WorksheetsQuiz 1 - Malicious Software
Total questions: 14
Worksheet time: 7mins
In the CIA Triad, "Confidentiality" means ensuring that data is:
available and that people can access it
not accessible by unwanted parties
accessible anonymously
accurate and was not tampered with
In the CIA Triad, "Integrity" means ensuring that data is:
available and that people can access it
not accessible by unwanted parties
trhuthful and honest
accurate and was not tampered with
In the CIA Triad, "Availability" means ensuring that data is:
available to anyone from anywhere
not accessible by unwanted parties
available and people can access it
accurate and was not tampered with
What's the relationship between a vulnerability and an exploit?
An exploit takes advantages of a vulnerability to run arbitrary code or gain access
A vulnerability takes advantages of an exploit to run arbitrary code or gain access
They're unrelated
An exploit creates a vulnerability in a system
Which statement is true for both a worm and a virus?
They don't cause any harm to the target system.
They're self-replicating and self-propagating.
They're undetectable by antimalware software.
They infect other files with malicious code.
Check all examples of types of malware:
Adware
Worms
Key Generators
Viruses
What are the characteristics of a rootkit? Check all that apply.
Provides elevated credentials
Is harmless
is difficult to detect
Is destructive
What are the dangers of a man-in-the-middle attack? Check all that apply.
An attacker can destroy data at rest
An attacker can modify traffic in transit
An attacker can eavesdrop on unencrypted traffic
An attacker can block or redirect traffic
Why is a DNS cache poisoning attack dangerous? Check all that apply.
It allows an attacker to redirect targets to malicious webservers
It allows an attacker to remotely control your computer
Errr...it's not actually dangerous
It affects any clients querying the poisoned DNS server
Which of the following is true of a DDoS attack?
Attack traffic comes from lots of different hosts
This type of attack causes a significant loss of data
Attack traffic is encrypted
An attacker sends attack traffic directly to the target
Which of the following result from a denial-of-service attack? Check all that apply.
Service unreachable
Slow network performance
Data destruction
Malware infection
How can you protect against client-side injection attacks? Check all that apply.
Use data sanitization
Utilize strong passwords
Use a SQL database
Use input validation
Use a NoSQL database
True or false: A brute-force attack is more efficient than a dictionary attack.
TRUE
FALSE
Which of the following scenarios are social engineering attacks? Check all that apply.
You receive an email with an attachment containing a virus
An attacker performs a DNS Cache poisoning attack
Someone use a face ID to gain access to a restricted area
An attacker performs a man-in-the-middle attack
