Security Threats and Countermeasures: Master the Fundamentals

Question 1

Which mechanism is specifically designed to detect and prevent malware and viruses?

Accepted Answer

Signature-based detection

Answer

Access control

Answer

Encryption

Answer

Intrusion detection

Question 2

Which type of malware replicates itself and spreads to other systems via networks?

Accepted Answer

Virus

Answer

Trojan horse

Answer

Rootkit

Answer

Phishing email

Question 3

What is the primary purpose of an access control list (ACL)?

Accepted Answer

To regulate access permissions to resources based on user identity

Answer

To encrypt data stored on a disk

Answer

To monitor network traffic for suspicious activity

Answer

To recover lost data from a corrupted hard drive

Question 4

Which of the following is a disadvantage of using encryption?

Accepted Answer

Increased data vulnerability

Answer

Enhanced data performance

Answer

Simplified data recovery

Answer

Guaranteed data integrity

Question 5

What is the central function of an intrusion detection system (IDS)?

Accepted Answer

Detecting and reporting potential security breaches

Answer

Preventing unauthorized access to a network

Answer

Restoring data compromised by a security incident

Answer

Creating backups of critical data files

Question 6

Which of the following is a recommended measure to prevent phishing attacks?

Accepted Answer

Scrutinize unsolicited emails asking for personal information

Answer

Click on all links in emails, regardless of the sender's identity

Answer

Disable spam filters to enhance email deliverability

Answer

Store confidential data on publicly accessible cloud platforms

Question 7

Which type of software vulnerability grants an attacker the ability to execute arbitrary code on a target system?

Accepted Answer

Buffer overflow

Answer

SQL injection

Answer

Cross-site request forgery (CSRF)

Answer

Zero-day exploit

Question 8

What is a crucial aspect of a multi-factor authentication system?

Accepted Answer

Requiring multiple forms of identification for user verification

Answer

Storing passwords in an unencrypted format

Answer

Granting remote access without proper authorization

Answer

Enabling single sign-on for all applications

Question 9

What is the primary role of a firewall?

Accepted Answer

Blocking unauthorized access to a network

Answer

Detecting and responding to malware infections

Answer

Encrypting data transmissions across networks

Answer

Providing remote access to authorized administrators

Question 10

What is the most effective method to safeguard your operating system against security threats?

Accepted Answer

Regularly installing security updates

Answer

Disabling antivirus software to improve system performance

Answer

Opening email attachments from unknown senders

Answer

Allowing unrestricted access to all devices connected to the network

Question 11

Access control, authentication, and authorization are all mechanisms used to implement:

Accepted Answer

System protection

Answer

Intrusion detection

Answer

Cryptographic measures

Answer

Security auditing

Question 12

Which of the following encryption algorithms operates using the same key for both encryption and decryption?

Accepted Answer

AES

Answer

RSA

Answer

ECC

Answer

SHA-256

Question 13

Which type of intrusion detection system monitors network traffic for malicious activity?

Accepted Answer

Network-based IDS

Answer

Host-based IDS

Answer

Application-based IDS

Answer

Signature-based IDS

Question 14

Which component of an operating system is primarily responsible for managing system resources and processes?

Accepted Answer

Kernel

Answer

Shell

Answer

File system

Answer

Device drivers

Question 15

Which command is commonly used in Linux systems to detect and remove viruses?

Accepted Answer

clamscan

Answer

malwarebytes

Answer

chkdsk

Answer

sfc /scannow

Question 16

Which security protocol is widely employed to secure communication over the web?

Accepted Answer

HTTPS

Answer

FTP

Answer

HTTP

Answer

Telnet

Question 17

Which type of attack involves exploiting a vulnerability to gain unauthorized access to a computer system?

Accepted Answer

Brute force attack

Answer

Malware attack

Answer

Phishing attack

Answer

DoS attack

Question 18

Which countermeasure is specifically employed to prevent SQL injection attacks?

Accepted Answer

Input validation

Answer

Buffer overflow

Answer

Cross-site scripting

Answer

Parameter tampering

Question 19

Which of the following types of malware does not require a host program to execute?

Accepted Answer

Worm

Answer

Virus

Answer

Trojan horse

Answer

Adware

Question 20

In an operating system, what is the primary aim of access control?

Accepted Answer

To prevent unauthorized access to resources

Answer

To encrypt data on the system

Answer

To detect intrusion attempts

Answer

To restore data after a system failure

Question 21

Which one of the following algorithms is recognized as being highly secure for encryption?

Accepted Answer

AES

Answer

DES

Answer

MD5

Answer

SHA-1

Question 22

What is the intended purpose of an intrusion detection system (IDS)?

Accepted Answer

To identify and respond to unauthorized access attempts

Answer

To protect the system from malware infections

Answer

To encrypt data on the system

Answer

To recover data after a system failure

Question 23

What differentiates a virus from a worm?

Accepted Answer

A virus requires a host program to function, while a worm is independent

Answer

A worm requires a host program to function, while a virus is independent

Answer

A virus has the ability to replicate, while a worm does not

Answer

A worm has the ability to replicate, while a virus does not

Question 24

What is the primary function of a firewall?

Accepted Answer

Blocking unauthorized access to a network

Answer

Encrypting data on the network

Answer

Detecting intrusion attempts

Answer

Restoring data after a network failure

Question 25

What is the primary purpose of a demilitarized zone (DMZ)?

Accepted Answer

To isolate sensitive network assets from the internet

Answer

To encrypt data on the network

Answer

To detect intrusion attempts

Answer

To recover data after a network failure

Question 26

Which of the following is not classified as a type of malware?

Accepted Answer

Spam

Answer

Virus

Answer

Trojan

Answer

Worm

Question 27

What is the primary function of access control in computer security?

Accepted Answer

Restricting access to sensitive resources and data

Answer

Detecting unauthorized access attempts

Answer

Encrypting data to prevent unauthorized access

Answer

Identifying and quarantining infected files

Question 28

Which of the following is a key benefit of data encryption?

Accepted Answer

Protecting data confidentiality by making it unreadable without the correct key

Answer

Preventing unauthorized users from modifying or deleting data

Answer

Detecting unauthorized access attempts to data

Answer

Isolating infected files from the system

Question 29

What is the main role of an intrusion detection system (IDS)?

Accepted Answer

Monitoring network traffic for suspicious activities and identifying potential threats

Answer

Restricting access to sensitive resources and data

Answer

Encrypting data to prevent unauthorized access

Answer

Quarantining infected files to prevent the spread of malware

Question 30

Select the option that describes characteristics of a strong password:

Accepted Answer

At least 8 characters in length, includes a combination of lowercase, uppercase, numbers, and symbols

Answer

Contains personal information or common words for easy memorization

Answer

Never changes to avoid the hassle of remembering different passwords

Answer

Uses the same password across multiple accounts for convenience

Question 31

What is the technique known as social engineering primarily used for?

Accepted Answer

Tricking individuals into disclosing sensitive information or compromising their accounts

Answer

Exploiting technical vulnerabilities in computer systems to gain unauthorized access

Answer

Distributing malware through malicious email attachments or infected websites

Answer

Stealing physical devices to obtain confidential data stored on them

Question 32

Which of the following is a recommended practice to avoid falling victim to phishing scams?

Accepted Answer

Carefully examining the sender's email address and message content for inconsistencies

Answer

Clicking on links and opening attachments in unsolicited emails without hesitation

Answer

Using weak passwords and avoiding two-factor authentication

Answer

Ignoring software updates and security patches for your operating system

Question 33

What is the primary purpose of a firewall in network security?

Accepted Answer

Preventing unauthorized access to computer networks by monitoring and blocking suspicious traffic

Answer

Detecting and responding to intrusion attempts by analyzing network activity

Answer

Encrypting data transmitted over networks to protect its confidentiality

Answer

Isolating infected devices from the network to contain the spread of malware

Question 34

Which of the following is NOT a common security threat?

Accepted Answer

Redundancy

Answer

Malware

Answer

Viruses

Answer

Spam

Question 35

What is the primary purpose of access control?

Accepted Answer

To restrict unauthorized access to system resources.

Answer

To monitor and log system activity.

Answer

To detect and prevent intrusion attempts.

Answer

To encrypt data in transit.

Question 36

Which of the following is an example of a cryptographic algorithm?

Accepted Answer

MD5

Answer

TCP

Answer

SMTP

Answer

XML

Question 37

What is the primary responsibility of an intrusion detection system (IDS)?

Accepted Answer

To detect and alert on suspicious activity.

Answer

To prevent unauthorized access to the system.

Answer

To encrypt data stored on the system.

Answer

To recover data in the event of a security breach.

Question 38

Which of the following best describes the role of a firewall?

Accepted Answer

A network security device that monitors and controls incoming and outgoing network traffic.

Answer

A software program that protects against malicious code.

Answer

A system for detecting and responding to security breaches.

Answer

A tool for encrypting data.

Question 39

Which of the following is a social engineering technique used to obtain sensitive information?

Accepted Answer

Phishing

Answer

Malware

Answer

DDoS attacks

Answer

Rootkits

Question 40

Which tool is specifically designed to detect and evaluate weaknesses in a computer system?

Accepted Answer

Vulnerability scanner

Answer

Firewall

Answer

Intrusion detection system

Question 41

Which of the following is NOT a type of malicious software commonly known as malware?

Accepted Answer

Spam

Answer

Virus

Answer

Trojan

Answer

Worm

Question 42

In an operating system, what is the primary purpose of access control?

Accepted Answer

限制对敏感数据和资源的访问

Answer

检测和防止入侵

Answer

加密数据

Answer

监视网络流量

Question 43

Intrusion detection systems primarily aim to:

Accepted Answer

识别和报告可疑活动

Answer

阻止入侵发生

Answer

从入侵中恢复

Answer

加密数据

Question 44

Which of the following is a social engineering attack where users are deceived into disclosing sensitive information?

Accepted Answer

网络钓鱼

Answer

恶意软件

Answer

欺骗

Answer

垃圾邮件

Question 45

In an operating system, what is the function of a firewall?

Accepted Answer

过滤和阻止未经授权的网络流量

Answer

检测和防止病毒

Answer

加密数据

Answer

监视系统活动

Question 46

What is the key difference between a virus and a worm?

Accepted Answer

病毒需要寄主程序才能执行，而蠕虫可以独立运行

Answer

蠕虫需要寄主程序才能执行，而病毒可以独立运行

Answer

病毒仅通过电子邮件附件传播，而蠕虫可以通过网络连接传播

Answer

蠕虫仅通过电子邮件附件传播，而病毒可以通过网络连接传播

Question 47

What is the primary objective of conducting a security audit?

Accepted Answer

识别系统中的漏洞和弱点

Answer

防止安全漏洞的发生

Answer

从安全漏洞中恢复

Answer

监视系统活动

Question 48

Which of the following is NOT a common type of malware?

Accepted Answer

Firewall

Answer

Trojan Horse

Answer

Worm

Answer

Virus

Question 49

What is the primary purpose of a firewall?

Accepted Answer

To control incoming and outgoing network traffic

Answer

To detect and remove viruses

Answer

To provide a secure connection to a remote network

Answer

To encrypt data stored on a hard drive

Question 50

Which access control model grants access based on a user's role within an organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Question 51

Which type of encryption uses the same key for both encryption and decryption?

Accepted Answer

Symmetric-key encryption

Answer

Digital signature

Answer

Hashing

Answer

Asymmetric-key encryption

Question 52

Which of the following is a common technique used in social engineering attacks?

Accepted Answer

Phishing emails

Answer

Strong passwords

Answer

Regular software updates

Answer

Two-factor authentication

Question 53

What is the primary function of an Intrusion Detection System (IDS)?

Accepted Answer

To detect and alert on suspicious network activity

Answer

To provide user authentication

Answer

To encrypt sensitive data

Answer

To prevent all network intrusions

Question 54

Which of the following is NOT a common method of mitigating malware threats?

Accepted Answer

Ignoring software update notifications

Answer

Regularly backing up important data

Answer

Being cautious about opening email attachments

Answer

Installing antivirus software

Question 55

Explain the difference between authentication and authorization.

Accepted Answer

Authentication verifies identity, while authorization grants access to resources.

Answer

Authentication and authorization are the same thing.

Answer

Authorization verifies identity, while authentication grants access to resources.

Question 56

Which of the following is a potential vulnerability of a weak password?

Accepted Answer

Susceptibility to brute-force attacks

Answer

Two-factor authentication

Answer

Regular security audits

Answer

Strong encryption algorithms

Question 57

What is the primary purpose of a security audit?

Accepted Answer

To identify vulnerabilities and assess the effectiveness of security controls

Answer

To install new security software

Answer

To train employees on social engineering tactics