Font size
WorksheetsINTELLECTA '25 - Inter-School Quiz - 2nd Round
Total questions: 30
Worksheet time: 16mins
A network administrator notices a sudden increase in traffic from a single IP address. The IP is attempting multiple login attempts across several accounts at different times of the day. The administrator also finds that some login attempts were successful, and sensitive data is now missing.
What type of attack is most likely being carried out?
Phishing attack
Brute force attack
Credential stuffing
Cross-Site Scripting (XSS)
Denial of Service (DoS)
Which advanced evasion technique allows malware to execute code in a remote process’s memory space without dropping files on disk?
Reflective DLL Injection
Process Hollowing
Heap Spraying
Shellcode Injection
Code Caves
Which of the following best describes a side-channel attack?
Attacking a system by analyzing unintended physical emissions
Injecting malicious SQL commands into a web application
Intercepting network traffic to extract credentials
Exploiting outdated cryptographic algorithms
Modifying firmware to introduce backdoors
In an Active Directory environment, what attack technique allows an adversary to gain control over all domain accounts by abusing cryptographic weaknesses?
Reverse Shell
Kerberoasting
Credential Stuffing
Golden Ticket Attack
SQL Injection
Which of the following techniques are commonly used to defend against a Distributed Denial-of-Service (DDoS) attack?
Using network segmentation to isolate critical systems
Disabling firewalls to allow for more traffic throughput
Deploying a content delivery network (CDN) to absorb traffic
Implementing rate limiting on incoming traffic
Encrypting traffic with SSL/TLS to prevent interception
An attacker gains access to a server and executes the above command in PowerShell.
What type of attack is most likely occurring?
Command Injection in PowerShell
In-memory malware execution via script injection
Web-based Shellcode Execution
Arbitrary Code Execution via File Inclusion
Remote Code Execution through Web Shell
A cybersecurity analyst discovers the following logs from a compromised server:
01/12/2025 14:23: Successful login (Admin01)
01/12/2025 14:25: Powershell script executed
01/12/2025 14:27: New user ‘svc_backup’ added to Administrators group
01/12/2025 14:29: NTDS.dit file accessed
01/12/2025 14:30: Large outbound traffic to unknown IP
What is the most likely goal of the attacker?
Stealing password hashes
Installing a rootkit
Deploying ransomware
Setting up a botnet
Exploiting a zero-day
In a penetration test, an attacker uses the command nmap -sS -p 1-65535 192.168.1.1 to scan a target.
What is the purpose of this command?
To scan for open ports on a single IP address
To perform a full TCP SYN scan on all ports of the target
To attempt to exploit vulnerabilities on port 80
To scan for open ports on a single IP address
To identify vulnerabilities based on port numbers
Which of the following statements about network security threats is correct?
(A) ARP spoofing can allow an attacker to intercept network traffic by sending fake ARP replies.
(B)A SYN flood attack exploits the TCP handshake by overwhelming a server with incomplete connection requests.
(C) A DNS poisoning attack can redirect users to malicious websites by altering DNS cache records.
(D) MAC address filtering is a foolproof method to secure a wireless network from unauthorized access.
A, B, C only
B, C, E only
A, C, D only
A, B, D only
All A, B, C, D, E
Which of the following actions would NOT help prevent a SQL injection attack?
Using parameterized queries
Validating user input
Enabling strict input sanitization
Encrypting data stored in databases
Using stored procedures
Which of the following attacks exploits a vulnerability in a DNS resolver by redirecting traffic to malicious websites, often used to distribute malware or intercept sensitive information?
DNS Spoofing
DNS Tunneling
DNS Hijacking
Domain Shadowing
DNS Cache Poisoning
Which of the following techniques is used to bypass traditional Intrusion Detection Systems (IDS) by inserting malicious payloads into fragmented network packets, making it harder to detect the attack?
TCP Segmentation Attack
IP Spoofing
Evasion Attack
Fragmentation Bomb
Smurf Attack
Which cryptographic technique is primarily used to ensure that two parties can securely exchange a shared secret key over an unsecured channel without actually transmitting the key itself?
RSA Encryption
Elliptic Curve Cryptography (ECC)
Diffie-Hellman Key Exchange
Digital Signature Algorithm (DSA)
Advanced Encryption Standard (AES)
Which of the following vulnerabilities is most commonly associated with a lack of proper access control in an application?
Insecure Direct Object Reference (IDOR)
SQL Injection
Buffer Overflow
Cross-Site Request Forgery (CSRF)
Man-in-the-Middle (MitM)
In public-key infrastructure (PKI), what role does the Certificate Revocation List (CRL) play?
It lists the active certificates within a certificate authority.
It provides a list of certificates that have been revoked and are no longer valid.
It verifies the identity of a client before granting access to a server.
It ensures the integrity of the encrypted communications.
It provides a backup for the root certificate authority in case of failure.
What is the role of a Web Application Firewall (WAF) in preventing attacks on web applications?
It encrypts all incoming and outgoing data to prevent interception.
It scans files and directories for malware and viruses before allowing access.
It filters and monitors HTTP traffic to block malicious requests and attacks like SQL injection, XSS, and DDoS.
It ensures that only authenticated users can access specific parts of the application.
It provides a secure channel for communication between the client and server, encrypting the entire session.
A rootkit is discovered on a Linux server. Which of the following is the best way to remove it?
Running an antivirus scan and deleting infected files
Removing all suspicious binaries manually
Restoring the system from a trusted backup
Running kill -9 on the rootkit process
Deleting the affected user’s home directory
Which of the following encryption algorithms is considered quantum-resistant?
Lattice-based cryptography
RSA-4096
RSA-4096
AES-256
SHA-3
Which of the following best mitigates Cross-Site Request Forgery (CSRF) attacks?
Using Secure Cookies
Implementing HTTP Strict Transport Security (HSTS)
Requiring user authentication via two-factor authentication (2FA)
Implementing CSRF tokens in web forms
Encrypting web traffic using TLS 1.3
Which of the following is the most critical vulnerability in the context of cloud security, specifically with regards to unauthorized access to sensitive data?
Lack of proper API security and access controls
Misconfigured security groups and network segmentation
Insecure container orchestration configurations
Insufficient encryption of data at rest
Weak passwords and multi-factor authentication failure
The following text is encrypted using a Caesar cipher with a shift of 3 to the left:
"qhyhu jrqqd jlyh brx xs."
Decrypt the message.
(a)
Which of the following techniques is least likely to be used for steganography?
Embedding data within the least significant bit (LSB) of an image
Encrypting a file using AES-256
Hiding data within the metadata of an audio file
Concealing text within whitespace characters in a document
Embedding information in network packet headers
Each letter in the following message is represented by its ASCII decimal value. Decode it and fill in the blanks with the hidden word.
74 79 69 77 65 78 79
(Hint - A = 65)
(a)
Which of the following cryptographic techniques are used to protect data at rest?
ECC (Elliptic Curve Cryptography)
RSA (Rivest-Shamir-Adleman)
AES (Advanced Encryption Standard)
HMAC (Hash-Based Message Authentication Code)
TLS (Transport Layer Security)
Which tool is commonly used for web vulnerability scanning and identifying security flaws in web applications?
Hydra
Aircrack-ng
Nmap
John the Ripper
Nikto
Which protocol can be used to secure email communication by providing end-to-end encryption and digitally signing messages?
IMAP
PGP
SMTP
SMTPS
S/MIME
In a typical buffer overflow attack, what is the attacker trying to overwrite in order to gain control of the target program?
The memory stack
The return address on the stack
The heap pointer
The program’s encryption key
The file descriptor table
Which of the following attacks relies on predicting future values in a stream cipher to decrypt the ciphertext without knowing the key?
Time-memory trade-off attack
Key recovery attack
Chosen ciphertext attack
Linear cryptanalysis
Birthday attack
Which of the following best describes a zero-day vulnerability?
A vulnerability that is patched immediately after discovery
A vulnerability that is unknown to the vendor or developer
A vulnerability that has been publicly disclosed but has no known exploits
A vulnerability that is commonly exploited by worms
A vulnerability that is only exploitable in specific environments
Which ransomware attack, first discovered in 2017, encrypted data on computers and demanded a Bitcoin ransom, and quickly became one of the most notorious cyberattacks of its time?
Cryptolocker
Operation Shady RAT
Stuxnet
WannaCry
APT29 (Cozy Bear)
