Cybersecurity Threats and Vulnerabilities: Master the Fundamentals

Question 1

Which type of malware encrypts user data and demands payment for decryption?

Accepted Answer

Ransomware

Answer

Virus

Answer

Worm

Answer

Trojan

Question 2

What vulnerability allows an attacker to execute malicious code on a system?

Accepted Answer

Buffer overflow

Answer

Cross-site scripting

Answer

SQL injection

Answer

Man-in-the-middle attack

Question 3

What is the main objective of a penetration test?

Accepted Answer

Identify vulnerabilities in a system

Answer

Collect information about a network

Answer

Launch an attack on a system

Answer

Recover data from a compromised system

Question 4

What is the purpose of a Cybersecurity Incident Response Team (CSIRT)?

Accepted Answer

Prepare for and respond to cybersecurity incidents and breaches

Answer

Conduct vulnerability assessments

Answer

Develop cybersecurity policies

Answer

Provide support for cybersecurity software

Question 5

What is the primary purpose of threat intelligence in cybersecurity?

Accepted Answer

Provide advance warning of potential threats

Answer

Identify system vulnerabilities

Answer

Develop response strategies

Answer

Conduct incident investigations

Question 6

Which of the following is NOT a common type of malware?

Accepted Answer

Algorithm

Answer

Virus

Answer

Trojan horse

Answer

Spyware

Question 7

What is the primary purpose of a network intrusion detection system (NIDS)?

Accepted Answer

To monitor network traffic and alert on suspicious activity

Answer

To prevent unauthorized access

Answer

To encrypt network traffic

Answer

To provide a secure VPN connection

Question 8

What is the primary goal of a phishing attack?

Accepted Answer

To steal sensitive information

Answer

To disable or damage computer systems

Answer

To gain unauthorized access

Answer

To spread malware

Question 9

Which type of network attack involves flooding a target system with a high volume of requests?

Accepted Answer

Denial-of-service (DoS) attack

Answer

Man-in-the-middle attack

Answer

SQL injection attack

Answer

Spam attack

Question 10

What is the primary objective of a security audit?

Accepted Answer

To identify and evaluate system vulnerabilities

Answer

To monitor and detect malicious activities

Answer

To implement security measures

Answer

To train employees on cybersecurity practices

Question 11

In a cybersecurity incident response plan, which aspect should be prioritized?

Accepted Answer

Swift Containment

Answer

Thorough Logging

Answer

Root Cause Investigation

Answer

Vendor Alert

Question 12

In ethical penetration testing, which ethical consideration is paramount?

Accepted Answer

Securing explicit consent before testing systems

Answer

Employing all available tools and techniques

Answer

Concealing discovered vulnerabilities

Answer

Prioritizing personal gain over client security

Question 13

Which of the following is NOT a common type of cybersecurity threat?

Accepted Answer

Physical damage

Answer

Malware

Answer

Phishing

Answer

DDoS attacks

Question 14

Define a vulnerability in cybersecurity.

Accepted Answer

A weakness or flaw in a system or software that attackers can exploit

Answer

A malicious software that encrypts files and demands payment.

Answer

An attack that tricks victims into revealing sensitive information through deceptive emails.

Answer

A physical security measure to prevent unauthorized access

Question 15

Which type of malware specifically targets individuals or organizations to steal sensitive information?

Accepted Answer

Trojan horse

Answer

Virus

Answer

Worm

Answer

Ransomware

Question 16

What is the primary function of a firewall in cybersecurity?

Accepted Answer

To monitor and regulate incoming and outgoing network traffic

Answer

To protect against data breaches by encrypting sensitive information

Answer

To detect and eliminate malware from a system

Answer

To establish a secure connection to a remote server

Question 17

What is the term for a system or network isolated from the internet for security reasons?

Accepted Answer

Air gap

Answer

Intranet

Answer

VPN

Answer

Firewall

Question 18

Which of the following describes a social engineering technique attackers use to gain unauthorized access?

Accepted Answer

Pretending to be a trusted person

Answer

Using malware to exploit system vulnerabilities

Answer

Launching a DDoS attack to overwhelm a network

Answer

Taking advantage of physical security weaknesses

Question 19

What is the primary purpose of encryption in cybersecurity?

Accepted Answer

To safeguard data from unauthorized access during transmission or storage

Answer

To detect and remove malware from a system

Answer

To establish a secure connection to a remote server

Answer

To monitor and control network traffic

Question 20

What is the process of identifying, assessing, and mitigating potential cybersecurity risks called?

Accepted Answer

Risk assessment

Answer

Vulnerability management

Answer

Incident response

Answer

Network monitoring

Question 21

Which of the following is NOT typically considered a cybersecurity threat?

Accepted Answer

Natural Disasters

Answer

Phishing

Answer

Malware

Answer

Social Engineering

Question 22

What type of vulnerability allows attackers to execute their own code on a web server?

Accepted Answer

Cross-Site Scripting (XSS)

Answer

SQL Injection

Answer

Denial of Service (DoS)

Answer

Man-in-the-Middle Attack

Question 23

Which of the following is a common tactic used in social engineering attacks?

Accepted Answer

Impersonation

Answer

Encryption

Answer

Intrusion Detection Systems

Answer

Firewall Configuration

Question 24

What kind of malware replicates itself and spreads across systems?

Accepted Answer

Worm

Answer

Spyware

Answer

Trojan Horse

Answer

Adware

Question 25

Which of these is a common vulnerability found in operating systems?

Accepted Answer

Buffer Overflow

Answer

Two-Factor Authentication

Answer

Antivirus Software

Answer

Strong Passwords

Question 26

Which security measure encrypts data during transmission to prevent unauthorized access?

Accepted Answer

Transport Layer Security (TLS)

Answer

Intrusion Detection System (IDS)

Answer

Firewall

Answer

Anti-Malware Software

Question 27

What is a security flaw that allows attackers to exploit a known weakness in a system?

Accepted Answer

Exploit

Answer

Firewall

Answer

Patch

Answer

Antivirus

Question 28

Which of these is a best practice to protect against phishing attacks?

Accepted Answer

Verify sender identity before clicking links

Answer

Open attachments from unknown senders

Answer

Disable all pop-up blockers

Question 29

What type of attack floods a server with traffic, making it unavailable to legitimate users?

Accepted Answer

Denial of Service (DoS)

Answer

SQL Injection

Answer

Cross-Site Scripting (XSS)

Answer

Man-in-the-Middle