1.4 - Forms Of Attack

Multiple Choice

What is social engineering?

• A network security protocol

• A type of malware designed to disrupt systems

• The manipulation of individuals by hackers to obtain confidential and personal information

• A method of encrypting data

Multiple Choice

Which of the following is NOT a form of cyber attack listed in the slides?

• Malware

• Phishing

• Firewall

• SQL Injection

Open Ended

List the forms of attacks mentioned

Multiple Select

Which of the following are forms of attack on computer systems and networks?

• Malware

• Phishing

• Encryption

• Brute-force attacks

Multiple Choice

Which of the following is a common goal of phishing attacks?

• To trick users into revealing personal information

• To overload a server with traffic

• To crack password encryption

• To use software to automate attacks

Fill in the Blank

Malicious software is also known as ___.

Multiple Select

Which of the following are types of malware?

• Viruses

• Trojans

• Phishing

• Ransomware

Fill in the Blank

A brute force attack tries all possible ___ or key combinations to access a system or network.

Open Ended

Explain how brute force attacks and phishing differ in their approach to obtaining sensitive information.

Open Ended

Explain how malware can be used to commit fraud and identity theft, using information from the slides.

Multiple Select

Which of the following are key characteristics of a brute force attack?

• Trial and error method

• Using a computer program to automate attempts

• Flooding a server with traffic

• Decoding encrypted passwords

Open Ended

Explain how phishing attacks trick users into revealing personal information. Use details from the images to support your answer.

Multiple Choice

Which of the following could be considered a form of attack on computer systems and networks?

• Phishing

• Regular software updates

• Data backup

• Strong password usage

Multiple Choice

What is the main goal of a phishing attack?

• To steal sensitive information through deception

• To damage hardware

• To speed up computer processes

• To update software automatically

Multiple Choice

Which of the following types of information are commonly targeted by phishing forms?

• Usernames, passwords, and credit/debit card details

• Only usernames

• Only passwords

• Only credit/debit card details

Open Ended

Compare and contrast malware and phishing as forms of cyber attack. What are their main differences and similarities?

Multiple Select

Which of the following are characteristics of a brute force attack?

• Trial and error method

• Use of computer programs to automate attempts

• Flooding a server with excessive traffic

• Decoding encrypted passwords

Fill in the Blank

A brute force attack is a hacking method where an attacker tries all possible ___ or key combinations to access a system or network without permission.

Open Ended

Describe the main steps involved in a denial of service (DoS/DDoS) attack as shown in the image.

Open Ended

What are the main steps involved in a Denial of Service (DoS) attack as shown in the diagram?

Multiple Choice

What is the main goal of a Denial of Service (DoS) attack?

• To overload a server and make it unavailable

• To steal sensitive data from a server

• To encrypt files and demand ransom

• To guess passwords using brute force

Multiple Choice

Which of the following statements best describes a Denial of Service (DoS) attack?

• It floods a server with fake traffic, causing it to become overloaded and unavailable.

• It tricks users into revealing their passwords.

• It uses trial and error to decode encrypted data.

• It disguises as a trusted company to steal information.

Fill in the Blank

A technique known as ___ is used to monitor traffic on a network to pick out unencrypted passwords and configuration information.

Multiple Select

Which of the following are steps involved in data interception and theft?

• Monitoring data streams

• Flooding a server with fake traffic

• Gathering sensitive information

• Exploiting vulnerabilities in databases

Open Ended

Explain how an attacker can use SQL injection to gain unauthorized access to data in a database.

Multiple Choice

Which vulnerability does SQL injection exploit?

• Poorly coded database applications

• Weak passwords

• Unencrypted network traffic

• Outdated operating systems

Multiple Choice

Which of the following best describes phishing?

• Sending emails pretending to be from reputable companies to trick individuals into revealing personal information

• Flooding a server with useless traffic

• Monitoring network traffic to steal passwords

• Inserting code into text boxes to manipulate databases

Open Ended

Explain how network sniffing can be used by attackers to obtain sensitive information from a target.

Multiple Choice

Which of the following is NOT a typical form of attack on network security?

• Phishing

• Malware

• Firewall

• Denial of Service

Open Ended

What are some common threats to computer systems and networks that you learned about in this lesson?

Multiple Choice

Which of the following best describes the process of data interception and theft?

• An attacker monitors data streams to gather sensitive information.

• A user encrypts their data before sending it over the network.

• A server blocks all incoming connections.

• A firewall scans outgoing emails for viruses.

Open Ended

Evaluate the potential impact of cyber attacks such as malware, phishing, and brute force on organisations and networks.

Multiple Choice

Which of the following is NOT a form of cyber attack mentioned in the lesson objectives?

• Malware

• Phishing

• Brute Force

• Firewall

Multiple Select

Which of the following are characteristics of SQL injection attacks?

• They exploit vulnerabilities in database applications.

• They require code to be entered into text boxes.

• They only affect encrypted data streams.

• They are used to attack data-driven applications.

Open Ended

Why is network security important for individuals and organizations in today's digital world?

Fill in the Blank

SQL injection exploits vulnerabilities in poorly coded ___ applications.

Multiple Choice

What is the main goal of a brute-force attack?

• To guess passwords or PIN numbers by trying many combinations.

• To monitor network traffic for sensitive data.

• To flood a server with useless traffic.

• To insert malicious code into a database.

Open Ended

Compare and contrast malware and phishing as forms of cyber attack. How do their methods and targets differ?

Multiple Choice

Which of the following is NOT a form of attack on network security?

• Phishing

• Malware

• Firewall

• Denial of Service

Open Ended

What are some common threats to computer systems and networks discussed in this lesson?