BYTEQUEST Round 2: "Vidya-Vaibhav" - CyberSecurity

In the digital age, Sentinel is the backbone of global cybersecurity, protecting sensitive data and ensuring the integrity of crucial systems worldwide. Recently, a sophisticated cyber-attack has targeted Sentinel, threatening to compromise its defenses. A team of skilled cybersecurity experts is called in to restore order and secure the system before it’s too late.

Your mission is to navigate through Sentinel’s defenses, identify vulnerabilities, and implement solutions to fortify the system. Each question you solve brings you one step closer to securing Sentinel and safeguarding global security.

Multiple Choice

To prevent unauthorized devices from accessing Sentinel's network, the team should implement Network Access Control (NAC). What is the primary function of NAC in this context?

• Encrypts data during transmission

• Blocks all incoming traffic except what is explicitly allowed

• Verifies the identity and authorization of devices attempting to connect

• Converts domain names into IP addresses

Multiple Choice

A security policy that requires users to change their passwords regularly is called a __________ policy.

• Rotation
• Password expiration

• Access control

• Multi-factor authentication

Multiple Choice

The team discovers that Sentinel's website is under attack by overwhelming traffic, causing it to become inaccessible. This type of attack is known as a __________.

• Phishing

• Distributed Denial of Service (DDoS)

• SQL Injection

• Man-in-the-Middle

Multiple Choice

When users are given the least amount of access needed to perform their job, this is known as the principle of _____ .

• least privilege
• Maximum security

• Role-based access

• User authorization

Multiple Choice

To ensure data is unreadable to unauthorized users during transmission, the team should implement __________.

• Encryption

• Compression

• Decryption

• Conversion

Multiple Choice

Sentinel's system requires a security patch. This patch is a type of __________ that fixes vulnerabilities.

• Update
• Hotfix

• Patch

• Firmwar

Multiple Choice

The team notices unusual login attempts from different locations in a short period. This could be a sign of a __________ attack.

• Brute force

• Phishing

• Distributed Denial of Service (DDoS)

• Credential stuffing

Multiple Choice

To prevent data from being intercepted during transmission, Sentinel uses __________ to create a secure tunnel over the internet.

• VPN
• Encryption

• Firewall

• IDS

Multiple Choice

An attacker who disguises themselves as a legitimate service to steal sensitive information is performing a __________ attack.

• Phishing

• Spoofing

• Sniffing

• Man-in-the-Middle

Multiple Choice

To keep track of who accessed what data and when, Sentinel uses __________ logs.

• Audit
• System

• End-to-End

• Access

Multiple Choice

Sentinel's firewall blocks all incoming traffic except what is explicitly allowed. This is an example of a __________ firewall policy.

• Blacklist

• Whitelist

• Open

• Closed

Multiple Choice

When attackers exploit a vulnerability in software before the vendor has released a fix, this is called a __________ attack.

• Zero Day

• Buffer Overflow

• Social Engineering

• Replay

Multiple Choice

Sentinel encrypts all data stored on its servers. This type of encryption is known as __________ encryption.

• At Rest

• In-Transit

• Symmetric

Multiple Choice

To ensure that only legitimate software is installed on Sentinel, the team uses __________ certificates to verify the software’s authenticity.

• Digital
• SSL

• Encryption

• Security

Multiple Choice

An attacker hides malicious code within a seemingly harmless program. This type of malware is called a __________.

• Virus

• Worms

• Trojan

• Spyware

Multiple Choice

Sentinel uses a __________ to translate domain names into IP addresses, making it easier to navigate the internet securely.

• DNS
• DHCP

• NAT

• IPsec

Multiple Choice

The team discovers that Sentinel's database has been injected with malicious code through a web form. This attack is known as __________.

• SQL injection
• Cross-Site Scripting (XSS)

• Buffer Overflow

• Clickjacking

Multiple Choice

To ensure that Sentinel can recover from a disaster, the team implements a __________ plan.

• Backup

• Security

• Mitigation

• Contigency

Multiple Choice

The process of converting encrypted data back into its original form is called __________.

• Decryption

• Encoding

• Encryption

• Decoding

Multiple Choice

The team needs to ensure that data cannot be altered without detection. This principle is known as data __________.

• Integrity

• Availability

• Confidentiality

• Authentication