🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Cyber Security Quiz 9 (10 MCQs)

This set of multiple-choice questions evaluates knowledge of network security, IP address manipulation, and various cyber attack techniques. It tests understanding of computer crime, illegal activities, ransomware types, malware behavior, and security measures such as multi-factor authentication and verification methods. The questions also cover automated security, human interaction, denial of service attacks, website security, and the functionality of cybersecurity software.

Quiz Instructions

Select an option to see the correct answer instantly.

1. What is an example of a reconnaissance attack tool that will cycle through all well-known ports to provide a complete list of all services that are running on the hosts?

Correct Answer: Correct answer is: (C) NMAP.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: NMAP (Network Mapper) is a powerful tool used for network discovery and security auditing. It can scan a range of IP addresses and ports to identify open services and vulnerabilities.

Common Mistakes: A common mistake is confusing NMAP with other network tools like Netuse or Ipconfig, which do not have the same scanning capabilities.

Explanations: NMAP is designed to cycle through all well-known ports to provide a comprehensive list of services running on hosts. This makes it an ideal tool for reconnaissance attacks, where the goal is to gather detailed information about a network's services and vulnerabilities.

Option Analysis:

Option A: Netuse is a command-line utility used to map network drives and does not perform port scanning.
Option B: Ipconfig is a command-line utility used to display and configure network interface settings and does not perform port scanning.
Option C: NMAP is a network scanning tool that can cycle through all well-known ports to identify services running on hosts.
Option D: Show run is a command used in network devices to display the current running configuration and does not perform port scanning.

Mnemonic: NMAP: Network Mapper for Port Scanning

2. A spyware and adware removal computer program is known as .....

Correct Answer: Correct answer is: (C) Spybot.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Spybot is a well-known software designed to detect and remove spyware and adware from computers.

Common Mistakes: A common mistake is confusing Spybot with other cybersecurity terms like rootkits or script kiddies, which have different functions.

Explanations: Spybot is specifically designed to identify and remove spyware and adware, which are types of malicious software that can track user activity and display unwanted advertisements. Rootkits and script kiddies are different types of threats and do not serve the same purpose as Spybot.

Option Analysis:

Option A: Rootkit is a type of malware designed to hide the existence of certain processes or programs from normal methods of detection. It is not a tool for removing spyware and adware.
Option B: Script Kiddie refers to an individual who uses scripts or programs developed by others to attack computer systems, often without understanding the underlying code. It is not a software tool for removing spyware and adware.
Option C: Spybot is a software tool specifically designed to detect and remove spyware and adware from computers.
Option D: This option is incorrect as Spybot is the correct answer.

3. When customers of a Web site are unable to access it due to a bombardment of fake traffic, it is known as .....

Correct Answer: Correct answer is: (C) A denial of service attack.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: A denial of service (DoS) attack is a cyber attack where the attacker floods a website with fake traffic, making it inaccessible to legitimate users.

Common Mistakes: A common misunderstanding is that a Trojan horse or cracking involves flooding a website with traffic, but these are different types of cyber attacks.

Explanations: A denial of service attack involves overwhelming a website with fake traffic, preventing legitimate users from accessing it. This matches the description given in the question. A Trojan horse is a type of malware that disguises itself as legitimate software, while cracking involves unauthorized access to systems or data. Therefore, the correct answer is a denial of service attack.

Option Analysis:

Option A: A Trojan horse is a type of malware that disguises itself as legitimate software to gain access to a system. It does not involve flooding a website with traffic.
Option B: Cracking involves unauthorized access to systems or data, not flooding a website with traffic.
Option C: A denial of service attack involves overwhelming a website with fake traffic, preventing legitimate users from accessing it. This matches the description given in the question.
Option D: This option is incorrect as the correct answer is provided in option C.

Mnemonic: DoS: Denial of Service, Drowning in Spam

4. What do you call the feature that checks you are not a robot?

Correct Answer: Correct answer is: (A) Captcha.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: A Captcha is a type of challenge-response test used in computing to determine whether the user is human.

Common Mistakes: A common misunderstanding is that "Tester" or "Prove" might be the correct term, but these are not specific to the context of verifying human interaction in cybersecurity.

Explanations: Captcha stands for "Completely Automated Public Turing test to tell Computers and Humans Apart." It is a security feature designed to prevent automated bots from performing actions that could be harmful, such as spamming or unauthorized access. The term "Captcha" is widely recognized and used in the field of cybersecurity to describe this specific type of verification.

Option Analysis:

Option A: Correct. Captcha is the correct term for the feature that checks if a user is a human.
Option B: Incorrect. "Tester" is a general term and not specific to the context of verifying human interaction.
Option C: Incorrect. "Prove" is a verb and not a specific term used in cybersecurity for this feature.
Option D: Incorrect. "Hoover" is unrelated to cybersecurity and does not describe the feature in question.

5. What is the term for a security measure that requires two forms of identification?

Correct Answer: Correct answer is: (A) Multi-Factor Authentication.

Exam Relevance: CISSP, CompTIA Security+, CISM

Difficulty: Easy

Concept notes: Multi-Factor Authentication (MFA) is a security measure that requires users to provide two or more verification factors to gain access to a resource.

Common Mistakes: A common misunderstanding is confusing Multi-Factor Authentication with Two-Step Verification, which is a specific type of MFA but not the only form.

Explanations: Multi-Factor Authentication (MFA) is the correct term for a security measure that requires two forms of identification. MFA enhances security by requiring multiple forms of verification, such as something the user knows (password), something the user has (smartphone), and something the user is (biometric data).

Option Analysis:

Option A: Correct. Multi-Factor Authentication requires two or more forms of identification.
Option B: Incorrect. Access Control refers to the mechanisms that allow or deny access to resources, but it does not specifically require multiple forms of identification.
Option C: Incorrect. Single Sign-On (SSO) allows users to access multiple applications with a single set of credentials, but it does not involve multiple forms of identification.
Option D: Incorrect. Two-Step Verification is a specific type of MFA but is not the general term for requiring two forms of identification.

6. Which displays an image that prevents you from accessing your computer?

Correct Answer: Correct answer is: (C) Lock Screen Ransomware.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Lock Screen Ransomware is a type of malware that locks the user out of their computer by displaying an image or message that prevents access until a ransom is paid.

Common Mistakes: A common mistake is confusing Lock Screen Ransomware with other types of ransomware, such as Encryption Ransomware, which encrypts files rather than locking the screen.

Explanations: Lock Screen Ransomware displays an image or message that prevents the user from accessing their computer. This type of ransomware typically locks the screen and demands a ransom to unlock it. Other types of malware, such as Computer Worms, Spyware, and Encryption Ransomware, do not specifically display an image to lock the screen.

Option Analysis:

Option A: Computer Worms are self-replicating malware that spread across networks, but they do not display an image to lock the screen.
Option B: Malicious Spyware is designed to gather information from the user's computer without their knowledge, but it does not display an image to lock the screen.
Option C: Lock Screen Ransomware displays an image or message that prevents the user from accessing their computer, making it the correct answer.
Option D: Encryption Ransomware encrypts files and demands a ransom for the decryption key, but it does not display an image to lock the screen.

7. What type of spoofing attack uses fake source IP addresses that are different than their real IP addresses?

Correct Answer: Correct answer is: (B) IP spoofing.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Moderate

Concept notes: IP spoofing is a technique where an attacker sends packets with a forged source IP address to hide their identity or impersonate another system.

Common Mistakes: A common misunderstanding is that MAC spoofing or name spoofing involves changing IP addresses, which is incorrect. These techniques involve different types of spoofing that do not alter the source IP address.

Explanations: IP spoofing involves sending packets with a fake source IP address that differs from the attacker's real IP address. This technique is used to hide the true origin of the packets and can be used in various attacks, such as denial-of-service attacks or to bypass security measures that rely on IP address validation.

Option Analysis:

Option A: MAC spoofing involves changing the MAC address of a network interface, not the IP address.
Option B: IP spoofing involves sending packets with a fake source IP address that differs from the attacker's real IP address.
Option C: Application spoofing involves mimicking legitimate applications or services, not altering IP addresses.
Option D: Name spoofing involves forging domain names or hostnames, not IP addresses.

Mnemonic: IP Spoof: Fake IP, Hide True IP

8. What is a hacker?

Correct Answer: Correct answer is: (B) A user who attempts unauthorized access to computer systems.

Exam Relevance: CISSP, CEH, CompTIA Security+

Difficulty: Easy

Concept notes: In the context of cyber security, a hacker is defined as an individual who attempts unauthorized access to computer systems, often with the intent to exploit vulnerabilities or cause harm.

Common Mistakes: A common misunderstanding is that a hacker is someone who creates web pages or uses a specific type of web browser. This confusion can arise because the term "hacker" is sometimes used colloquially to refer to skilled computer users, but in cyber security, it specifically refers to unauthorized access attempts.

Explanations: The term "hacker" in cyber security refers to individuals who attempt to gain unauthorized access to computer systems. This unauthorized access can be for various reasons, including stealing data, causing disruption, or exploiting vulnerabilities. The other options do not align with the specific definition of a hacker within the context of cyber security.

Option Analysis:

Option A: This describes a web developer or content creator, not a hacker.
Option B: This accurately describes a hacker in the context of cyber security.
Option C: This describes a web browser, not a hacker.
Option D: This describes an antivirus program, not a hacker.

9. What is happening based on the pop-up window you see beside?

Correct Answer: Correct answer is: (C) The anti virus is scanning the website to check if it is malicious or save to visit.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Antivirus software often includes features that scan websites before allowing a user to visit them. This helps to prevent the user from accessing potentially harmful or malicious sites.

Common Mistakes: A common misunderstanding is that the pop-up window indicates the link is broken or the website is down, rather than the antivirus software performing a security check.

Explanations: The antivirus software is performing a security check on the website to ensure it is not malicious. This process helps protect the user from potential threats such as malware, phishing, or other cyber attacks. The pop-up window indicates that the antivirus is actively scanning the website to determine if it is safe to visit.

Option Analysis:

Option A: This option is incorrect because the pop-up window does not indicate that the link is broken or not good to visit. It is a security measure by the antivirus software.
Option B: This option is incorrect because the pop-up window does not indicate that the link is being scanned and is ready to be visited. It is a security measure by the antivirus software.
Option C: This option is correct because the antivirus software is scanning the website to check if it is malicious or safe to visit.
Option D: This option is incorrect because the antivirus software is not blocking the user from entering the site; it is scanning the site to determine if it is safe to visit.

10. Computer crime is an illegal act committed by a knowledgeable computer.

Correct Answer: Correct answer is: (A) True.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Computer crime refers to illegal activities that are committed using a computer or other digital devices. These activities often involve individuals with knowledge of computer systems and networks.

Common Mistakes: A common misunderstanding is that computer crime can only be committed by hackers or individuals with advanced technical skills. However, it can also be committed by individuals with basic computer knowledge who misuse their skills for illegal activities.

Explanations: Computer crime is defined as an illegal act committed using a computer or digital devices. The perpetrator of such crimes often has some level of knowledge about computers and networks, which they use to commit illegal activities. Therefore, the statement that computer crime is an illegal act committed by a knowledgeable computer is true.

Option Analysis:

Option A: This option is correct because computer crime involves illegal activities committed by individuals with some level of computer knowledge.
Option B: This option is incorrect because it contradicts the definition of computer crime, which involves knowledgeable individuals using computers for illegal activities.

Frequently Asked Questions

What is the purpose of multi-factor authentication in cyber security?

Multi-factor authentication enhances security by requiring users to provide two or more verification factors to access a system, reducing the risk of unauthorized access.

How does a denial of service attack affect website accessibility?

A denial of service attack floods a website with fake traffic, making it difficult or impossible for legitimate users to access the site.

What is the role of antivirus scanning in protecting against malware?

Antivirus scanning detects and removes malicious software, such as viruses, trojans, and spyware, to prevent them from compromising system security.

How does IP spoofing contribute to cyber threats?

IP spoofing involves disguising the source IP address to hide the identity of the attacker, making it harder to trace and block malicious activities.

What is the primary goal of ransomware?

Ransomware encrypts files and demands a ransom for their release, often disrupting operations and causing financial loss to the victim.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books