🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 6 (10 MCQs)

This set of multiple-choice questions evaluates understanding of human verification, automated bot detection, and related cybersecurity concepts. It covers cyber attack types, network security, and online protection advice. Topics include CAPTCHA, DDoS attacks, and ethical hacking. The questions test technical expertise in system experimentation, security testing, and risk awareness.

Quiz Instructions

Select an option to see the correct answer instantly.

1. What is the term for a digital attack that overwhelms a system with traffic to make it unavailable?

Correct Answer: Correct answer is: (C) DDoS.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: A DDoS (Distributed Denial of Service) attack is a type of cyber attack where multiple compromised computer systems attack a target, such as a server, website, or other network resource, with the aim of overwhelming it with traffic and making it unavailable to legitimate users.

Common Mistakes: A common misunderstanding is confusing DDoS with other types of attacks like malware or phishing, which have different mechanisms and objectives.

Explanations: DDoS attacks are designed to flood a system with traffic, making it unavailable to users. This is distinct from other types of attacks like malware, which aims to infect and control systems, or phishing, which attempts to trick users into revealing sensitive information.

Option Analysis:

Option A: Spyware is software designed to collect information from a user's device without their knowledge, not to overwhelm a system with traffic.
Option B: Malware is a broader term for malicious software that includes spyware, viruses, and ransomware, but it does not specifically refer to overwhelming a system with traffic.
Option C: DDoS is the correct term for an attack that floods a system with traffic to make it unavailable.
Option D: Phishing is a social engineering attack that tricks users into providing sensitive information, not an attack that floods a system with traffic.

Mnemonic: DDoS: "Drown Down Service"

2. An illegal activity committed on the internet is called .....

Correct Answer: Correct answer is: (B) Cyber crime.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Easy

Concept notes: Cyber crime refers to illegal activities conducted through the internet or other digital means.

Common Mistakes: A common mistake is confusing cyber crime with other internet-related terms like viruses or search engines.

Explanations: Cyber crime is the correct term for illegal activities committed on the internet. It encompasses a wide range of illegal activities including hacking, identity theft, and online fraud.

Option Analysis:

Option A: Virus is a type of malicious software, not an illegal activity itself.
Option B: Cyber crime is the correct term for illegal activities conducted through the internet.
Option C: Search engine is a tool for finding information on the internet, not an illegal activity.
Option D: Social networking is a platform for communication and sharing, not an illegal activity.

3. Where can you find ideas on how to protect your information online?

Correct Answer: Correct answer is: (D) Security Catalyst.

Exam Relevance: CISSP, CompTIA Security+, CISM

Difficulty: Moderate

Concept notes: Security Catalyst is a reputable source for cybersecurity information and best practices.

Common Mistakes: A common mistake is assuming popular social media or web platforms like Facebook, AOL, or Google are the best sources for cybersecurity advice.

Explanations: Security Catalyst is a well-known organization that provides cybersecurity resources, including advice on protecting information online. It is specifically focused on cybersecurity, making it a reliable source for such information. In contrast, options like Facebook, AOL, and Google are general platforms and may not provide specialized cybersecurity advice.

Option Analysis:

Option A: Facebook is a social media platform and not a specialized cybersecurity resource.
Option B: AOL is an internet service provider and not a specialized cybersecurity resource.
Option C: Google is a search engine and not a specialized cybersecurity resource.
Option D: Security Catalyst is a specialized cybersecurity organization that provides resources and advice on protecting information online.

4. A person with technical expertise who experiments with computer systems to determine how to develop additional features. Hackers are occasionally requested by system administrators to try and break into systems via a network to test security. The term hacker is sometimes incorrectly used interchangeably with cracker. A hacker is called a white hat and a cracker a black hat.

Correct Answer: Correct answer is: (A) Hacker.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Easy

Concept notes: A hacker is a person with technical expertise who experiments with computer systems to determine how to develop additional features. Hackers are sometimes requested by system administrators to test security by attempting to break into systems via a network.

Common Mistakes: A common misunderstanding is that all hackers are malicious. However, hackers can be categorized as white hats (ethical hackers) or black hats (malicious hackers or crackers).

Explanations: The term hacker refers to a person with technical expertise who experiments with computer systems to develop additional features. Hackers are occasionally requested by system administrators to test security by attempting to break into systems via a network. The term hacker is sometimes incorrectly used interchangeably with cracker, but a hacker is called a white hat and a cracker a black hat.

Option Analysis:

Option A: Correct. A hacker is a person with technical expertise who experiments with computer systems to determine how to develop additional features.
Option B: Incorrect. A hard copy refers to a printed version of a document, not a person with technical expertise.
Option C: Incorrect. A PC board is a printed circuit board used in computers, not a person with technical expertise.
Option D: Incorrect. The correct answer is provided in the options.

5. Chapter 6 talks about digital safety in schools and how we must monitor this. Which of the following is NOT a great digital safety tip for younger learners? (Nelson and Latorre, 2022)

Correct Answer: Correct answer is: (B) Encourage young learners to share their personal information in online forums.

Exam Relevance: CEH, CISSP, CompTIA Security+

Difficulty: Easy

Concept notes: Sharing personal information online can lead to identity theft, cyberbullying, and other security risks. It is crucial to educate young learners about the importance of keeping their personal information private.

Common Mistakes: A common misunderstanding is that sharing personal information online is harmless or even beneficial for social connections. However, this can expose young learners to significant risks.

Explanations: Encouraging young learners to share their personal information in online forums is not a safe practice. Personal information such as full name, address, phone number, and school details can be used by malicious actors to harm the learner. Therefore, it is essential to teach young learners to protect their personal information online.

Option Analysis:

Option A: Avoiding random friend requests on social media is a good practice to prevent exposure to potential threats.
Option B: Encouraging young learners to share personal information in online forums is not a safe practice and can lead to various security risks.
Option C: Creating an account for a site if under the age of thirteen is generally not recommended due to privacy and safety concerns.
Option D: Being careful when meeting with strangers is a fundamental safety tip to prevent potential dangers.

6. The type of test used in computing to check whether or not the user is a human:

Correct Answer: Correct answer is: (C) CAPTCHA.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: CAPTCHA stands for "Completely Automated Public Turing test to tell Computers and Humans Apart." It is used to ensure that the user interacting with a website is a human and not an automated bot.

Common Mistakes: A common mistake is confusing CAPTCHA with other security measures like debugging or black box testing, which are not designed to distinguish between human and machine interactions.

Explanations: CAPTCHA is specifically designed to verify that the user is human. It typically involves tasks that are easy for humans but difficult for automated bots, such as recognizing distorted text, identifying images, or solving simple puzzles. This makes CAPTCHA the correct choice for the given question.

Option Analysis:

Option A: Debugging is the process of finding and resolving bugs or errors in software, not a test to distinguish between humans and machines.
Option B: Cryptanalysis is the study of analyzing information systems in order to study the hidden aspects of the systems, not a test to distinguish between humans and machines.
Option C: CAPTCHA is a test designed to distinguish between human and machine interactions, making it the correct answer.
Option D: Black Box Testing is a method of software testing that examines the functionality of an application without peering into its internal structures, not a test to distinguish between humans and machines.

7. Network forensics means .....

Correct Answer: Correct answer is: (A) Logging network traffic so that if there is a security breach the source can be found.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Easy

Concept notes: Network forensics involves the monitoring and analysis of network traffic to identify and investigate security breaches.

Common Mistakes: A common misunderstanding is that network forensics is about preventing breaches, when it is actually about detecting and analyzing breaches after they occur.

Explanations: Network forensics is the process of capturing, recording, and analyzing network traffic to identify the source of a security breach. This involves logging network traffic so that if a breach occurs, the logs can be analyzed to trace the origin and extent of the breach. This is different from preventive measures like firewalls or antivirus software, which aim to stop breaches from happening in the first place.

Option Analysis:

Option A: Correct. Logging network traffic is a key component of network forensics, enabling the identification of the source of a security breach.
Option B: Incorrect. Using firewalls is a preventive measure, not a forensic technique.
Option C: Incorrect. Installing antivirus software is a preventive measure, not a forensic technique.
Option D: Incorrect. Analyzing a network policy for weaknesses is a preventive measure, not a forensic technique.

8. As a person working in internet banking environment, why you should be aware of the "Dictionary attack"?

Correct Answer: Correct answer is: (B) It is used to determine a password.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: A dictionary attack is a method of breaking into a system by trying to guess a password using a list of common words or phrases.

Common Mistakes: A common misunderstanding is that a dictionary attack is used to inject malware or steal credit card information directly. However, it is primarily used to determine passwords.

Explanations: A dictionary attack involves systematically trying a large number of common words, phrases, or combinations to guess a password. This method is particularly effective against weak passwords that are based on common words or phrases. In an internet banking environment, protecting against dictionary attacks is crucial to prevent unauthorized access to user accounts.

Option Analysis:

Option A: A dictionary attack is not used to inject worms or viruses; it is used to guess passwords.
Option B: A dictionary attack is used to determine a password by systematically trying common words and phrases.
Option C: A dictionary attack does not directly access customer accounts by determining other details; it focuses on guessing passwords.
Option D: A dictionary attack is not used for stealing information from credit cards; it is used to guess passwords.

9. If you think you got scammed or hacked, you should .....

Correct Answer: Correct answer is: (C) Change your passwords.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: Changing passwords is a crucial step in securing your accounts after a suspected hack or scam.

Common Mistakes: A common mistake is to assume that simply reporting the issue or changing the internet provider will resolve the problem.

Explanations: If you suspect that you have been scammed or hacked, changing your passwords is essential to prevent further unauthorized access to your accounts. This action helps to secure your personal information and mitigate the risk of ongoing cyber threats.

Option Analysis:

Option A: Emailing a teacher is not a direct action to secure your accounts. It may be useful for seeking advice but does not address the immediate security issue.
Option B: Getting a new internet provider does not directly address the security of your accounts. It may help in some cases but is not a primary step in securing your accounts.
Option C: Changing your passwords is a direct and effective action to secure your accounts and prevent further unauthorized access.
Option D: None of the above is incorrect because changing your passwords is a valid and necessary step.

10. What is cybercrime?

Correct Answer: Correct answer is: (B) Illegal activities carried out using computers or the internet.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Easy

Concept notes: Cybercrime refers to criminal activities that are committed using computers or the internet.

Common Mistakes: A common misunderstanding is that cybercrime only involves hacking or stealing data, but it encompasses a wide range of illegal activities.

Explanations: Cybercrime involves any illegal activity that uses a computer or the internet as a tool or target. This includes activities such as hacking, phishing, identity theft, and spreading malware. The correct answer, "Illegal activities carried out using computers or the internet," accurately defines cybercrime within the context of cybersecurity.

Option Analysis:

Option A: Legal use of the internet is not related to cybercrime, as cybercrime specifically involves illegal activities.
Option B: This is the correct definition of cybercrime, as it involves illegal activities using computers or the internet.
Option C: Playing video games online is a legal activity and does not constitute cybercrime.
Option D: Downloading movies for free may be illegal in some jurisdictions, but it is not a comprehensive definition of cybercrime.

Frequently Asked Questions

What is a DDoS attack?

A DDoS (Distributed Denial of Service) attack is a cyber attack where multiple compromised computer systems attack a target, such as a server, website, or other network resource, causing it to become inaccessible to legitimate users.

How can CAPTCHA help with automated bot detection?

CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) helps distinguish between human users and automated bots by presenting challenges that are easy for humans to solve but difficult for bots, thus enhancing security.

What is the role of a specialized cybersecurity organization?

A specialized cybersecurity organization focuses on protecting computer systems and networks from cyber attacks, providing expertise in areas such as threat detection, incident response, and security assessments.

What is network forensics?

Network forensics is the process of capturing, recording, and analyzing network events to identify the source of security breaches and intrusions, and to gather evidence for legal proceedings.

How can I protect my personal information online?

To protect your personal information online, use strong, unique passwords for different accounts, enable two-factor authentication, and be cautious about sharing personal details on public forums or websites.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books