Competitive Exams : Computer Awareness - Security (Set 3)

Question 1

A zero-day exploit is considered one of the most critical threats. Which of the following best describes the defining characteristic of a zero-day exploit?

Accepted Answer

C) An exploit for which the vendor has no prior knowledge or available patch.

Answer

A) An attack that targets a vulnerability in outdated software.

Answer

B) An exploit that has been publicly disclosed but not yet patched.

Answer

D) An attack that uses a previously known vulnerability with a readily available patch.

Answer

E) An exploit that only affects Linux-based systems.

Question 2

In modern cryptographic systems, asymmetric encryption plays a crucial role beyond just data confidentiality. Which of the following is a key advantage of asymmetric encryption over symmetric encryption, particularly concerning key management?

Accepted Answer

B) It simplifies key distribution because only public keys need to be shared.

Answer

A) It is significantly faster for bulk data encryption.

Answer

C) It uses a single, shared secret key for both encryption and decryption.

Answer

D) It provides better protection against brute-force attacks due to shorter key lengths.

Answer

E) It is exclusively used for encrypting entire hard drives.

Question 3

A common social engineering technique involves an attacker creating a false identity or scenario to trick a target into providing sensitive information. What is this technique called when the attacker fabricates a believable story to gain trust?

Accepted Answer

A) Pretexting

Answer

B) Phishing

Answer

C) Baiting

Answer

D) Quid Pro Quo

Answer

E) Tailgating

Question 4

Distributed Denial of Service (DDoS) attacks are often distinguished from simple Denial of Service (DoS) attacks. What is the primary characteristic that differentiates a DDoS attack from a traditional DoS attack?

Accepted Answer

D) A DDoS attack originates from multiple compromised systems, overwhelming the target from various sources.

Answer

A) DDoS attacks only target web servers, while DoS attacks can target any network service.

Answer

B) DoS attacks are more sophisticated and harder to mitigate than DDoS attacks.

Answer

C) DDoS attacks use encryption to hide their origin, unlike DoS attacks.

Answer

E) DoS attacks involve physical damage to network infrastructure, while DDoS attacks are purely digital.

Question 5

Next-Generation Firewalls (NGFWs) offer capabilities beyond traditional packet-filtering firewalls. Which of the following features is a key advancement offered by NGFWs?

Accepted Answer

B) Integrated Intrusion Prevention System (IPS), application awareness, and deep packet inspection.

Answer

A) Simple port-based filtering for inbound and outbound traffic.

Answer

C) Exclusive reliance on IP addresses for access control decisions.

Answer

D) Only monitors network traffic without the ability to block it.

Answer

E) Provides physical security for server racks.

Question 6

SQL Injection is a pervasive web application vulnerability. Which of the following is the most effective method for preventing SQL Injection attacks?

Accepted Answer

A) Using parameterized queries or prepared statements.

Answer

B) Implementing strong user passwords for the database.

Answer

C) Encrypting the database connection string.

Answer

D) Restricting database access to specific IP addresses.

Answer

E) Running the web server on a different port.

Question 7

Ransomware has evolved into various forms. Which characteristic specifically defines 'crypto-ransomware'?

Accepted Answer

C) It encrypts the victim's files and demands payment for the decryption key.

Answer

A) It locks the user out of the operating system without encrypting files.

Answer

B) It demands ransom for not leaking stolen sensitive data.

Answer

D) It only targets mobile devices for ransom.

Answer

E) It performs a Denial of Service attack against the victim's network.

Question 8

A robust cybersecurity incident response plan follows several key phases. Which of the following sequences represents a typical and effective order of these phases?

Accepted Answer

D) Identification, Containment, Eradication, Recovery.

Answer

A) Recovery, Identification, Containment, Eradication.

Answer

B) Eradication, Identification, Recovery, Containment.

Answer

C) Containment, Recovery, Identification, Eradication.

Answer

E) Preparation, Recovery, Eradication, Identification.

Question 9

Which type of malware encrypts a user's files and demands payment for their release?

Accepted Answer

C) Ransomware

Answer

A) Spyware

Answer

B) Adware

Answer

D) Trojan horse

Question 10

A device that monitors network traffic for suspicious activity and alerts the system administrator is known as a/an:

Accepted Answer

B) Intrusion Detection System (IDS)

Answer

A) Firewall

Answer

C) Router

Answer

D) Switch

Question 11

Which of the following cryptographic techniques uses a single key for both encryption and decryption?

Accepted Answer

C) Symmetric encryption

Answer

A) Asymmetric encryption

Answer

B) Hashing

Answer

D) Digital signature

Question 12

What is the security practice of requiring multiple independent methods of verification from different categories to confirm a user's identity?

Accepted Answer

C) Multi-Factor Authentication (MFA)

Answer

A) Single Sign-On (SSO)

Answer

B) Biometric authentication

Answer

D) Password complexity

Question 13

An attack where an attacker attempts to trick users into revealing sensitive information by disguising as a trustworthy entity in an electronic communication is called:

Accepted Answer

C) Phishing

Answer

A) Denial-of-Service (DoS)

Answer

B) SQL Injection

Answer

D) Brute-force attack

Question 14

The CIA triad in information security stands for:

Accepted Answer

B) Confidentiality, Integrity, Availability

Answer

A) Confidentiality, Integrity, Accessibility

Answer

C) Control, Integrity, Availability

Answer

D) Confidentiality, Information, Authenticity

Question 15

Which of the following is a common software vulnerability where an attacker can execute malicious code by writing more data to a buffer than it can hold?

Accepted Answer

C) Buffer Overflow

Answer

A) SQL Injection

Answer

B) Cross-Site Scripting (XSS)

Answer

D) Zero-day exploit

Question 16

What is the primary purpose of a Digital Certificate in internet security?

Accepted Answer

B) To verify the identity of a website or server

Answer

A) To encrypt all network traffic

Answer

C) To prevent malware infections

Answer

D) To store user passwords securely

Question 17

Antivirus software primarily helps in protecting a computer from:

Accepted Answer

C) Malware and viruses

Answer

A) Unauthorized physical access

Answer

B) Power outages

Answer

D) Network attacks like DDoS

Question 18

Which social engineering technique involves creating a fabricated scenario (pretext) to trick an individual into revealing sensitive information?

Accepted Answer

C) Pretexting

Answer

A) Phishing

Answer

B) Baiting

Answer

D) Quid pro quo

Question 19

What is the importance of regular data backups in the context of cybersecurity?

Accepted Answer

B) To recover data after a system failure or cyber attack

Answer

A) To prevent unauthorized access

Answer

C) To speed up internet connection

Answer

D) To encrypt sensitive files