DNS server data to misdirect users to fraudulent websites.
Option B: Incorrect. Phishing involves deceptive emails or websites designed to trick users into providing sensitive information, not DNS manipulation.
Option C: Incorrect. This option is not applicable as DNS cache poisoning is a valid and specific cybersecurity threat.
Option D: Incorrect. This option is not applicable as DNS cache poisoning is the correct term for the described attack.

3. "A person who uses computer expertise to gain unauthorized access to a computer, and then misuses or tampers the programs and data stored on the computer"

Correct Answer: Correct answer is: (B) Hacker.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A hacker is an individual who uses computer expertise to gain unauthorized access to a computer system and may misuse or tamper with the programs and data stored on the computer.

Common Mistakes: A common misunderstanding is that all hackers are malicious. However, some hackers use their skills for ethical purposes, such as security testing and vulnerability assessment.

Explanations: The term "hacker" specifically refers to someone who gains unauthorized access to a computer system. This aligns with the description provided in the question, which mentions unauthorized access and misuse of programs and data.

Option Analysis:

Option A: A conductor is not related to computer security and typically refers to someone who directs an orchestra or leads a train.
Option B: A hacker fits the description given in the question, as they use computer expertise to gain unauthorized access and may misuse or tamper with data.
Option C: A firewall is a security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It is not a person.
Option D: A nice guy is a general term for a friendly and kind person and is not related to computer security.

4. What is the key to the success of an MITM attack?

Correct Answer: Correct answer is: (C) The attacker waits until after a communication session is established.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: In a Man-in-the-Middle (MITM) attack, the attacker positions themselves between two parties to intercept and possibly alter their communication. The key to the success of an MITM attack is the ability to intercept and manipulate the communication after the initial session has been established, ensuring that both parties believe they are communicating directly with each other.

Common Mistakes: A common misunderstanding is that the attacker needs to overwhelm the system with traffic or exploit bugs to succeed. However, the core of a MITM attack is the interception and manipulation of ongoing communication.

Explanations: The success of a MITM attack relies on the attacker's ability to intercept and manipulate the communication after the initial session is established. This allows the attacker to remain undetected while intercepting and possibly altering the data exchanged between the two parties. The attacker does not need to overwhelm the system or exploit bugs to achieve this; instead, they focus on positioning themselves in the middle of the communication channel.

Option Analysis:

Option A: This option refers to packet flooding, which is a form of denial-of-service attack, not a MITM attack.
Option B: Exploiting TCP/IP bugs to crash older operating systems is a different type of attack, not a MITM attack.
Option C: This is the correct answer. The attacker waits until after a communication session is established to intercept and manipulate the data.
Option D: Packet flooding consumes resources and is a denial-of-service attack, not a MITM attack.

Mnemonic: MITM: Middle Intercept, Then Manipulate

5. What is a good way to describe safe, responsible and ethical use of ICT?

Correct Answer: Correct answer is: (C) A framework of responsibilities you accept when using the internet that keep you and other safe.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: Safe, responsible, and ethical use of ICT involves a set of guidelines and responsibilities that ensure the security and well-being of all users.

Common Mistakes: A common misunderstanding is that safe use of ICT is limited to avoiding harmful content or not being mean to others, which is too narrow a view.

Explanations: The correct answer describes a comprehensive framework of responsibilities that encompasses various aspects of safe, responsible, and ethical use of ICT. This includes not only avoiding harmful content and being respectful to others but also adhering to broader principles that ensure the security and well-being of all users.

Option Analysis:

Option A: This option is too narrow, focusing only on staying safe and not being mean, which does not cover the full scope of responsible ICT use.
Option B: Posting memes is not directly related to safe, responsible, and ethical use of ICT.
Option C: This option correctly describes a framework of responsibilities that encompasses various aspects of safe, responsible, and ethical use of ICT.
Option D: Posting photos to make others jealous is not related to safe, responsible, and ethical use of ICT.

6. What is the most suspicious format of data that is better not to install on our phone if someone send it?

Correct Answer: Correct answer is: (D) .apk.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: In cyber security, .apk files are Android application packages. These files can contain malicious software that can harm your device or steal personal information.

Common Mistakes: A common misunderstanding is that all file types are equally safe. However, .apk files are executable and can pose significant risks if from an untrusted source.

Explanations: The .apk file format is used for Android applications. Installing an .apk file from an untrusted source can lead to the installation of malware, which can compromise the security of your device. Other file types like .png, .mp3, and .pdf are generally safer as they are not executable and do not have the capability to run code on your device.

Option Analysis:

Option A: .png files are image files and are not executable, making them generally safe to install or open.
Option B: .mp3 files are audio files and are not executable, making them generally safe to install or open.
Option C: .pdf files are document files and are not executable, making them generally safe to install or open.
Option D: .apk files are Android application packages and are executable, making them potentially dangerous if from an untrusted source.

7. A Layer 2 redirect or spoofing attack can be referred to as what type of attack?

Correct Answer: Correct answer is: (A) ARP attack.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: A Layer 2 redirect or spoofing attack involves manipulating network traffic at the data link layer (Layer 2) to redirect or intercept traffic. ARP (Address Resolution Protocol) attacks are a common form of Layer 2 attack where an attacker sends false ARP messages to associate the attacker's MAC address with the IP address of another host, thereby redirecting traffic intended for that host to the attacker.

Common Mistakes: A common misunderstanding is that Layer 2 attacks are limited to ARP attacks only, when in fact there are other types of Layer 2 attacks such as MAC flooding and VLAN hopping.

Explanations: ARP attacks are a form of Layer 2 redirect or spoofing attack because they manipulate ARP messages to redirect traffic. By sending false ARP messages, an attacker can associate their MAC address with the IP address of a legitimate host, causing network traffic intended for that host to be redirected to the attacker's machine. This allows the attacker to intercept, modify, or drop the traffic.

Option Analysis:

Option A: ARP attack is correct because it involves manipulating ARP messages to redirect traffic at Layer 2.
Option B: DHCP attack involves manipulating DHCP messages, which is not a Layer 2 redirect or spoofing attack.
Option C: NetBios attack is related to network naming services and is not a Layer 2 attack.
Option D: SSID attack involves manipulating wireless network identifiers and is not a Layer 2 redirect or spoofing attack.

Mnemonic: ARP: Attack Redirects Packets

8. What is cyber security?

Correct Answer: Correct answer is: (A) Is the protection of computer systems from the theft of or damage to their hardware, software, or electronic data.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Cyber security is the practice of protecting computer systems from unauthorized access, theft, or damage to their hardware, software, or electronic data.

Common Mistakes: A common misunderstanding is that cyber security only involves protecting data, but it also includes safeguarding hardware and software.

Explanations: Cyber security encompasses the measures taken to protect computer systems from unauthorized access, theft, or damage to their hardware, software, or electronic data. This includes various practices such as implementing firewalls, using encryption, and maintaining secure networks to prevent cyber threats.

Option Analysis:

Option A: Correct. This option accurately defines cyber security as the protection of computer systems from theft or damage to their hardware, software, or electronic data.
Option B: Incorrect. This describes a person utilizing information technology in society, politics, and government, which is not the definition of cyber security.
Option C: Incorrect. This refers to the layout and communication of a network, which is related to network topology, not cyber security.
Option D: Incorrect. This describes a fully connected network topology, which is unrelated to the concept of cyber security.

9. What information is okay to give out on the internet?A) NameB) AddressC) Phone NumberD) None of the above

Correct Answer: Correct answer is: (D) None of the above

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: In cyber security, it is crucial to protect personal information from unauthorized access. Sharing personal details such as name, address, and phone number can lead to identity theft, fraud, and other cyber threats.

Common Mistakes: A common misunderstanding is that sharing certain personal information, like a name, is harmless. However, even seemingly innocuous information can be used in combination with other data to compromise one's security.

Explanations: In the context of cyber security, it is generally advised not to share any personal information online, including name, address, and phone number. This is because such information can be used by cybercriminals to commit identity theft, fraud, and other malicious activities. Therefore, the safest option is to not share any personal information on the internet.

Option Analysis:

Option A: Sharing a name can still pose a risk as it can be used in conjunction with other information to identify an individual.
Option B: Sharing an address is highly risky as it can lead to physical and cyber threats, such as home invasion or targeted phishing attacks.
Option C: Sharing a phone number can lead to骚扰电话，诈骗和其他形式的网络犯罪。
Option D: 这是正确的答案，因为在网络安全的背景下，不分享任何个人信息是最安全的做法。

Mnemonic: None Share, Stay Safe

10. A ping attack that exploits the broadcast IP address in a subnet is referred to as what type of attack?

Correct Answer: Correct answer is: (C) Smurf.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: A Smurf attack is a type of Distributed Denial of Service (DDoS) attack that exploits the broadcast IP address in a subnet to amplify the attack traffic.

Common Mistakes: A common misunderstanding is confusing the Smurf attack with other types of DDoS attacks, such as SYN flood or Fraggle attacks, which have different mechanisms.

Explanations: A Smurf attack works by sending ICMP echo requests (ping requests) to the broadcast address of a network, with the source address spoofed to be the victim's IP address. This causes all the hosts on the network to respond to the victim, overwhelming it with traffic. This type of attack is specifically designed to exploit broadcast IP addresses, making it distinct from other DDoS attacks.

Option Analysis:

Option A: Red rat is not a recognized term in cybersecurity for this type of attack.
Option B: Fraggle attack is similar to a Smurf attack but uses UDP instead of ICMP.
Option C: Smurf attack is the correct term for an attack that exploits the broadcast IP address in a subnet using ICMP.
Option D: SYN flood is a different type of DDoS attack that exploits the TCP three-way handshake.

Mnemonic: Sneaky Smurf Sends Spoofed Pings

Frequently Asked Questions

What is the main focus of the cyber security section?

The main focus of the cyber security section is to understand the various threats and measures to protect data and systems from unauthorized access and malicious activities.

How does ARP spoofing fit into the broader context of cyber security?

ARP spoofing is a type of Layer 2 attack that can be used to intercept communication between devices on a network, making it a significant threat in the realm of cyber security.

What is the importance of data protection in cyber security?

Data protection is crucial in cyber security as it ensures that sensitive information is safeguarded from unauthorized access, tampering, and theft, thereby maintaining the integrity and confidentiality of data.

How can mobile devices be protected from malware?

Mobile devices can be protected from malware by avoiding the installation of APK files from untrusted sources, keeping the operating system and apps updated, and using reputable security software.

What is a Smurf attack and how does it work?

A Smurf attack is a type of denial-of-service attack that uses ICMP echo requests to flood a network with traffic, overwhelming it and causing a denial of service.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books