🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 7 (10 MCQs)

This set of multiple-choice questions evaluates understanding of digital evidence analysis, legal admissibility, data recovery techniques, network security, threat detection, and IDS functionality. It covers concepts such as DDoS attacks, session hijacking, cyber attack types, cybersecurity best practices, encryption basics, and password security.

Quiz Instructions

Select an option to see the correct answer instantly.

1. Which of the following password is safe to be used for your account?

Correct Answer: Correct answer is: (A) 9#Rt$ 3Lm&7.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: A strong password should include a mix of uppercase and lowercase letters, numbers, and special characters. It should also be long enough to be difficult to guess or crack.

Common Mistakes: A common mistake is choosing a password that is easy to remember but also easy to guess, such as using common words, sequences, or personal information.

Explanations: The password 9#Rt$ 3Lm&7. is safe because it includes a mix of uppercase and lowercase letters, numbers, and special characters. It is also sufficiently long to make it difficult for an attacker to guess or crack using brute force methods.

Option Analysis:

Option A: 9#Rt$ 3Lm&7. is a strong password due to its mix of characters and length.
Option B: Password123. is weak because it uses a common word and a simple number sequence.
Option C: 12345678. is weak because it is a simple numerical sequence.
Option D: Yourname1980. is weak because it uses personal information, which can be easily guessed.

2. What do you call a device or program which monitors network traffic to prevent attacks?

Correct Answer: Correct answer is: (A) Firewall.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A firewall is a device or program that monitors and controls network traffic to prevent unauthorized access and attacks.

Common Mistakes: A common misunderstanding is that spam, trojans, and logic bombs are devices or programs that monitor network traffic, but they are actually types of cyber threats rather than protective measures.

Explanations: A firewall is designed to monitor and control network traffic based on predetermined security rules. It acts as a barrier between trusted and untrusted networks, preventing unauthorized access and attacks. Spam, trojans, and logic bombs are types of cyber threats rather than protective measures.

Option Analysis:

Option A: Correct. A firewall monitors and controls network traffic to prevent attacks.
Option B: Incorrect. Spam refers to unsolicited messages, not a device or program that monitors network traffic.
Option C: Incorrect. A trojan is a type of malware, not a device or program that monitors network traffic.
Option D: Incorrect. A logic bomb is a piece of code that executes a malicious action when certain conditions are met, not a device or program that monitors network traffic.

3. What type of IP attack occurs when an attacker inserts itself into a communication session and then takes over the session?

Correct Answer: Correct answer is: (B) Session hijacking.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: Session hijacking is a type of cyber attack where an attacker takes over a communication session between two parties.

Common Mistakes: A common misunderstanding is that MAC address flooding or DHCP depletion attacks involve taking over a session, but they do not. These attacks are more focused on disrupting network services rather than hijacking sessions.

Explanations: Session hijacking occurs when an attacker inserts themselves into an existing communication session and takes control of it. This can be achieved by stealing session cookies, predicting session IDs, or other methods to gain unauthorized access to the session. The attacker can then use the session to perform actions as if they were the legitimate user.

Option Analysis:

Option A: MAC address flooding attack involves overwhelming a switch with fake MAC addresses, causing it to flood the network with broadcast traffic. This does not involve taking over a session.
Option B: Session hijacking involves an attacker inserting themselves into a communication session and taking over the session. This is the correct answer.
Option C: DHCP depletion attack involves exhausting the pool of available IP addresses in a network, preventing new devices from connecting. This does not involve taking over a session.
Option D: DoS attack involves overwhelming a system with traffic to make it unavailable. This does not involve taking over a session.

4. Internet-mediated attack accomplished by enlisting the services of many compromised systems to launch a denial of service (DoS) is termed as .....

Correct Answer: Correct answer is: (A) Distributed DoS attack.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: A Distributed Denial of Service (DDoS) attack is a type of cyber attack where multiple compromised systems are used to overwhelm a target system, causing it to become unavailable to legitimate users.

Common Mistakes: A common misunderstanding is that a DoS attack and a DDoS attack are the same. While both aim to disrupt services, a DDoS attack involves multiple compromised systems, whereas a DoS attack typically involves a single system.

Explanations: A Distributed Denial of Service (DDoS) attack is accomplished by enlisting the services of many compromised systems to launch a denial of service attack. This is different from a standard DoS attack, which typically involves a single system. The use of multiple compromised systems makes a DDoS attack more powerful and harder to mitigate.

Option Analysis:

Option A: Correct. A Distributed DoS attack involves multiple compromised systems.
Option B: Incorrect. Data Diddling refers to altering data in a system, not launching a denial of service attack.
Option C: Incorrect. Not all options are correct; only Option A is accurate.
Option D: Incorrect. There is a correct answer among the options provided.

Mnemonic: DDoS: Distributed Denial of Service

5. Your safety online is in:

Correct Answer: Correct answer is: (C) Your hands.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Cyber security is a personal responsibility. Individuals must take proactive measures to protect their online activities and data.

Common Mistakes: A common misunderstanding is that cyber security is solely the responsibility of external entities like governments or technology companies.

Explanations: In cyber security, the individual is the first line of defense. Practices such as using strong passwords, enabling two-factor authentication, and being cautious about sharing personal information are crucial. Relying solely on external entities for protection is not sufficient.

Option Analysis:

Option A: This option is incorrect because cyber security is not solely in the hands of a higher power.
Option B: This option is incorrect because while governments can provide guidelines and regulations, individual responsibility is paramount.
Option C: This option is correct because individuals must take active steps to protect their online safety.
Option D: This option is incorrect because "Sir's hands" is not a relevant or logical choice in the context of cyber security.

6. What is the purpose of using encryption in communication technology?

Correct Answer: Correct answer is: (B) To protect data from unauthorized access.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Encryption is a method of converting data into a secure format to prevent unauthorized access.

Common Mistakes: A common misunderstanding is that encryption is primarily used for data compression or to increase bandwidth, which is incorrect.

Explanations: Encryption is used to protect data from unauthorized access by converting it into a secure format that can only be decrypted with a specific key. This ensures that even if the data is intercepted, it cannot be read without the proper decryption key.

Option Analysis:

Option A: Encryption does not compress data; it secures it.
Option B: Correct. Encryption protects data from unauthorized access.
Option C: Encryption does not increase bandwidth; it secures data.
Option D: Encryption does not convert analog signals to digital; it secures data.

7. What two are triggers for an organization to perform a vulnerability assessment? (choose two)

Correct Answer: Correct answer is: (D) Only (A) & (B).

Exam Relevance: CISSP, CompTIA Security+, CISM

Difficulty: Moderate

Concept notes: A vulnerability assessment is a process used to identify, quantify, and prioritize vulnerabilities in an organization's systems and networks. Common triggers for performing a vulnerability assessment include the introduction of new technologies or software and the release of software or hardware updates.

Common Mistakes: A common misunderstanding is that high volumes of network traffic alone can trigger a vulnerability assessment. While increased traffic can indicate potential security issues, it is not a primary trigger for a vulnerability assessment.

Explanations: A vulnerability assessment is typically performed when new technologies or software are planned to be deployed (Option A) or when software or hardware updates are released (Option B). These events can introduce new vulnerabilities or change the existing security landscape, necessitating a reassessment. High volumes of network traffic (Option C) do not directly trigger a vulnerability assessment, as they are more indicative of operational issues rather than security vulnerabilities.

Option Analysis:

Option A: Correct. New technologies or software can introduce new vulnerabilities, necessitating a vulnerability assessment.
Option B: Correct. Software or hardware updates can change the security posture, requiring a reassessment.
Option C: Incorrect. High volumes of network traffic do not directly trigger a vulnerability assessment.
Option D: Correct. Only Options A and B are valid triggers for a vulnerability assessment.

8. What can an IDS prevent?

Correct Answer: Correct answer is: (D) Nothing.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: An Intrusion Detection System (IDS) is designed to monitor network traffic and system activities for suspicious behavior or known attack patterns. However, an IDS does not actively prevent or block attacks; it primarily detects and alerts on potential threats.

Common Mistakes: A common misunderstanding is that an IDS can prevent attacks. In reality, an IDS is a detection tool, not a prevention tool. Prevention is typically handled by other security measures such as firewalls or Intrusion Prevention Systems (IPS).

Explanations: An IDS is designed to detect and alert on potential security threats but does not actively prevent or block them. Therefore, the correct answer is that an IDS cannot prevent anything. It can only detect and report on suspicious activities.

Option Analysis:

Option A: An IDS can detect viruses but cannot prevent them. Prevention is typically handled by antivirus software or firewalls.
Option B: Fire is a physical threat and not within the scope of an IDS, which focuses on digital threats.
Option C: An IDS can detect worms but cannot prevent them. Prevention is typically handled by firewalls or other security measures.
Option D: An IDS is a detection tool and does not prevent any threats. This is the correct answer.

9. How can you enhance online banking security?

Correct Answer: Correct answer is: (D) Implement multi-factor authentication, use strong and unique passwords, regularly update security software, avoid public Wi-Fi for banking transactions, and be cautious of phishing scams.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: Online banking security involves multiple layers of protection to safeguard personal and financial information from cyber threats.

Common Mistakes: A common mistake is to overlook the importance of multi-factor authentication and the risks associated with using public Wi-Fi for sensitive transactions.

Explanations: Multi-factor authentication adds an additional layer of security by requiring more than one method of verification. Strong and unique passwords are essential to prevent unauthorized access. Regularly updating security software helps protect against the latest threats. Public Wi-Fi networks are often insecure, making them unsuitable for banking transactions. Being cautious of phishing scams helps prevent falling victim to fraudulent attempts to obtain sensitive information.

Option Analysis:

Option A: Clicking on suspicious links in emails can lead to malware infections or phishing attacks, compromising online banking security.
Option B: Sharing passwords with others increases the risk of unauthorized access to your accounts.
Option C: Using the same password for multiple accounts can lead to a domino effect if one account is compromised.
Option D: This option includes a comprehensive set of best practices for enhancing online banking security.

10. The ability to recover and read deleted or damaged files from a criminal's computer is an example of a law enforcement speciality called .....?

Correct Answer: Correct answer is: (C) Computer forensics.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: Computer forensics is the practice of collecting, analyzing, and reporting on digital information in a way that is legally admissible. It involves recovering and examining data from digital devices to support investigations.

Common Mistakes: A common misunderstanding is that computer forensics is only about recovering deleted files, but it encompasses a broader range of activities including analyzing system logs, network traffic, and other digital evidence.

Explanations: Computer forensics is the correct answer because it specifically deals with the recovery and analysis of digital data, including deleted or damaged files, to support legal investigations. This field is crucial in cyber security for gathering evidence from digital devices.

Option Analysis:

Option A: Robotics is the branch of technology that deals with the design, construction, operation, and application of robots, which is unrelated to the recovery of digital files.
Option B: Simulation involves creating models to mimic real-world scenarios, which is not directly related to the recovery of digital files.
Option C: Computer forensics is the correct answer as it involves the recovery and analysis of digital data, including deleted or damaged files, to support legal investigations.
Option D: Animation is the process of creating moving images, which is unrelated to the recovery of digital files.

Frequently Asked Questions

What is a DDoS attack?

A DDoS attack, or Distributed Denial of Service attack, is a cyber attack where multiple compromised systems flood the target with traffic to overwhelm it and make it unavailable to legitimate users.

How does an Intrusion Detection System (IDS) work?

An IDS monitors network traffic and system activity for suspicious behavior or known attack patterns. When it detects a potential threat, it alerts administrators so they can take action.

What is session hijacking?

Session hijacking is a type of cyber attack where an attacker takes over a user's communication session, allowing them to impersonate the user and access sensitive information.

Why is multi-factor authentication important for online safety?

Multi-factor authentication adds an extra layer of security by requiring more than one method of authentication, making it harder for unauthorized users to gain access to accounts.

What is the role of encryption in data security?

Encryption converts data into a secure format that can only be accessed with a decryption key, protecting it from unauthorized access and ensuring privacy.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books