Cybersecurity Flashcard

Front

Which of the following is a type of attack that uses multiple systems to flood a target with traffic, causing it to crash? Phishing, DoS (Denial of Service), DDoS (Distributed Denial of Service), Spoofing

Back

DDoS (Distributed Denial of Service)

Answer explanation

A DDoS (Distributed Denial of Service) attack uses multiple systems to overwhelm a target with traffic, leading to its crash. In contrast, DoS involves a single source, while phishing and spoofing are different types of attacks.

Front

What is the primary goal of a man-in-the-middle (MITM) attack?

Back

Intercepting and altering communications

Answer explanation

The primary goal of a man-in-the-middle (MITM) attack is intercepting and altering communications between two parties without their knowledge, allowing the attacker to manipulate the data being exchanged.

Front

Which type of malware disguises itself as a legitimate software to deceive users?

Back

Trojan

Answer explanation

A Trojan is a type of malware that pretends to be legitimate software, tricking users into installing it. Unlike worms or ransomware, Trojans do not replicate themselves but can cause significant harm once activated.

Front

Which of the following is a vulnerability scanner used to identify known vulnerabilities in a network? Nmap, Wireshark, Nessus, NetFlow

Back

Nessus

Answer explanation

Nessus is a widely used vulnerability scanner that identifies known vulnerabilities in a network. In contrast, Nmap is a network mapper, Wireshark is a packet analyzer, and NetFlow is a network traffic analysis tool.

Front

Which of the following security models is based on the principle of least privilege? Bell-LaPadula, Clark-Wilson, Brewer-Nash, Role-Based Access Control (RBAC)

Back

Role-Based Access Control (RBAC)

Answer explanation

Role-Based Access Control (RBAC) is based on the principle of least privilege, allowing users to access only the resources necessary for their role, thereby minimizing potential security risks.

Front

What is the primary purpose of network segmentation?

Back

To separate different types of data and systems

Answer explanation

The primary purpose of network segmentation is to separate different types of data and systems, enhancing security and performance by isolating traffic and reducing the risk of data breaches.

Front

Which of the following controls is used to ensure that only authorized users have access to resources? Preventive controls, Detective controls, Corrective controls, Access control

Back

Access control

Answer explanation

Access control is specifically designed to ensure that only authorized users can access resources, making it the correct choice. Preventive, detective, and corrective controls serve different purposes in security management.

Front

Which of the following protocols is used to secure communication between a web browser and a server? HTTP, HTTPS, FTP, POP3

Back

HTTPS

Answer explanation

HTTPS (Hypertext Transfer Protocol Secure) is the protocol that secures communication between a web browser and a server by encrypting the data, unlike HTTP, which is not secure. FTP and POP3 serve different purposes.

Front

Which of the following technologies can be used to encrypt data in transit? RSA, IPSec, AES, DES

Back

IPSec

Answer explanation

IPSec is specifically designed to secure Internet Protocol communications by encrypting data in transit. RSA, AES, and DES are encryption algorithms, but they do not directly secure data in transit like IPSec does.

Front

What is the purpose of multi-factor authentication (MFA)?

Back

To provide higher levels of security by requiring multiple forms of verification

Answer explanation

The purpose of multi-factor authentication (MFA) is to provide higher levels of security by requiring multiple forms of verification, making it harder for unauthorized users to gain access.