What does 'internal or external' describe in cybersecurity terms?

What happens during a service disruption attack?

The attack surface includes all points a hacker might try to exploit.

A(n) _____ vector refers to an attack requiring remote access over a network.

Which of these is an example of a lure-based vector?

Social engineering can involve tricking someone into helping the attacker.

What type of phishing uses SMS to fool users?

What’s it called when an attacker registers a site name close to a real one?

A watering hole attack is just a false rumour with no intent to deceive.

A _____ attack tries to make systems unavailable to users.

Brute-force attacks depend on random guessing to access a system.

Which action best defines a replay attack?

What kind of attack does a 'man-in-the-middle' refer to?

A buffer overflow attack floods a system with more data than it can handle.

What does an SQL injection attack mainly target?

_____ is a form of malware disguised as something useful.

Is ransomware a threat that locks data until payment is made?

A keylogger records what you type to steal passwords.

Which option best defines a backdoor?

Which of these describes malware that copies itself and spreads on its own?

A _____ hides itself in a system to give attackers long-term access.

Does spyware collect user information without consent?

A logic bomb triggers when a certain event or condition is met.

Which is an example of software built to harm or hijack systems?

Which of the following is a goal of attackers using social engineering?

Tailgating is when someone tricks their way into a secured area.

Is shoulder surfing an example of physical social engineering?

Which method relies on convincing someone to break normal security rules?

Which of the following is not a form of social engineering?

Pretexting uses fake stories to trick people into revealing data.

Can a simple USB stick be used to deliver a malware payload?

What is baiting in social engineering?

A man-in-the-middle attack changes data before it reaches its destination.

Do buffer overflow attacks allow code to run where it shouldn't?

Which of the following is used to exploit a database system?

Which type of attacker might be a former employee with access credentials?

Hacktivists often have political or social motivations.

Is a nation-state actor likely to have more resources than a script kiddie?

Which group is most likely to perform structured attacks using custom tools?

Unskilled Hackers usually create their own malware tools from scratch.

Which of the following best describes an unskilled hacker?

Are cybercriminals usually motivated by money?

All insider threats are intentional and planned.