WorksheetsCyPS MCQ 06 – revision 02
Total questions: 30
Worksheet time: 15mins
To verify the authenticity of an email, you can check the email headers to ensure that:
The "reply to" and "return-path" lead to the same domain stated in the email.
The email is written in your native language.
The email has a professional-looking logo.
The sender's display name is from a known company.
A key strength of an application layer firewall (gateway/proxy) is that it:
Operates primarily at the network layer for maximum speed.
Allows a direct, routed connection between internal and external endpoints.
Breaks the client/server model, preventing a direct connection between endpoints.
Requires no specific client software or configuration.
A major administrative drawback of using an application layer firewall is that:
It does not provide any form of Network Address Translation (NAT).
Each protocol (e.g., HTTP, SMTP) requires its own specific gateway/proxy application.
It is inherently immune to the security flaws of the underlying operating system.
It offers limited content filtering capabilities.
What is the FIRST step to disable the ActiveX Installer (AxInstSV) service in Windows Server 2012?
Change the Startup Type to Disabled.
Open the Services application.
Another significant risk of a rogue access point is that it can facilitate:
Improved bandwidth allocation.
Eavesdropping on network communications.
Automatic software updates.
Centralized user authentication.
What is the primary purpose of a firewall in network security?
To increase internet connection speed.
To act as a barrier between trusted and untrusted networks, controlling traffic flow.
To encrypt all data passing through the network.
To physically secure network servers.
A key security challenge of an Application Layer Firewall is that its security is dependent on:
The strength of the user's passwords.
The physical security of the network switch.
The security of the host operating system it runs on.
The type of antivirus software installed.
What does RBAC stand for?
Random Based Access Control
Role-Based Access Control
Rule-Based Authentication Control
Risk-Based Access Calculation
Which access control model is least likely to be used in a military setting?
Mandatory Access Control (MAC)
Role-Based Access Control (RBAC)
Discretionary Access Control (DAC)
Both MAC and RBAC
Which type of attack is characterized by being very difficult to detect due to a lack of overt activity?
Active Attack
Phishing Attack
Passive Attack
DoS Attack
What is the FIRST best practice recommended for securing a web interface?
Use the latest encryption.
Never allow the use of default passwords.
Prevent brute forcing.
Store credentials securely.
Why are mobile devices considered the "crown jewel for hackers"?
They are cheap to produce.
They hold most of a user's sensitive data and are very popular.
They cannot be updated.
They do not require passwords.
The "Ping of Death" attack sends IP packets that are:
Smaller than the standard size.
Exactly 65,535 bytes.
Over the maximum allowed size of 65,535 bytes.
Only used for legitimate network testing.
What makes DDoS attacks using botnets difficult to trace?
The use of strong encryption.
The bots are located in differing geographic locations.
The attacks are very slow.
They only use wireless networks.
In a Man-in-the-Middle (MitM) session hijacking, what does the attacker do?
Deletes the server's data.
Substitutes its own IP address for the trusted client's.
Sends phishing emails to all users.
Infects the system with a macro virus.
IP Spoofing is used to:
Encrypt network traffic.
Convince a system it is communicating with a trusted host.
Physically destroy a network router.
Create a backup of data.
A Replay attack can be countered by using:
Default passwords.
Session timestamps or nonces.
Larger buffers.
More complex passwords.
What is the key difference between phishing and spear phishing?
A) Spear phishing is less targeted.
B) Phishing uses malware, spear phishing does not.
C) Spear phishing is more targeted and personalized.
D) Phishing is only done via email.
An inherent weakness in the design of a system that renders it susceptible to a threat is called a:
Attack
Vulnerability
Threat
Exploit
Which Windows Log contains record of error while starting an application?
Application Log
System Log
Security Log
Directory Service Log
What is a primary purpose of wireless network scanning?
To increase the wireless network's bandwidth.
To identify rogue access points.
To hide the network's SSID broadcast.
To replace all network-based scans.
What is a recommended countermeasure against port scanning?
Disabling all encryption on the network.
Implementing firewalls to filter traffic.
Sharing all DNS information publicly.
Using only wireless networks.
What is a major drawback of running comprehensive vulnerability scans?
They are too focused and may miss many devices.
They can use significant bandwidth and be impractical to run frequently.
They are only effective for external scanning.
They cannot identify unauthorized devices.
In Windows Event Viewer, an event that describes the successful operation of a task, like a driver loading, is classified as what type?
Warning
Error
Information
Success Audit
Which Windows Event Log category would record a failure to start a device driver during system startup?
Application Log
Security Log
Wireshark is an example of a:
Vulnerability Scanner
Packet Sniffer
Port Scanner
Log Management Tool
What is the primary privacy concern regarding data stored by organizations?
It takes up too much storage space.
It is one of the most valuable and sensitive assets.
It is difficult to manage.
It slows down network performance.
A Denial-of-Service (DoS) attack aims to:
Steal sensitive data directly.
Overwhelm a system's resources so it cannot respond to requests.
Encrypt files for ransom.
Gain administrative access to a server.
An organization is experiencing slow network performance after deploying a new Application Layer Firewall. Which of the following challenges BEST explains this issue?
The firewall requires additional client configuration.
The operating system hosting the firewall is not secure.
Performance degrades as the number of clients or gateways increases.
It is more susceptible to phishing attacks.
Which of these is an example of an active attack?
Packet Sniffing
Traffic Analysis
Denial-of-Service
Passive Key Logging
