NEW
Font size
WorksheetsQuiz2_Drone Hacking
Total questions: 25
Worksheet time: 13mins
Which of the following best defines cybersecurity?
It monitors GPS systems for physical threats
It secures printed documents from theft
It protects digital systems connected to the internet from cyber threats
It prevents fire hazards in server rooms
What are the three main components of a security threat?
User, Network, Firewall
Actor, Trigger, Malware
Target, Agent, Event
Input, Output, Execution
How does a hacker typically turn a threat into an attack?
By identifying and exploiting vulnerabilities
By encrypting the system's firewall
By deactivating antivirus software
By launching denial-of-service on all ports
A hacker injects code into a drone's system to take control. Which type of attack is this?
Deauthentication
Man-in-the-Middle
Password Cracking
Command/Code Injection
Which of the following defines 'Confidentiality' in the CIA triad?
Data is changed in any accessible way
System uptime is maintained at all costs
Only authorized parties can view private/confidential information
User actions are encrypted and stored
What is the primary difference between computer security and information security?
Computer security uses encryption while information security does not
Computer security focuses on digital data; information security covers all formats
Information security focuses only on printed material
Computer security is newer than information security
What is an attack vector?
A firewall rule used to block an attack
The route or method used to carry out an attack
The main server targeted in an attack
The log of user access during an attack
An attacker exploits flaws in SQL statements to access a database. This is an example of:
Protocol-Based attack
Network-Based attack
Application-Based attack
Firmware-Based attack
Which category does a phishing attack best fall under?
Insider Threats
Firmware-Based
Social Engineering
Protocol-Based
What is the 'Availability' principle in the CIA triad focused on?
Ensuring authorized users have timely access to information
Encrypting data for confidentiality
Verifying the sender's identity
Preventing password reuse
What communication protocol is typically used between drones and ground control stations?
Bluetooth
WEP
NFC
MAVLink
Why is the communication link between a ground station and a drone considered a trust boundary?
Because it manages only propulsion data
Because it separates human control from autonomous systems and is vulnerable to attacks
Because drones only use local memory
Because it contains no wireless elements
Which protocol would best support swarm coordination in a drone fleet?
3G
MAVLink
Wi-Fi
Zigbee / Zigbee-Pro
What effect does a deauthentication attack have on a drone?
It overloads the propellers
It erases the flight logs
It disconnects the drone from the controller
It disables GPS entirely
What tool is commonly used to scan open ports and gather drone system information?
Aircrack-ng
Hydra
Ettercap
Nmap
Which of the following would best defend against password cracking attacks?
Limit propeller speed
Switch to 3G communication
Disable return-to-home
Use WPA3 and complex passwords
What distinguishes a man-in-the-middle attack from a deauthentication attack?
It hacks only video transmission
It intercepts and possibly alters traffic between the drone and controller
It breaks the propeller alignment
It blocks the drone’s GPS signal
What is GPS spoofing in the context of drones?
Using radio waves to disconnect GPS
Sending fake GPS signals to mislead the drone’s location
Switching to a secondary GPS antenna
Encrypting the GPS output for data storage
Which tool can be used for packet injection to take control of drone commands?
Hydra brute-forcer
Ettercap logger
Python scripts with MAVLink
Wireshark GUI
Why is the MAVLink protocol a target for command injection attacks?
Because it encrypts all flight data
Because it is only used in indoor navigation
Because it does not support video streaming
Because it handles command messages between drones and controllers
Why is Wi-Fi (IEEE 802.11) considered a common attack target in drone systems?
It’s commonly implemented with weak security configurations, making it vulnerable
It supports real-time video and telemetry over a widely used protocol
It uses broadcast channels that can be easily intercepted
It is difficult to configure with intrusion detection tools
What type of attack intercepts and possibly alters communication between the drone and its controller?
Signal jamming
GPS spoofing
Man-in-the-Middle (MitM)
Deauthentication flooding
Which strategy best defends against command injection attacks via MAVLink?
Switching from digital to analog control
Encrypting video streams only
Validating message sources and securing firmware
Adding extra motors to the drone
An attacker wants to overwhelm a drone’s network by sending fake traffic. Which method should they use?
Man-in-the-middle sniffing
GPS spoofing
Flooding attack (DoS)
Replay attack
Design a defensive architecture for preventing unauthorized access to drone systems.
Use secure protocols (SSH/TLS), disable unused ports, enable intrusion detection
Configure drones to use default admin credentials for consistency
Increase the number of sensors to detect altitude fluctuations
Route all commands through an open Wi-Fi network for easier access
