BCP221 Network Security Quiz

What does the 'C' in the CIA Triad stand for?

• Connection
• Confidentiality
• Cryptography
• Certification

Answer explanation

Confidentiality ensures that only authorized people can read the data.

Which component of the CIA Triad ensures that data hasn't been changed during transit?

• Confidentiality
• Integrity
• Availability
• Authorization

Answer explanation

Integrity guarantees that the data received is exactly the data that was sent, without modification.

What does 'Availability' mean in the context of the CIA Triad?

• The source code is open to the public.
• The service is up and running when needed.
• The network is free to use.
• Passwords are easy to remember.

Answer explanation

Availability ensures that systems and data are accessible to authorized users when they need them.

Which attack involves someone passively 'listening' to your socket data on the network?

• Eavesdropping (Packet Sniffing)
• Denial of Service (DoS)
• SQL Injection
• Phishing

Answer explanation

Eavesdropping involves capturing packets on a network using a sniffer, violating Confidentiality.

What is a 'Man-in-the-Middle' (MITM) attack?

• A server crashing due to overload.
• An attacker intercepting and altering communication between client and server.
• A user forgetting their password.
• A virus deleting files.

Answer explanation

In a MITM attack, the attacker sits between the two parties, compromising both Confidentiality and Integrity.

Which attack aims to crash a server by flooding it with too many requests?

• Eavesdropping
• MITM
• DoS (Denial of Service)
• Ransomware

Answer explanation

A DoS attack targets the Availability of a system by overwhelming its resources.

Why is using standard Python sockets considered vulnerable by default?

• They use too much CPU.
• They transmit data in Plaintext.
• They only work on local networks.
• They automatically share passwords.

Answer explanation

Standard sockets do not encrypt data. Anyone with a network sniffer can read Plaintext transmissions.

What is a 'Sniffer' tool (e.g., Wireshark)?

• A tool that encrypts hard drives.
• A tool that reads and captures unencrypted messages on a network.
• A type of firewall.
• An antivirus program.

Answer explanation

Sniffers passively monitor and capture network traffic, making plaintext data highly vulnerable.

Which encryption method uses the SAME key to lock and unlock data?

• Symmetric Encryption
• Asymmetric Encryption
• Hashing
• Steganography

Answer explanation

Symmetric encryption is fast because it uses a single shared secret key for both encryption and decryption.

Which encryption method uses a Public Key to lock and a Private Key to unlock?

• Symmetric Encryption
• Asymmetric Encryption
• Hashing
• Encoding

Answer explanation

Asymmetric encryption uses a pair of keys, solving the problem of securely sharing a single key.