Cyber Challenge Final Round

What is the primary purpose of a "canary" in cybersecurity?

• To detect SQL injection attempts

• To serve as a decoy for attackers (honeypot)

• To monitor memory corruption in stack-based buffer overflows

• To encrypt sensitive data in transit

Which of the following is NOT a common use of steganography?

• Hiding malware in image files

• Concealing data within DNS queries

• Encrypting emails with PGP

• Embedding secret messages in audio files

In Linux, what does the command chmod 4755 set on a file?

• Read, write, execute for owner; read & execute for group/others

• Read, write, execute for owner; SUID bit set

• Full permissions for owner, read-only for others

• SUID bit with execute permissions for all

Which attack exploits the race condition between checking and using a resource?

• XSS

• TOCTOU

• CSRF

• ARP poisoning

What does the term "Living Off the Land" (LOTL) refer to in cybersecurity?

• Using cloud services for anonymity

• Attackers using legitimate system tools for malicious purposes

• Harvesting credentials from phishing sites

• Exploiting zero-day vulnerabilities

Which Linux command lists all open files and the processes using them?

• netstat -tuln

• lsof

• ps aux

• ss -a

What is the main risk of a "Pass-the-Hash" attack?

• Brute-forcing password hashes offline

• Bypassing authentication using stolen hash values

• Exploiting weak hash algorithms like MD5

• Intercepting hashes in transit

Which of the following is NOT a valid method to prevent CSRF attacks?

• Using SameSite cookies

• Implementing CAPTCHAs

• Adding CSRF tokens

• Disabling JavaScript

What does the Linux command grep -r "password" /etc/ do?

• Searches for the word "password" recursively in /etc/

• Replaces "password" with "********" in /etc/

• Lists all files in /etc/ containing passwords

• Encrypts passwords in /etc/shadow

Which cryptographic attack exploits small differences in encryption time?

• Birthday attack

• Timing attack

• Rainbow table attack

• Meet-in-the-middle attack