Ethical Hacking - U1

Which of the following best differentiates a threat from a vulnerability?

• A threat is an internal flaw; a vulnerability is an external actor.

• A threat is a potential danger; a vulnerability is a weakness that could be exploited.

• A threat is a specific exploit code; a vulnerability is a type of malware.

• A threat is an active attack; a vulnerability is always passive.

In a secure system, accountability ensures:

• Only verified users gain access

• Actions of users can be traced uniquely to them

• All access is encrypted

• No data is ever deleted

What is the main goal of confidentiality in the CIA triad?

• Ensuring timely access to data

• Ensuring data is not tampered with

• Ensuring unauthorized users cannot access sensitive data

• Ensuring data is backed up regularly

Which of the following is a violation of confidentiality?

• A DDoS attack

• An unauthorized user viewing patient records

• Data loss due to hardware failure

• A corrupted file from malware

What does integrity in the CIA triad ensure?

• Data is accessible to all users

• Data is encrypted at rest

• Data is accurate and unaltered

• Data is always available

A file was changed without authorization. Which principle has been violated?

• Confidentiality

• Integrity

• Availability

• Accountability

Which scenario represents an integrity breach?

• Hackers flood a web server to crash it

• Password database is leaked

• An attacker alters transaction logs without detection

• System fails to boot after a power outage

What does availability in the CIA triad aim to guarantee?

• Data is accessed only by those who have permission

• Data remains correct and unmodified

• Authorized users have timely access to information and systems

• All traffic is encrypted

Which of the following is a threat to availability?

• Packet sniffing

• SQL injection

• Distributed Denial of Service (DDoS) attack

• Man-in-the-middle attack

Which of the following is an example of a passive attack?

• Modifying packets in transit between two hosts

• Sniffing network traffic to capture credentials

• Injecting malicious SQL statements into a database

• Denial of Service attack on a web server