CCST Cybersecurity Threat Identification

1. What is the primary difference between a virus and a worm?

Viruses are slower than worms

Worms spread independently; viruses need a host program

Viruses only affect data; worms affect systems

There is no significant difference

2. What is the most effective defense against social engineering attacks?

Installing antivirus software

User awareness training and verification procedures

Using strong passwords only

Disabling email access

Submit

4. Which type of malware secretly monitors user activity without permission?

Spyware

Adware

Rootkit

Botnet

5. What does a firewall primarily do to protect a network?

Encrypts all data on the network

Monitors and controls incoming and outgoing traffic

Removes all malware automatically

Prevents users from accessing the internet

Submit

7. Which of the following is a characteristic of a Trojan horse?

It replicates on its own

It appears legitimate but contains hidden malicious code

It encrypts files automatically

It spreads through email attachments only

8. What is pretexting in social engineering?

Creating a false scenario to extract information

Offering a reward for information

Leaving infected USB drives in public places

Monitoring network traffic

Submit

10. Which attack type involves injecting malicious code into a web application's input field?

Cross-site scripting (XSS)

SQL injection

Buffer overflow

Directory traversal

11. Which type of malware self-replicates by attaching itself to legitimate programs?

Virus

Worm

Trojan

Ransomware

Submit

13. Which type of attack attempts to guess passwords by trying many combinations?

Dictionary attack

Brute force attack

Rainbow table

Credential stuffing

14. What is a zero-day vulnerability?

A flaw unknown to the vendor that has no patch available

A vulnerability that exists for zero days

An attack that occurs at midnight

A patch released on day zero

Submit

16. Which social engineering tactic uses fake urgency to pressure victims into acting quickly?

Baiting

Pretexting

Urgency scam

Quid pro quo

17. What does a worm require to spread across a network?

A host program to attach to

User interaction or action

No host program; it spreads independently

Administrator credentials

Submit

19. Which attack type involves an attacker pretending to be a trusted source to gain unauthorized access?

Brute force

Man-in-the-middle

Spoofing

SQL injection

20. What is the primary goal of a phishing attack?

Steal bandwidth from networks

Trick users into revealing sensitive information

Encrypt all system files

Disable firewall protections

CCST Cybersecurity Basic Threat Identification Quiz

1. What is the primary difference between a virus and a worm?

2.

What first name or nickname would you like us to use?

2. What is the most effective defense against social engineering attacks?

3. A ____ is a compromised computer controlled remotely by an attacker without the user's knowledge.

4. Which type of malware secretly monitors user activity without permission?

5. What does a firewall primarily do to protect a network?

6. A ____ is a security flaw in software that allows unauthorized access or data breach.

7. Which of the following is a characteristic of a Trojan horse?

8. What is pretexting in social engineering?

9. A ____ attack floods a network with excessive traffic to make services unavailable.

10. Which attack type involves injecting malicious code into a web application's input field?

11. Which type of malware self-replicates by attaching itself to legitimate programs?

12. A ____ is an unsolicited email attempt to collect sensitive information by impersonating a legitimate organization.

13. Which type of attack attempts to guess passwords by trying many combinations?

14. What is a zero-day vulnerability?

15. A ____ attack intercepts and reads data transmitted between two parties.

16. Which social engineering tactic uses fake urgency to pressure victims into acting quickly?

17. What does a worm require to spread across a network?

18. A ____ is malware that encrypts a user's files and demands payment for decryption.

19. Which attack type involves an attacker pretending to be a trusted source to gain unauthorized access?

20. What is the primary goal of a phishing attack?