WorksheetsWeek 8 Quiz 2 Cyber Threats
Total questions: 10
Worksheet time: 6mins
What is the term for a type of malicious software that can replicate and spread on its own without needing a host file?
(a)
What is the primary purpose of a Trojan?
To encrypt files for a ransom.
To disguise itself as legitimate software to perform malicious actions.
To spread to other computers by attaching itself to files and softwares.
To send generic messages to a large number of people.
What is the main difference between phishing and spear-phishing?
Phishing is a targeted attack, while spear-phishing is a wide-net attack.
Phishing emails are only sent to individuals, while spear-phishing emails are sent to companies.
Spear-phishing attacks are more generic, while phishing attacks are personalized.
Spear-phishing is a highly targeted attack that uses personalized information, unlike generic phishing.
A user receives an email that appears to be from their bank, but the sender's email address is support@banc0-security.com. Which phishing tactic is being used?
Baiting
Email Spoofing
Pretexting
Urgency
A ransomware attacker demands a payment in cryptocurrency to restore access to a victim's encrypted files. This attack primarily impacts which aspect of information security?
Integrity
Confidentiality
Availability
Non-repudiation
An employee finds a USB drive in the company parking lot with a label that says '2025 Salaries.' Driven by curiosity, they plug the USB into their work computer. This is an example of which social engineering technique?
Pretexting
Baiting
Phishing
Tailgating
A security analyst is reviewing a company's systems and finds a program that was downloaded from a suspicious website and is now secretly logging keystrokes. This program is disguised as a free utility tool. What type of malware is the security analyst most likely dealing with?
A virus
A worm
A Trojan
Ransomware
A user receives a pop-up on their computer that says, 'WARNING! Your computer is infected with viruses! Click 'Scan and Fix' now.' The user clicks the button, and a malicious program is downloaded. What is the primary goal of this attack?
To trick the user into downloading the malware themselves.
To perform a genuine antivirus scan.
To steal the user's credit card information directly from the pop-up.
To shut down the computer to prevent data loss.
Why is it essential to verify a link by typing the official URL directly into a browser instead of clicking the link in a suspicious email?
Because the link in the email might be broken.
Because typing the URL manually is faster.
Because a malicious link could lead to a fake website that looks identical to the real one, and manual entry avoids this trap.
Because the email could contain a virus.
A company's IT department receives a report of a new ransomware threat. They immediately update their antivirus software, patch all network devices, and send out an urgent email to all employees warning them about the new threat and reminding them not to open suspicious attachments. What does this comprehensive response demonstrate?
A reactive security model that only responds after an incident.
The use of a worm to combat the ransomware threat.
A proactive approach to security by taking preventative measures.
A reliance solely on social engineering to protect the company.
