Cyber Threats and Vulnerabilities: Online Learning Quizzes

Question 1

Which of the following is a major trend in the evolution of cyber threats and vulnerabilities?

Accepted Answer

Increased use of AI by attackers

Accepted Answer

Emergence of malware targeting IoT devices

Answer

Decline in ransomware attacks

Answer

Reduced reliance on cloud computing

Question 2

What is the primary objective of a vulnerability assessment?

Accepted Answer

To identify potential weaknesses in a system or network that could be exploited by attackers.

Answer

To repair security vulnerabilities.

Answer

To evaluate the effectiveness of implemented security measures.

Question 3

Which of the following is a prevalent cyber threat that exploits vulnerabilities in software or hardware?

Accepted Answer

Buffer overflow attack

Answer

Phishing attack

Answer

Distributed Denial of Service (DDoS) attack

Answer

SQL injection attack

Question 4

Identify a type of cyber threat that relies on social engineering techniques to manipulate individuals.

Accepted Answer

Pretexting

Answer

DDoS attack

Answer

Buffer overflow

Answer

SQL injection

Question 5

Explain the key difference between a computer virus and a computer worm.

Accepted Answer

A virus requires a host program or file to attach to and replicate, while a worm is a standalone malicious program that can self-propagate.

Answer

Worms are more prevalent than viruses.

Answer

A virus is inherently more destructive than a worm.

Question 6

Describe the primary advantage of using multi-factor authentication.

Accepted Answer

It significantly increases the difficulty for unauthorized users to access accounts, even if they have obtained a password.

Answer

It eliminates the need for creating strong and complex passwords.

Answer

It may be less convenient compared to using a single password for all accounts.

Question 7

Explain the purpose and significance of using honeypots in cybersecurity.

Accepted Answer

Honeypots act as decoys to attract and monitor malicious actors, providing valuable insights into their tactics, techniques, and objectives.

Answer

Honeypots are used to securely store sensitive data.

Answer

Honeypots are primarily designed to detect and block malicious network traffic.

Question 8

Which of the following is a type of malicious software that encrypts files on your computer and demands a payment to decrypt them?

Accepted Answer

Ransomware

Answer

Adware

Answer

Trojan horse

Answer

Spyware

Question 9

Which of the following is a system vulnerability that allows an attacker to execute unauthorized code on a computer?

Accepted Answer

Buffer overflow

Answer

Cross-site scripting

Answer

Man-in-the-middle attack

Answer

SQL injection

Question 10

Which of the following security measures involves encrypting network traffic to protect data from eavesdropping?

Accepted Answer

Virtual private network (VPN)

Answer

Firewall

Answer

Antivirus software

Answer

Intrusion detection system

Question 11

Which of the following is a social engineering attack that involves tricking users into revealing sensitive information by sending them fraudulent emails or messages?

Accepted Answer

Phishing

Answer

Denial-of-service attack

Answer

Spoofing attack

Answer

Brute force attack

Question 12

Which of the following is the process of identifying and assessing weaknesses in a computer system or network?

Accepted Answer

Vulnerability assessment

Answer

Risk assessment

Answer

Security audit

Answer

Penetration testing

Question 13

Which of the following is a recommended practice for preventing phishing attacks?

Accepted Answer

Be cautious of unsolicited emails and attachments, and avoid clicking on suspicious links.

Answer

Install antivirus software

Answer

Enable two-factor authentication

Answer

Use a strong password

Question 14

Which of the following is a type of cyber threat that aims to make a computer system or network unavailable to its intended users?

Accepted Answer

Denial-of-service attack

Answer

Phishing

Answer

SQL injection

Answer

Malware

Question 15

Which of the following is a type of security control that monitors and analyzes network traffic to detect suspicious activity?

Accepted Answer

Intrusion detection system (IDS)

Answer

Antivirus software

Answer

Virtual private network (VPN)

Answer

Firewall

Question 16

Which of the following is **not** a common type of cyber threat?

Accepted Answer

Accidental data deletion

Answer

Phishing

Answer

Malware

Question 17

Which of the following is a **key** step in identifying vulnerabilities in a system?

Accepted Answer

Performing a risk assessment

Answer

Updating software patches

Answer

Implementing firewalls

Answer

Installing antivirus software

Question 18

What is the **primary** objective of a phishing attack?

Accepted Answer

To obtain sensitive information

Answer

To gain unauthorized access to a network

Answer

To encrypt data for ransom

Answer

To disrupt system functionality

Question 19

What is the **main** purpose of a firewall?

Accepted Answer

To block unauthorized access to a network

Answer

To encrypt data in transit

Answer

To detect and remove malware

Answer

To perform intrusion detection

Question 20

Which of the following is a **potential** vulnerability in a network configuration?

Accepted Answer

Open ports that are not required

Answer

Regular software updates

Answer

Use of strong passwords

Question 21

What is the **primary** difference between a worm and a virus?

Accepted Answer

Worms can spread autonomously, while viruses require a host file

Answer

Worms are more harmful than viruses

Answer

Viruses are more common than worms

Question 22

Which of the following is a **key** principle of information security?

Accepted Answer

Confidentiality

Answer

Usability

Answer

Performance

Answer

Reliability

Question 23

What is the **primary** purpose of a honeypot?

Accepted Answer

To lure attackers and gather information on their tactics

Answer

To prevent unauthorized access to a system

Answer

To detect and block malware

Question 24

Which of the following is a **best** practice for creating strong passwords?

Accepted Answer

Use a combination of uppercase and lowercase letters, numbers, and special characters

Answer

Write down your passwords for easy reference

Answer

Use short and easy-to-remember passwords

Question 25

Which type of vulnerability grants unauthorized access to a system or network by exploiting weaknesses in software?

Accepted Answer

Exploit

Answer

IDS

Answer

Patch

Answer

Firewall

Question 26

Which vulnerability is commonly associated with social media platforms?

Accepted Answer

Privacy leaks

Answer

Spam

Answer

Malware

Answer

Brute force attack

Question 27

Which security control is effective in mitigating the risk of insider threats?

Accepted Answer

Role-based access control

Answer

Encryption

Answer

Intrusion detection systems

Answer

Firewalls

Question 28

Which vulnerability allows attackers to bypass security controls by exploiting weaknesses in network protocols?

Accepted Answer

Zero-day exploit

Answer

Patch

Answer

Firewall

Question 29

Which element is critical in incident response planning?

Accepted Answer

Establishing clear roles and responsibilities

Answer

User training

Answer

Patching

Answer

Firewalls

Question 30

Which cyber threat involves using malicious software to compromise systems or networks?

Accepted Answer

Malware

Answer

Spam

Answer

Phishing

Answer

Brute force attack

Question 31

Which vulnerability is associated with cloud computing environments?

Accepted Answer

Data breaches

Answer

Malware

Answer

Brute force attack

Answer

Spam

Question 32

Which of the following is a common cyber threat that exploits software vulnerabilities to gain unauthorized access to systems?

Accepted Answer

Malware

Answer

Distributed Denial of Service (DDoS) attack

Answer

Spam

Answer

Phishing

Question 33

Which of the following is a vulnerability that arises from weak or missing authentication mechanisms?

Accepted Answer

Unauthorized access

Answer

Malware infection

Answer

Denial of service

Answer

Data leakage

Question 34

Which of the following is a primary measure to mitigate the risk of phishing attacks?

Accepted Answer

User education and awareness

Answer

Firewall implementation

Answer

Intrusion detection system

Answer

Vulnerability scanning

Question 35

Which of the following is a tool specifically designed to scan systems for known vulnerabilities?

Accepted Answer

Vulnerability scanner

Answer

Packet sniffer

Answer

Antivirus software

Answer

Firewall

Question 36

Which of the following is a type of malware that encrypts files and demands a ransom payment to decrypt them?

Accepted Answer

Ransomware

Answer

Botnet

Answer

Virus

Answer

Trojan horse

Question 37

Which of the following is a vulnerability that can occur due to outdated software?

Accepted Answer

Unpatched vulnerabilities

Answer

Human error

Answer

Unsecured networks

Answer

Configuration errors

Question 38

Which of the following is a principle of cybersecurity that focuses on implementing multiple layers of security to minimize the impact of successful attacks?

Accepted Answer

Defense in depth

Answer

Least privilege

Answer

Zero trust

Answer

Separation of duties

Question 39

Which of the following is a type of intrusion detection system that monitors network traffic for suspicious patterns?

Accepted Answer

Network intrusion detection system (NIDS)

Answer

Firewall

Answer

Vulnerability scanner

Answer

Host intrusion detection system (HIDS)

Question 40

Which of the following is a common defense mechanism against denial of service attacks?

Accepted Answer

Rate limiting

Answer

Access control lists

Answer

Encryption

Answer

Firewall filtering

Question 41

Which of the following is a type of vulnerability that occurs when credentials or sensitive data are transmitted without encryption over a network?

Accepted Answer

Eavesdropping

Answer

Injection attack

Answer

Phishing

Answer

Brute force attack

Question 42

Which of the following is a common type of cyber threat involving the unauthorized access, use, disclosure, disruption, modification, or destruction of data?

Accepted Answer

Data breach

Answer

Phishing scam

Answer

Malware attack

Answer

Denial-of-service attack

Question 43

In cybersecurity, what is a weakness or flaw in a system or network that could be exploited by an attacker to gain unauthorized access or cause harm?

Accepted Answer

Vulnerability

Answer

Threat

Answer

Risk

Question 44

Which of the following actions is NOT recommended to mitigate the risk of cyber threats and vulnerabilities?

Accepted Answer

Ignoring software updates

Answer

Implementing firewalls

Answer

Educating users about cybersecurity

Answer

Using anti-malware software

Question 45

What type of cyber threat involves the use of malicious software to gain unauthorized access to a computer or network?

Accepted Answer

Malware attack

Answer

Hacking

Answer

Phishing scam

Answer

Spam attack

Question 46

What is the process of implementing and maintaining appropriate security measures to protect systems and networks from cyber threats known as?

Accepted Answer

Cybersecurity

Answer

Incident response

Answer

Risk assessment

Answer

Vulnerability management

Question 47

Which software is specifically designed to detect and protect against phishing scams and other online frauds?

Accepted Answer

Anti-phishing software

Answer

Anti-virus software

Answer

Firewall

Answer

Spam filter

Question 48

What is the term given to the unauthorized attempt to gain access to a computer or network with malicious intent?

Accepted Answer

Hacking

Answer

DDoS attack

Answer

Phishing

Answer

Spamming

Question 49

Which type of denial-of-service attack involves flooding a target system with an overwhelming amount of traffic?

Accepted Answer

DDoS attack

Answer

Man-in-the-middle attack

Answer

Malware attack

Question 50

What security practice involves regularly updating software and systems to fix vulnerabilities and enhance security?

Accepted Answer

Patch management

Answer

Vulnerability scanning

Answer

Risk assessment