Security Threats and Vulnerabilities: Master Cybersecurity Fundamentals

Question 1

Which of the following is NOT a type of malicious software (malware)?

Accepted Answer

Algorithm

Answer

Virus

Answer

Worm

Answer

Trojan

Question 2

What is the primary objective of phishing scams?

Accepted Answer

Obtaining confidential information

Answer

Disrupting network operations

Answer

Spreading malicious software

Answer

Encrypting data

Question 3

What is the primary function of a firewall?

Accepted Answer

Prevent unauthorized network access

Answer

Detect and remove malicious software

Answer

Encrypt network traffic

Answer

Back up sensitive data

Question 4

Which measure is most effective in mitigating social engineering attacks?

Accepted Answer

Being cautious of suspicious emails and links

Answer

Using strong and unique passwords

Answer

Keeping software up-to-date

Answer

Avoiding public Wi-Fi networks

Question 5

What is the key difference between a computer virus and a worm?

Accepted Answer

Viruses require a host program, while worms are standalone

Answer

Worms require a host program, while viruses are standalone

Answer

Viruses are more destructive than worms

Answer

Worms are more destructive than viruses

Question 6

What is the primary purpose of intrusion detection systems (IDS)?

Accepted Answer

Detect and alert to suspicious activities

Answer

Prevent unauthorized access

Answer

Encrypt sensitive data

Answer

Back up important files

Question 7

Which vulnerability allows attackers to execute unauthorized code on a system?

Accepted Answer

Buffer overflow

Answer

SQL injection

Answer

Cross-site scripting

Answer

Denial-of-service

Question 8

What is the primary purpose of security patches?

Accepted Answer

Address security vulnerabilities

Answer

Install new features

Answer

Enhance system performance

Answer

Remove malware infections

Question 9

To enhance security without hindering user experience, which approach should organizations prioritize?

Accepted Answer

Implement a comprehensive security strategy that balances user-friendliness.

Answer

Restrict security measures to maintain user convenience.

Answer

Enforce strict security measures regardless of usability impact.

Answer

Minimize security updates to avoid interrupting user activities.

Question 10

Which of the following is a type of ransomware?

Accepted Answer

CryptoLocker

Answer

Keygen

Answer

Downloader

Answer

Exploit

Question 11

What is the primary purpose of a phishing attack?

Accepted Answer

To obtain sensitive information

Answer

To disrupt network operations

Answer

To infect devices with malware

Answer

To gain unauthorized access to systems

Question 12

What is a key principle of the defense-in-depth security approach?

Accepted Answer

Implementing multiple layers of security measures

Answer

Relying solely on antivirus software

Answer

Restricting user access to sensitive data

Answer

Educating users about security risks

Question 13

What is the primary function of a firewall?

Accepted Answer

To prevent unauthorized network access

Answer

To detect and block malicious traffic

Answer

To encrypt data transmitted over a network

Answer

To recover data in case of a system failure

Question 14

Which of the following is a best practice for password security?

Accepted Answer

Storing passwords in a secure password manager

Answer

Using the same password for multiple accounts

Answer

Creating passwords that are easy to remember

Answer

Sharing passwords with trusted colleagues

Question 15

What is the purpose of a security patch?

Accepted Answer

To address security flaws in software

Answer

To update software with new features

Answer

To detect and remove malware infections

Answer

To create backups of important data

Question 16

Which of the following is a key objective of security threat management?

Accepted Answer

Identifying and mitigating potential threats

Answer

Enforcing compliance with security policies

Answer

Monitoring network traffic for suspicious activity

Answer

Conducting penetration testing

Question 17

In cybersecurity, what is the main purpose of penetration testing?

Accepted Answer

To identify security vulnerabilities

Answer

To assess system tolerance

Answer

To evaluate software patches

Answer

To prevent zero-day vulnerabilities

Question 18

Which type of malware encrypts files and demands a ransom payment to decrypt them?

Accepted Answer

Ransomware

Answer

Virus

Answer

Trojan

Answer

Worm

Question 19

What is the primary target of phishing attacks?

Accepted Answer

User credentials

Answer

Software vulnerabilities

Answer

Network infrastructure

Answer

Physical devices

Question 20

Which best practice can help prevent malware infections?

Accepted Answer

Keeping software up to date

Answer

Disabling antivirus software

Answer

Opening email attachments from unknown senders

Answer

Using weak passwords

Question 21

Which type of vulnerability arises from weaknesses in software code?

Accepted Answer

Buffer overflow

Answer

SQL injection

Answer

Cross-site scripting

Answer

Zero-day vulnerability

Question 22

Which network security tool monitors and controls incoming and outgoing network traffic?

Accepted Answer

Firewall

Answer

Antivirus scanner

Answer

Intrusion detection system

Answer

Virtual private network

Question 23

Which type of attack attempts to overwhelm a target system with a flood of requests?

Accepted Answer

Denial-of-service attack

Answer

Man-in-the-middle attack

Answer

Phishing attack

Answer

Spam attack

Question 24

Which information security principle involves limiting access to data and resources only to authorized individuals?

Accepted Answer

Confidentiality

Answer

Integrity

Answer

Availability

Answer

Non-repudiation

Question 25

Which cloud computing security model ensures that only authorized users have access to specific data and resources?

Accepted Answer

Zero-trust model

Answer

Shared responsibility model

Answer

Multi-tenant model

Answer

Hybrid cloud model

Question 26

Which best practice is recommended for secure software development?

Accepted Answer

Using static code analysis tools

Answer

Ignoring security updates

Answer

Hardcoding passwords

Answer

Reusing vulnerable code

Question 27

Which type of malware encrypts files and demands payment to decrypt them?

Accepted Answer

Ransomware

Answer

Virus

Answer

Trojan horse

Answer

Worm

Question 28

What technique involves tricking individuals into providing sensitive information through deceptive emails or messages?

Accepted Answer

Phishing

Answer

Spear phishing

Answer

Smishing

Answer

Vishing

Question 29

Which vulnerability arises when a software flaw allows an attacker to gain unauthorized access to a computer system?

Accepted Answer

Buffer overflow

Answer

SQL injection

Answer

Cross-site scripting

Answer

Man-in-the-middle attack

Question 30

What is a firewall primarily used for in a network security system?

Accepted Answer

Block unauthorized access to the network

Answer

Detect and respond to cyberattacks

Answer

Encrypt sensitive data in transit

Answer

Monitor network traffic for suspicious activities

Question 31

Which of the following is a recommended practice to minimize the risks of security threats?

Accepted Answer

Implementing all of the above measures

Answer

Using strong and unique passwords

Answer

Keeping software up-to-date with security patches

Answer

Being cautious when opening attachments or clicking links in emails

Question 32

What is the key difference between a virus and a worm, in the context of malware?

Accepted Answer

Viruses infect files, while worms are self-contained programs that spread through networks.

Answer

Worms infect files, while viruses are self-contained programs that spread through networks.

Answer

Viruses require user interaction to spread, while worms do not.

Answer

Worms require user interaction to spread, while viruses do not.

Question 33

Which techniques can help mitigate the risks of SQL injection attacks on websites?

Accepted Answer

Implementing all of the above measures

Answer

Input validation to check for malicious characters

Answer

Use of prepared statements to prevent malicious SQL queries

Answer

Escaping special characters to prevent their misinterpretation

Question 34

What is the primary purpose of encryption in the field of cybersecurity?

Accepted Answer

To safeguard data from unauthorized access and potential breaches

Answer

To ensure the authenticity and integrity of data during transmission

Answer

To facilitate user authentication and authorization processes

Answer

To enhance the performance and speed of data processing

Question 35

Which of the following social engineering techniques is commonly employed by attackers to exploit human weaknesses?

Accepted Answer

Employing all of the above techniques

Answer

Using fear and urgency to pressure individuals into hasty actions

Answer

Leveraging authority and trust to gain access to confidential information

Answer

Creating a sense of scarcity or exclusivity to encourage impulsive decisions

Question 36

What is the main objective of a brute force attack?

Accepted Answer

To guess passwords or encryption keys through repeated attempts

Answer

To exploit vulnerabilities in software or systems

Answer

To spread malware or viruses across a network

Answer

To disrupt network services or cause denial-of-service

Question 37

Which type of malware targets personal information and passwords?

Accepted Answer

Trojan horse

Answer

Virus

Answer

Worm

Answer

Ransomware

Question 38

What is the primary technique used in phishing scams?

Accepted Answer

Masquerading as legitimate entities to obtain sensitive information

Answer

Exploiting software vulnerabilities for unauthorized access

Answer

Denying legitimate users access to resources

Answer

Encrypting files and demanding ransom for decryption

Question 39

What is the main function of a firewall in a network security framework?

Accepted Answer

Blocking unauthorized network access

Answer

Detecting and eliminating malware

Answer

Encrypting data during transmission

Answer

Preventing unauthorized OS modifications

Question 40

Which security measure is most effective in preventing data breaches?

Accepted Answer

Encryption

Answer

Anti-virus software

Answer

Strong passwords

Answer

Regular software updates

Question 41

Identify the three primary categories of computer security threats.

Accepted Answer

Malware, phishing, hacking

Answer

Viruses, worms, Trojan horses

Answer

Hackers, crackers, phishers

Answer

Physical threats, environmental threats, human threats

Question 42

Which of the following is not recommended when creating strong passwords?

Accepted Answer

Reusing passwords across multiple accounts

Answer

Length of at least 12 characters

Answer

Inclusion of an uppercase letter

Answer

Avoiding common words or phrases

Question 43

What is the purpose of a honeypot in cybersecurity?

Accepted Answer

Attracting and observing malicious activity

Answer

Preventing unauthorized network access

Answer

Detecting and removing malware

Answer

Encrypting data during transmission

Question 44

In social engineering attacks, which psychological principle is leveraged to manipulate individuals into compromising systems?

Accepted Answer

Authority bias

Answer

Herd mentality

Answer

Reciprocity

Answer

Scarcity

Question 45

How effective is two-factor authentication (2FA) in preventing unauthorized account access?

Accepted Answer

2FA is very effective in preventing attackers from accessing accounts, even if they have stolen a user's password.

Answer

2FA is not effective because attackers can easily bypass it by intercepting the second authentication factor.

Answer

2FA is only effective against phishing attacks, as it prevents attackers from obtaining a user's password.

Answer

2FA is not effective because users often find it inconvenient and disable it.

Question 46

Which type of malware falsely presents itself as a legitimate program to gain access to your computer and steal sensitive information?

Accepted Answer

Trojan horse

Answer

Backdoor

Answer

Virus

Answer

Worm

Question 47

What is the primary goal of a phishing email?

Accepted Answer

To deceive you into disclosing personal information

Answer

To distribute spam messages

Answer

To install malicious software on your device

Answer

To disrupt the normal operation of your computer

Question 48

Which of the following represents a common software security vulnerability that can allow attackers to execute arbitrary code?

Accepted Answer

Buffer overflow

Answer

Cross-site scripting

Answer

SQL injection

Answer

Man-in-the-middle attack

Question 49

What is the primary purpose of a firewall in network security?

Accepted Answer

To prevent unauthorized access to a network

Answer

To encrypt data traffic

Answer

To detect and eliminate malware infections

Answer

To provide secure remote access to resources

Question 50

Which type of cryptographic algorithm utilizes the same key for both encryption and decryption?

Accepted Answer

Symmetric-key encryption

Answer

Antivirus

Answer

Firewall

Question 51

To create a strong password, it is advisable to:

Accepted Answer

Create a password with a minimum length of 12 characters, incorporating a combination of uppercase and lowercase letters, numbers, and symbols

Answer

Prioritize ease of memorization

Answer

Choose a common word or phrase

Question 52

Which of the following is an example of a social engineering attack?

Accepted Answer

Phishing

Answer

Malware

Answer

Hacking

Answer

Denial-of-service attack

Question 53

What is the main objective of a security audit?

Accepted Answer

To identify and evaluate potential security risks

Answer

To respond to security breaches

Answer

To train employees on security best practices

Answer

To install security software and applications