Cybersecurity Quiz

What is Phishing?

• A type of malware that encrypts files and demands payment

• The practice of sending emails pretending to be from reputable companies to induce individuals to reveal personal information

• An attack that makes a machine or network resource unavailable to its intended users

• Software designed to disrupt, damage, or gain unauthorized access to a computer system

Answer explanation

Phishing is the practice of sending emails pretending to be from reputable companies to induce individuals to reveal personal information.

Which of the following is a characteristic of Ransomware?

• It steals personal information for identity theft

• It encrypts files and demands payment for the decryption key

• It secretly records the keystrokes of the user

• It is used to perform a distributed denial-of-service attack

Answer explanation

Ransomware encrypts files and demands payment for the decryption key, making it a characteristic of this type of malware.

DDoS attacks are designed to:

• Encrypt vital data and files until a ransom is paid

• Send out fraudulent emails from a trusted entity

• Prevent legitimate users from accessing a service

• Exploit previously unknown vulnerabilities in software

Answer explanation

DDoS attacks are designed to prevent legitimate users from accessing a service, causing disruption by overwhelming the target with a flood of traffic.

Social engineering involves manipulating individuals into breaking security procedures.

• True

• False

Answer explanation

The statement is true because social engineering involves manipulating individuals to bypass security measures.

Zero-day exploits are attacks that occur after a security vulnerability has been fixed.

• True

• False

Answer explanation

Zero-day exploits actually occur before a security vulnerability is fixed, making the statement false.

Identify the cyber threat described as a malicious software designed to disrupt, damage, or gain unauthorized access to a computer system.

• DDoS Attack

• Spyware

• Malware

• Trojan Horse

Answer explanation

The correct choice is Malware, which is a malicious software designed to disrupt, damage, or gain unauthorized access to a computer system.

John receives an email from what seems to be his bank, asking him to update his personal information through a provided link. Suspecting this might be a scam, what should John do first?

• Click on the link to see if it looks legitimate

• Reply to the email asking for more details

• Forward the email to his friends to get their opinion

• Contact his bank through official channels to verify the email's legitimacy

Answer explanation

John should contact his bank through official channels to verify the email's legitimacy, as this is the safest way to confirm if the email is a scam or not.

Your company has been hit by a ransomware attack. What is the first step you should take?

• Pay the ransom immediately to get your files back

• Try to decrypt the files yourself using software found on the internet

• Disconnect your computer from the network to prevent the spread of the ransomware

• Delete all your files to prevent the attackers from using them

Answer explanation

Disconnect your computer from the network to prevent the spread of the ransomware

What is the primary purpose of Two-Factor Authentication (2FA)?

• To double the password strength of an account

• To encrypt files twice for extra security

• To require a second form of verification to increase account security

• To backup data in two separate locations

Answer explanation

The primary purpose of Two-Factor Authentication (2FA) is to require a second form of verification to increase account security.

Which of the following is a common indicator of a phishing attempt?

• An email that addresses you by your full name and has no spelling errors

• An email that comes from a public domain email address and asks for personal information

• A text message that contains only known facts about you

• A phone call from a number that exactly matches a company's official number

Answer explanation

The correct choice is an email that comes from a public domain email address and asks for personal information, as this is a common indicator of a phishing attempt.