WorksheetsQuiz #2 - Cybersecurity
Total questions: 15
Worksheet time: 8mins
What is the primary technique used in clickjacking attacks to trick users?
Sending fake emails to users.
Overloading a server with traffic.
Using transparent layers and iframes to hide malicious buttons.
Guessing passwords repeatedly.
Which of the following is a common characteristic of a phishing attack?
An attacker directly hacks into a computer system without user interaction.
A malicious party impersonates a trusted entity to obtain sensitive information.
A website is made unavailable by overwhelming it with traffic.
An attacker physically steals a user's ID card.
What is a potential consequence of identity theft?
Your computer system becomes slow and unresponsive.
You are tricked into clicking a hidden malicious button.
Fraudulent loans are registered under your name.
Your internet activity is secretly monitored on public Wi-Fi.
Social engineering primarily focuses on manipulating which aspect to gain access to sensitive information?
Computer hardware.
Network infrastructure.
Human psychology.
Software vulnerabilities.
Credential stuffing attacks exploit which common user behavior?
Using very long and complex passwords.
Regularly changing passwords for all accounts.
Reusing the same password across multiple online accounts.
Enabling two-factor authentication on all services.
What is the main objective of a Distributed Denial of Service (DDoS) attack?
To steal personal data from individual users.
To make a server or website unavailable by overwhelming it with traffic.
To trick users into revealing their passwords through fake login pages.
To secretly monitor network communications.
How does a brute force attack typically attempt to gain unauthorized access?
By exploiting software bugs to bypass security.
By sending a virus through an email attachment.
By systematically trying every possible password combination.
By intercepting data packets on a network.
In the digital world, an eavesdropping attack typically involves what action?
Manipulating a user's perception to gain trust.
Intercepting data transmitted over a network.
Creating fake websites to collect login credentials.
Flooding a server with excessive requests.
What is a characteristic action of an attacker in a Man-in-the-Middle (MITM) attack?
Only observing communication between two parties.
Modifying communication content without detection.
Directly attacking a server to steal data.
Sending phishing emails to users.
What is the primary purpose of typosquatting?
To improve website search engine optimization.
To create backup websites for popular services.
To trick users into visiting fake websites by exploiting typos.
To register domain names for future legitimate use.
Which of the following individuals could be considered an "insider" in an insider threat scenario?
An external hacker with no prior connection to the organization.
A current employee with authorized system access.
A competitor's employee trying to gain market intelligence.
A customer whose account has been compromised.
What is the main objective of an SQL Injection attack?
To overload a website server with traffic.
To gain unauthorized access to a database without a password.
To redirect users to malicious websites.
To encrypt a user's files and demand a ransom.
How does DNS Poisoning typically mislead users?
By sending fake emails containing malicious links.
By altering the content of a legitimate website.
By corrupting the DNS cache to redirect users to fake sites.
By installing malware directly onto a user's device.
What defines a drive-by download attack?
Malware is downloaded only after the user clicks a malicious link.
Malware is downloaded automatically by simply visiting a compromised website.
Malware is spread through infected USB drives.
Malware is installed via a software update from a trusted source.
What makes a Zero Day Exploit particularly dangerous?
It targets only specific, high-profile individuals.
It exploits a vulnerability that is unknown to the software vendor, making it hard to defend against.
It relies on social engineering to trick users into installing malware.
It can only be executed on outdated operating systems.
