Cybersecurity Knowledge Quiz

Which type of malware is specifically designed to provide an attacker with remote control over an infected system?

• Ransomware

• Rootkit

• RAT (Remote Access Trojan)

• Logic Bomb

Which of the following is considered a passive attack?

• Man-in-the-middle

• SQL Injection

• Eavesdropping

• Denial-of-Service

An attacker sends a user a link that appears to come from a trusted source. When clicked, it prompts the user to enter credentials into a fake login page. What type of attack is this?

• Spoofing

• Whaling

• Phishing

• Smishing

Which of the following best describes a zero-day vulnerability?

• A vulnerability already patched by the vendor

• A flaw that is publicly disclosed but not yet exploited

• A vulnerability that has not been discovered by attackers

• A vulnerability that is unknown to the vendor and exploited before a patch is available

What kind of attack exploits the trust a user has in a website by injecting unauthorized commands via a browser?

• SQL Injection

• Cross-Site Request Forgery (CSRF)

• Directory Traversal

• Cross-Site Scripting (XSS)

Which of the following is a mitigation against brute force attacks?

• Input validation

• Account lockout policies

• Digital signatures

• Content filtering

What type of vulnerability allows an attacker to execute arbitrary code with administrative privileges on a system?

• Buffer overflow

• URL redirection

• Session hijacking

• DLL injection

What is the primary goal of a DDoS (Distributed Denial-of-Service) attack?

• Steal sensitive data

• Modify website content

• Make a service unavailable to users

• Intercept encrypted communication

Which of the following best describes tailgating?

• Unauthorized access by following someone into a restricted area

• Monitoring network traffic

• Exploiting software vulnerabilities

• Phishing for sensitive information

Which security control is MOST effective at detecting unauthorized changes to system files?

• Antivirus

• Host-based Intrusion Detection System (HIDS)

• Firewall

• SIEM correlation rule