Cybersecurity Quiz

The employees in a company receive an email stating that the account password will expire immediately and requires a password reset within 5 minutes. Which statement would classify this email?

• It is a DDoS attack.

• It is an impersonation attack.

• It is a hoax.

• It is a piggy-back attack.

What type of attack targets an SQL database using the input field of a user?

• XML injection

• buffer overflow

• Cross-site scripting

• SQL injection

A cyber criminal sends a series of maliciously formatted packets to the database server. The server cannot parse the packets and the event causes the server to crash. What is the type of attack the cyber criminal launches?

• SQL injection

• packet Injection

• man-in-the-middle

• DoS

What is the first line of defense to protect a device from improper access control?

• end user license agreement (EULA)

• encryption

• passwords

• shredding

A security service company is conducting an audit in several risk areas within a major corporate client. What attack or data loss vector term would be used to describe providing access to corporate data by gaining access to stolen or weak passwords?

• an internal threat

• hard copy

• improper access control

• unencrypted devices

A social media site is describing a security breach in a sensitive branch of a national bank. In the post, it refers to a vulnerability. What statement describes that term?

• The likelihood that a particular threat will exploit a vulnerability of an asset and result in an undesirable consequence.

• A weakness in a system or its design that could be exploited by a threat.

• The actions that are taken to protect assets by mitigating a threat or reducing risk.

• The potential damage to the organization that is caused by the threat.

Which three IPv4 header fields have no equivalent in an IPv6 header? (Choose three.)

• TTL

• fragment offset

• identification

• protocol

• • flag

What kind of ICMP message can be used by threat actors to create a man-in-the-middle attack?

• ICMP redirects

• ICMP unreachable

• ICMP echo request

• ICMP mask reply

Which term describes a field in the IPv4 packet header used to detect corruption in the IPv4 header?

• version

• header checksum

• protocol

• destination IPv4 address

Which type of network attack involves randomly opening many Telnet requests to a router and results in a valid network administrator not being able to access the device?

• man-in-the-middle

• spoofing

• SYN flooding

• DNS poisoning