Cybersecurity Threats: Identify and Mitigate Online Risks

Question 1

Which technique is commonly used in phishing attacks?

Accepted Answer

Sending emails that pretend to be from legitimate sources to trick people into giving up personal information

Answer

Exploiting software vulnerabilities to access systems

Question 2

Which of the following is NOT considered a primary type of cyber attack?

Accepted Answer

Spam

Answer

Malware

Answer

Ransomware

Answer

Phishing

Question 3

Which type of malware locks files or systems and demands payment to release them?

Accepted Answer

Ransomware

Answer

Trojan

Answer

Virus

Answer

Worm

Question 4

What is the technique attackers use to manipulate individuals into divulging confidential information?

Accepted Answer

Social Engineering

Answer

Hacking

Answer

Malware

Answer

Phishing

Question 5

Which action is an effective defense against phishing scams?

Accepted Answer

Scrutinize emails with attachments, especially from unknown senders.

Answer

Click on links in emails without hesitation.

Answer

Use simple passwords.

Question 6

Which type of DDoS attack involves flooding a target with an overwhelming amount of traffic?

Accepted Answer

Volumetric

Answer

Protocol

Answer

Application-layer

Question 7

What is the primary function of a firewall?

Accepted Answer

To monitor and filter incoming and outgoing network traffic based on predefined rules.

Answer

To store and manage data

Answer

To detect and eliminate malware

Question 8

What is the term used to describe a security breach that compromises the confidentiality, integrity, or availability of information?

Accepted Answer

Data breach

Answer

Malware attack

Answer

Phishing scam

Answer

DDoS attack

Question 9

What is the primary goal of a risk assessment in cybersecurity?

Accepted Answer

To identify and prioritize potential threats and vulnerabilities to an organization's information assets.

Answer

To implement security controls

Answer

To detect and respond to security incidents

Question 10

What is the PRIMARY purpose of ransomware?

Accepted Answer

To encrypt files and demand payment to decrypt them

Answer

To damage computer hardware

Answer

To steal personal information

Question 11

Which of the following is a common method used in social engineering attacks?

Accepted Answer

Phishing

Answer

SQL injection

Answer

Cross-site scripting

Answer

Brute force attack

Question 12

What is a critical first step in defending against cybersecurity threats?

Accepted Answer

Educating users about cybersecurity risks

Answer

Implementing strong firewalls

Answer

Installing antivirus software

Answer

Backing up important data

Question 13

What is the primary purpose of a firewall?

Accepted Answer

To block unauthorized access to a computer network

Answer

To back up data

Answer

To scan for and remove malware

Answer

To encrypt data

Question 14

Which of the following is a recommended practice for protecting against phishing attacks?

Accepted Answer

Never clicking on links or opening attachments from unknown senders

Answer

Disabling antivirus software

Answer

Using the same password for all online accounts

Question 15

Which of the following is a widely used algorithm for encrypting sensitive data?

Accepted Answer

AES-256

Answer

HTTP

Answer

MD5

Answer

TCP

Question 16

What is the primary purpose of the NIST Cybersecurity Framework?

Accepted Answer

To provide voluntary guidelines for managing cybersecurity risks

Answer

To provide software tools for protecting against cyber threats

Answer

To establish mandatory security requirements for businesses

Question 17

Which of the following is NOT a recommended practice for securing online accounts?

Accepted Answer

Using the same password for multiple accounts

Answer

Using strong, unique passwords

Answer

Enabling two-factor authentication

Answer

Changing passwords regularly

Question 18

Which type of malware encrypts files and demands a ransom payment to restore access?

Accepted Answer

Ransomware

Answer

Virus

Answer

Spyware

Answer

Phishing

Question 19

What is the primary purpose of social engineering attacks?

Accepted Answer

To deceive individuals into divulging sensitive information or performing actions that compromise security.

Answer

To infect systems with malicious software.

Question 20

Which of the following is the most common method of virus transmission?

Accepted Answer

Through email attachments or malicious website downloads.

Answer

Social media scams.

Answer

Physical contact with infected devices.

Question 21

As a first response to a cybersecurity incident, it is essential to:

Accepted Answer

Isolate affected systems and devices to prevent the spread of the threat.

Answer

Notify the public immediately.

Answer

Call law enforcement agencies.

Answer

Pay the ransom (if applicable).

Question 22

Which of the following is a recommended practice for mitigating phishing attacks?

Accepted Answer

Be cautious of suspicious emails and links. Never provide personal information without verifying the authenticity of the source.

Answer

Rely solely on antivirus software for protection.

Question 23

The primary objective of a DDoS attack is to:

Accepted Answer

Overwhelm a target system or service with excessive traffic, causing it to become unavailable.

Answer

Steal sensitive information from the target.

Answer

Install malware on the target system.

Question 24

Which of the following is a specific cybersecurity threat associated with cloud computing?

Accepted Answer

Data breaches due to misconfigurations or vulnerabilities in cloud infrastructure.

Answer

Targeted ransomware attacks on cloud storage.

Answer

Physical theft of cloud servers.

Question 25

What is the primary function of encryption in cybersecurity?

Accepted Answer

To safeguard data by converting it into an unreadable format, protecting it from unauthorized access and disclosure.

Answer

To detect and remove malware infections.

Answer

To block unauthorized access to networks.

Question 26

Which of the following is considered a fundamental principle of effective cybersecurity defense?

Accepted Answer

Defense in depth, employing multiple layers of security measures to mitigate threats from various angles.

Answer

Focusing exclusively on perimeter security.

Answer

Sole reliance on signature-based antivirus software.

Question 27

The main purpose of conducting risk assessments in cybersecurity is to:

Accepted Answer

Identify, analyze, and prioritize potential threats and vulnerabilities, allowing organizations to implement appropriate security measures based on risk.

Answer

Comply with industry regulations and standards.

Question 28

Which type of malware encrypts a victim's files and demands payment to restore access?

Accepted Answer

Ransomware

Answer

Trojan horse

Answer

Virus

Answer

Worm

Question 29

Which cyberattack exploits vulnerabilities in software to gain unauthorized access to a system?

Accepted Answer

Exploit

Answer

Malware

Answer

Phishing

Answer

DDoS attack

Question 30

Which type of cyberattack overwhelms a target system with a surge of traffic, rendering it inaccessible?

Accepted Answer

DDoS attack

Answer

Exploit

Answer

Malware

Answer

Phishing

Question 31

Which encryption approach utilizes two keys, one public and one private?

Accepted Answer

Asymmetric encryption

Answer

Symmetric encryption

Answer

Digital signature

Answer

Hash function

Question 32

Which technique is implemented to detect and respond to security incidents?

Accepted Answer

Security monitoring

Answer

Risk assessment

Answer

Vulnerability scanning

Answer

Patch management

Question 33

When creating robust passwords, which practice is recommended?

Accepted Answer

Incorporate a mix of upper and lower case letters, numbers, and symbols.

Answer

Reuse the same password across multiple accounts.

Answer

Keep passwords short and memorable.

Question 34

Which approach is commonly employed to mitigate social engineering attacks?

Accepted Answer

Educate users about social engineering techniques.

Answer

Use a VPN

Answer

Install antivirus software

Question 35

Which type of malware can encrypt a user's files and demand payment to decrypt them?

Accepted Answer

Ransomware

Answer

Adware

Answer

Spyware

Answer

Trojan horse

Question 36

What is the primary goal of social engineering attacks?

Accepted Answer

To manipulate individuals into revealing sensitive information or taking actions that compromise security

Answer

To steal financial data

Answer

To distribute malware

Question 37

Which measure is effective in preventing phishing attacks?

Accepted Answer

Avoid clicking on links or opening attachments in emails from unknown senders

Answer

Always keep software updated

Answer

Use a strong antivirus program

Question 38

What is the purpose of applying security patches?

Accepted Answer

To address vulnerabilities in software and systems, enhancing security

Answer

To block malicious emails

Answer

To protect against viruses

Question 39

Which practice is recommended for secure password management?

Accepted Answer

Create strong, unique passwords and change them periodically

Answer

Store passwords in a file on your computer

Answer

Reuse the same password for multiple accounts

Question 40

What is the main function of a firewall in cybersecurity?

Accepted Answer

To monitor and filter incoming and outgoing network traffic based on security rules

Answer

To encrypt emails

Answer

To back up data

Question 41

Which of the following is a potential consequence of a data breach?

Accepted Answer

Loss of customer trust and damage to reputation

Answer

Increased productivity

Answer

Enhanced cybersecurity measures

Question 42

Distinguish between a virus and a worm. What is the key difference in their behavior?

Accepted Answer

A virus relies on a host file to execute, while a worm is self-replicating

Answer

Viruses are more dangerous than worms

Answer

Worms are more dangerous than viruses

Question 43

Which of the following poses a security risk in cloud computing environments?

Accepted Answer

Data leakage

Answer

Hardware failures

Answer

Power outages

Question 44

Why is incident response planning crucial in cybersecurity?

Accepted Answer

It enables organizations to respond swiftly and effectively to cyber incidents, minimizing impact and recovery time

Answer

It prevents cyber incidents from happening

Answer

It ensures compliance with industry regulations

Question 45

Which of the following is a type of malware that locks access to files and demands payment to unlock them?

Accepted Answer

Ransomware

Answer

Virus

Answer

Worm

Answer

Trojan

Question 46

What is the name of the technique where attackers use deception to trick people into revealing sensitive information?

Accepted Answer

Social engineering

Answer

Spamming

Answer

Phishing

Answer

Spoofing

Question 47

Which of the following is NOT a recommended practice to protect against cybersecurity threats?

Accepted Answer

Ignoring software updates

Answer

Using strong and unique passwords

Answer

Installing reputable antivirus software

Answer

Backing up data regularly

Question 48

What is the term used to describe an unauthorized attempt to gain access to or exploit a computer system?

Accepted Answer

Hacking

Answer

Data Breach

Answer

DDoS Attack

Answer

Malware Infection

Question 49

Which type of cybersecurity threat involves flooding a target system with excessive traffic to disrupt its normal operation?

Accepted Answer

DDoS Attack

Answer

Phishing

Answer

Ransomware

Answer

MITM Attack

Question 50

What is the primary purpose of a firewall in cybersecurity?

Accepted Answer

To monitor and control incoming and outgoing network traffic

Answer

To prevent the spread of malware

Answer

To back up critical files

Answer

To encrypt sensitive data

Question 51

What is a common type of cybercrime where attackers illegally obtain and misuse personal information for fraudulent purposes?

Accepted Answer

Identity theft

Answer

Hacking

Answer

Malware attack

Answer

Data breach

Question 52

Which of the following is a key ethical consideration in ethical hacking?

Accepted Answer

Performing vulnerability assessments with consent and for legitimate purposes

Answer

Exploiting system vulnerabilities for financial gain

Answer

Hacking into systems without authorization

Question 53

What is the overall goal of cybersecurity incident response?

Accepted Answer

To minimize damage, restore normal operations, and prevent future incidents

Answer

To identify and prosecute attackers

Answer

To recover stolen data