Cybersecurity Knowledge Quiz

Which of the following is an example of a social engineering attack?

• DDoS

• Phishing

• ARP Spoofing

• Buffer Overflow

Answer explanation

Phishing is a social engineering attack where attackers deceive individuals into providing sensitive information, such as passwords or credit card details, often through fraudulent emails or websites. It exploits human psychology.

What does a logic bomb rely on to trigger execution?

• External command

• Specific condition or event

• Network connection

• Root access

Answer explanation

A logic bomb is triggered by a specific condition or event, such as a date or user action, rather than requiring external commands, network connections, or root access. This makes 'Specific condition or event' the correct choice.

Which attack intercepts traffic between two systems to spy or modify data?

• Smurf attack

• DNS poisoning

• Man-in-the-middle

• Replay attack

Answer explanation

The correct answer is 'Man-in-the-middle' as it describes an attack that intercepts communication between two systems, allowing an attacker to spy on or alter the data being transmitted.

Which malware is designed to spread without user interaction?

• Trojan

• Worm

• Rootkit

• Logic bomb

Answer explanation

A worm is a type of malware that can replicate itself and spread to other computers without any user interaction, unlike Trojans, rootkits, and logic bombs, which require some form of user action to activate.

What kind of attack floods a server with more requests than it can handle?

• SQL Injection

• DoS

• XSS

• Smishing

Answer explanation

A DoS (Denial of Service) attack overwhelms a server with excessive requests, causing it to slow down or crash. This is distinct from SQL Injection, XSS, and Smishing, which target data or users rather than server capacity.

What is the main purpose of a penetration test?

• Encrypt data

• Simulate attacks to find vulnerabilities

• Install antivirus

• Remove threats

Answer explanation

The main purpose of a penetration test is to simulate attacks to find vulnerabilities in a system. This helps organizations identify and address security weaknesses before they can be exploited by malicious actors.

An attacker uses multiple compromised systems to target a single system. This is known as:

• Man-in-the-middle

• DDoS

• Zero-day

• Session hijacking

Answer explanation

A DDoS (Distributed Denial of Service) attack involves multiple compromised systems targeting a single system to overwhelm it, causing disruption. This distinguishes it from other attack types like man-in-the-middle or session hijacking.

Which of the following is a passive attack?

• Data deletion

• Eavesdropping

• Ransomware

• Keylogging

Answer explanation

Eavesdropping is a passive attack where an unauthorized party listens to private communications without altering them. In contrast, data deletion, ransomware, and keylogging are active attacks that involve interference with data.

Which is the BEST defense against phishing attacks?

• Antivirus

• Firewall

• IDS

• User awareness training

Answer explanation

User awareness training is the best defense against phishing attacks as it educates individuals to recognize and avoid suspicious emails and links, reducing the likelihood of falling victim to such scams.

A zero-day vulnerability is:

• Already patched

• Unknown to the vendor

• Public knowledge

• An outdated risk

Answer explanation

A zero-day vulnerability is a security flaw that is unknown to the vendor, meaning they have not yet developed a patch. This makes it particularly dangerous as it can be exploited before the vendor is aware of it.