Understanding Cybersecurity Threats

What is a brute force attack?

• Inserting malicious SQL code into a database query.

• Trying all possible combinations of passwords, keys, etc.

• Injecting malicious scripts into web pages.

• Overwriting memory locations with malicious data.

Which attack involves inserting malicious SQL code into a database query?

• Cross-Site Scripting (XSS)

• SQL injection

• Buffer overflow

• Directory traversal

What is Cross-Site Scripting (XSS)?

• Making malicious requests on behalf of a user.

• Executing arbitrary code on a remote system.

• Injecting malicious scripts into web pages viewed by other users.

• Interception and manipulation of network communications.

Which attack involves making malicious requests on behalf of a user without their knowledge?

• Cross-Site Request Forgery (CSRF)

• Man-in-the-middle (MitM) attacks

• Denial of Service (DoS)

• Social engineering

What is a buffer overflow?

• Overwriting memory locations with malicious data to exploit vulnerabilities.

• Attempting to access restricted files or directories.

• Overwhelming a system with traffic.

• Manipulating individuals into divulging confidential information.

Which attack involves executing arbitrary code on a remote system?

• Directory traversal

• Remote Code Execution (RCE)

• Cross-Site Scripting (XSS)

• SQL injection

What is directory traversal?

• Interception and manipulation of network communications.

• Attempting to access restricted files or directories on a system.

• Making malicious requests on behalf of a user.

• Overwriting memory locations with malicious data.

Which attack involves interception and manipulation of network communications between two parties?

• Man-in-the-middle (MitM) attacks

• Denial of Service (DoS)

• Social engineering

• Buffer overflow

What is the goal of a Denial of Service (DoS) attack?

• To execute arbitrary code on a remote system.

• To overwhelm a system with traffic to make it unavailable to users.

• To insert malicious SQL code into a database query.

• To manipulate individuals into divulging confidential information.

Which attack involves manipulating individuals into divulging confidential information?

• Social engineering

• Cross-Site Request Forgery (CSRF)

• Directory traversal

• Remote Code Execution (RCE)