Cybersecurity Threats and Vulnerabilities: Master the Basics

Question 1

What is the primary goal of a phishing attack?

Accepted Answer

To obtain sensitive information such as passwords or credit card numbers.

Answer

To steal hardware or software.

Answer

Encrypt files for ransom.

Answer

Gain unauthorized access to a network.

Question 2

Which of the following is a social engineering technique?

Accepted Answer

Pretexting

Answer

SQL injection

Answer

Buffer overflow

Answer

Cross-site scripting

Question 3

What is a zero-day vulnerability?

Accepted Answer

A vulnerability that is unknown to the software vendor or the general public.

Answer

A vulnerability that has been patched but is still exploitable.

Answer

A vulnerability that can be exploited remotely.

Answer

A vulnerability that is only present on specific versions of software.

Question 4

Which of the following is a best practice for mitigating the risk of malware infections?

Accepted Answer

Use up-to-date antivirus software and keep it enabled.

Answer

Ignore software updates.

Answer

Open all email attachments without scanning them.

Answer

Disable firewalls to improve performance.

Question 5

What is the role of a patched operating system in cybersecurity?

Accepted Answer

To fix security vulnerabilities that could be exploited by attackers.

Answer

To protect against hardware failures.

Answer

To improve the performance of the operating system.

Answer

To make the operating system more user-friendly.

Question 6

What is the primary purpose of a firewall?

Accepted Answer

To restrict unauthorized access to or from a network.

Answer

To optimize network performance.

Answer

To encrypt network traffic.

Answer

To detect and remove malware.

Question 7

Which of the following is a common security misconfiguration that can lead to vulnerabilities?

Accepted Answer

Enabling unnecessary services on a server.

Answer

Using strong passwords for all accounts.

Answer

Using a VPN when accessing public Wi-Fi.

Answer

Keeping software up to date.

Question 8

What is the most appropriate response to a social engineering attack?

Accepted Answer

Remain skeptical, do not provide personal information, and report the attempt.

Answer

Ignore the attempt and assume it is not a threat.

Answer

Trust the sender and follow their instructions.

Answer

Click on the provided links to verify the sender's identity.

Question 9

What is the primary purpose of vulnerability assessment tools in cybersecurity?

Accepted Answer

Identifying potential vulnerabilities in systems and networks

Answer

Creating detailed security reports

Answer

Preventing data breaches

Answer

Training cybersecurity professionals

Question 10

Which of the following is NOT a common type of malware?

Accepted Answer

Hypervisor

Answer

Adware

Answer

Spamware

Answer

Ransomware

Question 11

What is the primary goal of a phishing attack?

Accepted Answer

To obtain sensitive information

Answer

To disrupt a network

Answer

To compromise a website

Answer

To steal money

Question 12

Which of the following is a vulnerability that attackers can exploit to gain unauthorized access to a system?

Accepted Answer

Buffer overflow

Answer

Firewall

Answer

Antivirus software

Answer

Strong password

Question 13

What is the purpose of social engineering in cybersecurity attacks?

Accepted Answer

To manipulate individuals into revealing sensitive information or taking actions that compromise security

Answer

To disrupt network services

Answer

To deploy malware on a target system

Question 14

Which of the following is a best practice for protecting against malware infections?

Accepted Answer

Use up-to-date antivirus software

Answer

Install software from untrusted sources

Answer

Disable firewalls

Answer

Click on suspicious links in emails

Question 15

What is the main objective of a zero-day attack?

Accepted Answer

To exploit a newly discovered vulnerability before a patch is available

Answer

To disrupt critical infrastructure

Answer

To steal financial information

Question 16

Which of the following is a common tactic used in Denial-of-Service (DoS) attacks?

Accepted Answer

Flooding a target system with excessive traffic

Answer

Exploiting software vulnerabilities

Answer

Intercepting network packets

Answer

Guessing passwords

Question 17

What is a key element of a strong cybersecurity policy?

Accepted Answer

Regular security updates and audits

Answer

Permissive access controls

Answer

Lack of security awareness training

Answer

Outsourced security management

Question 18

Which of the following is NOT a benefit of implementing multi-factor authentication?

Accepted Answer

Increased risk of unauthorized access

Answer

Reduced reliance on passwords

Answer

Improved user experience

Answer

Enhanced security

Question 19

What is the role of a security information and event management (SIEM) system?

Accepted Answer

To collect, analyze, and respond to security-related data

Answer

To prevent malware infections

Answer

To store and manage passwords

Question 20

Which type of malware is designed to encrypt files and demand payment to unlock them?

Accepted Answer

Ransomware

Answer

Adware

Answer

Trojan

Answer

Spyware

Question 21

What is phishing?

Accepted Answer

An attempt to obtain sensitive information by impersonating a trusted entity in electronic communication.

Answer

An unauthorized attempt to gain access to a computer system by exploiting software vulnerabilities.

Question 22

What is a vulnerability in a computer system?

Accepted Answer

A weakness or flaw that can be exploited by an attacker to compromise the system.

Answer

A type of cyberattack that overwhelms a system with excessive traffic.

Answer

A type of malware that spreads through network connections.

Question 23

What is the primary function of a firewall?

Accepted Answer

To monitor and control incoming and outgoing network traffic, preventing unauthorized access.

Answer

To detect and remove malware from a computer system.

Answer

To encrypt data stored on a computer system.

Question 24

What is the purpose of a patch in software management?

Accepted Answer

To address and fix vulnerabilities or bugs in a software program.

Answer

To eliminate malware infections within a software program.

Answer

To add new features or enhancements to a software program.

Answer

To create a backup copy of data stored in a software program.

Question 25

What is the primary objective of a security audit?

Accepted Answer

To systematically examine a computer system or network to identify vulnerabilities and assess security risks.

Answer

To search for and remove malware infections from a computer system.

Answer

To encrypt data stored on a computer system.

Question 26

Which of the following is NOT a type of malware?

Accepted Answer

Anti-virus software

Answer

Spyware

Answer

Ransomware

Answer

Adware

Question 27

Phishing is a type of cyberattack that aims to:

Accepted Answer

Trick victims into revealing sensitive information

Answer

Encrypt victims' files and demand a ransom

Answer

Hijack victims' computers to mine cryptocurrency

Answer

Flood victims' networks with traffic to disrupt services

Question 28

Which of the following is a common social engineering tactic?

Accepted Answer

Posing as a legitimate authority figure

Answer

Brute-forcing passwords

Answer

Installing malware on victims' devices

Answer

Exploiting software vulnerabilities

Question 29

Which of the following is a potential vulnerability in a computer system?

Accepted Answer

Unpatched software

Answer

Up-to-date antivirus software

Answer

Regular backups

Answer

Strong passwords

Question 30

What is the purpose of a firewall?

Accepted Answer

To restrict unauthorized access to a network or system

Answer

To encrypt sensitive data

Answer

To scan and remove malware from devices

Answer

To provide secure remote access

Question 31

Which of the following is a recommended practice to safeguard against identity theft?

Accepted Answer

Using multi-factor authentication

Answer

Clicking on suspicious links in emails

Answer

Leaving devices unattended in public areas

Answer

Sharing personal information publicly

Question 32

What is the primary function of cryptography in cybersecurity?

Accepted Answer

To protect data confidentiality and integrity

Answer

To monitor network traffic

Answer

To detect and respond to cyberattacks

Question 33

Which of the following is a type of vulnerability scanner?

Accepted Answer

Host-based scanner

Answer

Network intrusion detection system

Answer

Firewall

Answer

Anti-virus scanner

Question 34

What is the main objective of penetration testing?

Accepted Answer

To identify vulnerabilities in a system that could be exploited by malicious actors

Answer

To install and maintain security patches

Answer

To monitor network traffic and detect suspicious activity

Question 35

Which of the following is a specific security consideration in cloud computing environments?

Accepted Answer

Shared responsibility model

Answer

Malware infection

Answer

Physical access to servers

Question 36

Which of the following is a malicious software that can damage, steal data, or disrupt the normal functioning of a computer system?

Accepted Answer

Malware

Answer

Utility software

Answer

Email filter

Answer

Firewall

Question 37

What is the term for a targeted phishing attack that impersonates a trustworthy individual or organization to obtain confidential information?

Accepted Answer

Spear phishing

Answer

Smishing

Answer

Pharming

Answer

Vishing

Question 38

Which of the following is a social engineering technique that involves gaining access to restricted areas or information by following closely behind authorized individuals?

Accepted Answer

Tailgating

Answer

Shoulder surfing

Answer

Pretexting

Answer

Dumpster diving

Question 39

What is the process of identifying, assessing, and mitigating security weaknesses in software systems referred to as?

Accepted Answer

Vulnerability management

Answer

Incident response

Answer

Security testing

Answer

Risk assessment

Question 40

Which type of vulnerability allows an attacker to execute arbitrary code on a target system remotely?

Accepted Answer

Remote code execution

Answer

SQL injection

Answer

Cross-site scripting

Answer

Buffer overflow

Question 41

What is the most effective measure in preventing phishing attacks?

Accepted Answer

Never click on links or open attachments in unsolicited emails or text messages.

Answer

Install anti-malware software on devices.

Answer

Always use strong passwords for all accounts.

Question 42

What is the process of simulating a cyberattack to identify and exploit system vulnerabilities called?

Accepted Answer

Penetration testing

Answer

Vulnerability scanning

Answer

Security auditing

Answer

Risk assessment

Question 43

Which type of threat actor is primarily motivated by financial gain?

Accepted Answer

Cybercriminal

Answer

Insurgent

Answer

Terrorist

Answer

Hacktivist

Question 44

What is the term for the process of collecting and analyzing information about cybersecurity threats and vulnerabilities?

Accepted Answer

Threat intelligence

Answer

Incident response

Answer

Security monitoring

Answer

Risk assessment

Question 45

Which of the following is NOT a common type of malware?

Accepted Answer

Firewall

Answer

Ransomware

Answer

Adware

Question 46

Phishing attacks typically involve what?

Accepted Answer

Sending fraudulent emails to trick users into revealing sensitive information.

Answer

Exploiting vulnerabilities in software.

Answer

Denying legitimate users access to a service.

Question 47

Which of the following is a social engineering method?

Accepted Answer

Pretending to be a customer service representative to gain access to confidential information.

Answer

Running vulnerability scans to identify potential weaknesses.

Answer

Using a firewall to block unauthorized access.

Question 48

What is the primary objective of a vulnerability assessment?

Accepted Answer

To identify and assess potential weaknesses in a system's security.

Answer

To ensure compliance with regulations.

Answer

To respond to and mitigate security incidents.

Answer

To prevent unauthorized access to data.

Question 49

Which of the following is a recommended best practice for mitigating cybersecurity threats?

Accepted Answer

Enforcing strong passwords and implementing multi-factor authentication.

Answer

Opening unsolicited email attachments.

Answer

Disabling antivirus software and firewalls.

Question 50

What is the primary purpose of data encryption?

Accepted Answer

To render data unreadable to unauthorized individuals.

Answer

To ensure the integrity of data during transmission.

Answer

To prevent data loss due to hardware failures.

Question 51

What is the key objective of incident response planning?

Accepted Answer

To establish clear and coordinated procedures for responding to security incidents.

Answer

To prevent security incidents from occurring.

Answer

To ensure compliance with legal requirements.

Question 52

Which of the following is considered a cloud security threat?

Accepted Answer

Data exposure due to misconfigured cloud storage.

Answer

Phishing attacks targeting on-premise employees.

Answer

Malware infection of physical servers.

Answer

Denial-of-service attacks on web applications.