Cybersecurity Concepts and Threats

What type of cyberattack involves sending fraudulent emails that appear to be from a legitimate source to trick recipients into revealing sensitive information?

• Malware attack

• Man-in-the-middle attack

• Phishing attack

• Password attack

Which cyberattack involves a hacker secretly intercepting the communication line between a user's device and a website server, often by taking over the user's IP address?

• Distributed Denial of Service (DDoS) attack

• Man-in-the-middle attack

• SQL Injection attack

• Malware attack

What cybersecurity practice involves creating dummy computer systems designed to appear vulnerable, thereby attracting attackers and protecting the real systems?

• Implementing a firewall

• Using antivirus software

• Deploying honeypots

• Employing strong alphanumeric passwords

What is the primary goal of an Advanced Persistent Threat (APT) in the context of cyberattacks on organizations?

• To flood networks with traffic, causing service disruptions.

• To gain prolonged access to networks for continuously acquiring confidential information.

• To manipulate standard SQL queries in a database-driven website.

• To trick users into downloading malicious software through suspicious attachments.

Which cybersecurity professional is primarily responsible for identifying network vulnerabilities by simulating attacks, similar to a malicious hacker, but with the intent to resolve these weaknesses?

• Chief Information Security Officer (CISO)

• Security Architect

• Ethical Hacker

• Network Administrator