Cybersecurity Quiz: Attacks and Techniques

<p>Monitoring network traffic for potential security threats. (A)</p> Signup and view all the answers

<p>Implementing traffic filtering to block suspicious traffic patterns. (D)</p> Signup and view all the answers

<p>A user accidentally clicking on a malicious link in an email. (C)</p> Signup and view all the answers

<p>Active sniffing injects fake data packets onto the network, while passive sniffing only observes traffic. (A)</p> Signup and view all the answers

<p>Wireshark (B)</p> Signup and view all the answers

<p>It uses a secure tunnel over the internet, encrypting all data that is sent. (C)</p> Signup and view all the answers

<p>To guess the correct login credentials by repeatedly trying different combinations. (D)</p> Signup and view all the answers

<p>To intercept and relay communication between two parties without their knowledge, potentially stealing or manipulating data. (A)</p> Signup and view all the answers

<p>To bypass security measures and gain access to, modify, or delete data stored in the website's database. (B)</p> Signup and view all the answers

<p>A user's personal information, such as login credentials or financial data, being stolen. (A)</p> Signup and view all the answers

<p>By encrypting data sent over the internet, making it difficult for others to intercept and understand the information. (A), By masking the user's real IP address with a temporary one, making it harder to track their online activity. (B)</p> Signup and view all the answers

<p>It restricts the frequency of login attempts from a single IP address, making it harder for attackers to try numerous passwords in a short time. (D)</p> Signup and view all the answers

<p>Using prepared statements and parameterized queries to sanitize user input before executing database queries. (B)</p> Signup and view all the answers

<p>Vulnerability assessments focus on identifying vulnerabilities, while penetration testing aims to exploit them. (B)</p> Signup and view all the answers

<p>Delivery (D)</p> Signup and view all the answers

<p>It is a vulnerability that is unknown to the vendor and the security community before it is exploited. (C)</p> Signup and view all the answers

<p>Moving within a network to reach more valuable assets after gaining initial access. (C)</p> Signup and view all the answers

<p>By identifying the stages of a cyberattack and providing opportunities for disruption. (B)</p> Signup and view all the answers

<p>An attacker uses stolen credentials to access a server and then accesses other systems on the same network. (A)</p> Signup and view all the answers

<p>Nessus (B)</p> Signup and view all the answers

<p>Vulnerability assessment helps prioritize the most critical vulnerabilities for penetration testing. (C)</p> Signup and view all the answers

<p>By providing a centralized authentication system, allowing attackers to gain access to multiple connected systems. (C)</p> Signup and view all the answers

<p>EDR solutions provide real-time monitoring of endpoint activity, while traditional antivirus software relies on signature-based detection. (B)</p> Signup and view all the answers

<p>An attacker using a phishing email to trick a user into revealing their login credentials. (D)</p> Signup and view all the answers

<p>Honeypots can be used to lure attackers into revealing their tactics and techniques. (C)</p> Signup and view all the answers

<p>By implementing Group Policy to enforce security settings and restrict access. (A)</p> Signup and view all the answers

<p>To identify and mitigate cybersecurity threats (B)</p> Signup and view all the answers

<p>Uses vulnerabilities for personal gain (A)</p> Signup and view all the answers

<p>Asymmetric Encryption (C)</p> Signup and view all the answers

<p>AES (D)</p> Signup and view all the answers

<p>A hacker who exploits vulnerabilities without malicious intent but without proper authorization (A)</p> Signup and view all the answers

<p>To redirect users to malicious websites (D)</p> Signup and view all the answers

<p>DNS Spoofing (D)</p> Signup and view all the answers

<p>Simplified incident response procedures (A)</p> Signup and view all the answers

<p>The likelihood of a threat exploiting a vulnerability, causing damage. (D)</p> Signup and view all the answers

<p>Encryption makes data unintelligible to unauthorized users, protecting confidentiality. (B)</p> Signup and view all the answers

<p>Authenticity (B)</p> Signup and view all the answers

<p>Using digital signatures to validate the authenticity of data. (A)</p> Signup and view all the answers

<p>Vulnerability (D)</p> Signup and view all the answers

<p>To minimize the impact of a security breach by limiting user access to necessary resources. (C)</p> Signup and view all the answers

<p>A customer support representative only has access to customer information relevant to their job. (C)</p> Signup and view all the answers

<p>To protect data and systems from unauthorized access and threats. (D)</p> Signup and view all the answers

Protection of computers, networks, and data from cyber threats.

Common threats include malware, phishing, and ransomware.

Threat is harm source, vulnerability is a weakness, and risk is the likelihood of damage.

Foundation of information security: Confidentiality, Integrity, Availability.

Ensures sensitive information is accessed only by authorized users.

Ensures data remains accurate and unaltered over time.

Ensures systems and data are available when needed.

Users should have only the access necessary for their tasks.

Monitoring and capturing data packets across a network to analyze traffic.

A technique where an attacker actively injects packets into the network to intercept communications.

Capturing data packets in a network without altering or injecting any traffic.

An attack that overwhelms a system with traffic, making it unavailable to users.

A coordinated DoS attack from multiple compromised systems to amplify the attack effect.

Security that requires two or more verification factors for access, enhancing security.

A simulated cyberattack by ethical hackers to find system vulnerabilities.

Legitimate hacking performed to improve security, identifying weaknesses legally.

A decoy system that attracts attackers and monitors their behavior.

They isolate malicious activities for analysis and enhance threat intelligence.

High-interaction honeypots engage attackers fully; low-interaction limits engagement.

Security solution monitoring endpoint activities for threats in real-time.

EDR provides real-time visibility and response, unlike traditional antivirus which is often reactive.

A knowledge base of adversary tactics, techniques, and procedures used in cybersecurity.

Methods attackers use to move within a network after an initial breach.

Encryption method using a single key for both encryption and decryption.

Encryption method using a pair of keys: a public key for encryption and a private key for decryption.

Malicious hackers exploiting vulnerabilities for personal gain.

Ethical hackers hired to identify and fix vulnerabilities in systems.

Hackers who exploit vulnerabilities without malicious intent but without authorization.

An attack that manipulates DNS records to redirect users to malicious websites.

Identifying and prioritizing vulnerabilities in systems.

A model outlining stages of a cyberattack by Lockheed Martin.

Includes Reconnaissance, Weaponization, Delivery, Exploitation, Installation, Command and Control, and Actions on Objectives.

A software flaw unknown to the vendor or security community, exploited before a patch is available.

Techniques attackers use to move within a network after initial access.

The initial phase where attackers gather information about a target.

The mechanism used by attackers to maintain communication with compromised systems.

A VPN (Virtual Private Network) creates a secure, encrypted connection over the internet, allowing remote access to a private network.

A brute force attack uses trial and error to guess login credentials or passwords by systematically trying combinations.

A MITM attack occurs when an attacker intercepts and relays communication between two parties, stealing or manipulating data.

SQL injection is a code injection attack that exploits vulnerabilities in a database by inserting malicious SQL statements.

Phishing is a fraudulent attempt to obtain sensitive information by disguising as a trustworthy source in electronic communication.

Spear phishing targets specific individuals or organizations, often using personalized information to deceive them.

Encryption protocols are rules for encoding data in a VPN, ensuring secure communication and data protection over the Internet.

Rate limiting restricts the number of requests a user can make to a system over a period, helping to prevent brute force attacks.