CST06 - Hacking History

What is a buffer overflow?

• Writing more data than a memory space can hold

• A type of firewall that blocks excess traffic

• A method of compressing game files

• A tool used to emulate old hardware

Why is the Online Safety Act causing confusion for smaller companies?

• They are unsure how to implement age verification

• It bans all VPN usage in the UK

• It requires them to stop using encryption

• It mandates the use of open-source software

Why do some malware samples avoid running in virtual machines?

• They detect the environment and avoid analysis

• They require physical hardware to function

• They are too large to run in memory

• They are designed only for mobile devices

Why did Nintendo include their logo in the Game Boy boot process?

• To enable legal action against unauthorised copies

• To improve game loading speed

• To display branding for marketing

• To verify the user’s identity

What is a benefit of using low-level emulation (LLE)?

• It closely mimics the original hardware behaviour

• It runs faster than high-level emulation

• It requires less memory to operate

• It automatically updates the software

What is the purpose of a bootstrap in an exploit?

• To load the minimum code needed to start an attack

• To reset the system to factory settings

• To encrypt the target’s data

• To verify the user’s credentials

Why is reverse engineering important in the field of cybersecurity?

• It allows analysts to discover vulnerabilities in software

• It ensures all software is open source

• It automatically updates all security patches

• It removes the need for secure passwords

Scenario: A user modifies a QR code in a game to gain system access. What type of exploit is this?

• Buffer overflow

• Phishing

• Social engineering

• Brute force

What is the purpose of the Trusted Platform Module (TPM) in devices?

• To securely store encryption keys

• To increase processing speed

• To manage user accounts

• To connect to wireless networks

Scenario: A user exploits a game’s name entry field to run custom code. What is the likely vulnerability being used?

• Buffer overflow

• SQL injection

• Cross-site scripting

• Man-in-the-middle