Security+ Threats Quiz: Can You Spot Every Attack?

1. Which malware runs with elevated system privileges and can hide its presence from security tools?

Trojan

Spyware

Rootkit

Adware

2. Which social engineering technique involves creating a false sense of urgency to pressure victims into action?

Pretexting

Baiting

Tailgating

Scarcity

Submit

4. Which vulnerability allows attackers to access files outside the intended directory structure?

Directory traversal

Insecure deserialization

Weak encryption

Unvalidated redirects

Submit

6. What is the primary characteristic of a worm as opposed to a virus?

Requires user interaction to spread

Self-replicates without attaching to other programs

Only affects network routers

Encrypts data automatically

Submit

8. Which attack technique involves crafting specially formatted input to overflow a program's memory buffer?

Privilege escalation

Buffer overflow

Logic bomb

Side-channel attack

9. What does a zero-day vulnerability represent?

A flaw unknown to the vendor with no patch available

A vulnerability patched within 24 hours

An outdated security protocol

A temporary network outage

Submit

11. Which attack type involves an attacker impersonating a trusted entity to extract sensitive information from users?

Phishing

Brute force

SQL injection

Buffer overflow

Submit

13. What is the primary goal of a social engineering attack?

Overload network bandwidth

Manipulate people into revealing confidential information

Corrupt database integrity

Disable firewall rules

14. Which attack exploits the trust relationship between a user and a website they visit regularly?

Cross-site request forgery (CSRF)

Replay attack

Privilege escalation

Backdoor access

Submit

16. Which type of malware self-replicates by attaching itself to other programs?

Ransomware

Worm

Virus

Rootkit

17. What does a man-in-the-middle (MITM) attack accomplish?

Intercepts and potentially modifies communication between two parties

Deletes all files on a target system

Locks users out of their accounts

Encrypts sensitive data permanently

Submit

19. Which vulnerability allows attackers to execute arbitrary code by exploiting improper input validation in web applications?

Cross-site scripting (XSS)

SQL injection

Directory traversal

Race condition

20. What is the primary purpose of a distributed denial-of-service (DDoS) attack?

Steal user credentials

Overwhelm a target with traffic to disrupt service

Inject malicious code into applications

Escalate user privileges

Security+ Threats Quiz: Can You Spot Every Attack?

1. Which malware runs with elevated system privileges and can hide its presence from security tools?

2.

What first name or nickname would you like us to use?

2. Which social engineering technique involves creating a false sense of urgency to pressure victims into action?

3. A ____ is a program that provides unauthorized remote access to a compromised system.

4. Which vulnerability allows attackers to access files outside the intended directory structure?

5. In a ____ attack, legitimate traffic from multiple sources is coordinated to overwhelm a target system.

6. What is the primary characteristic of a worm as opposed to a virus?

7. A ____ is unauthorized software that monitors user activity without their knowledge or consent.

8. Which attack technique involves crafting specially formatted input to overflow a program's memory buffer?

9. What does a zero-day vulnerability represent?

10. In a ____ attack, an attacker repeatedly guesses passwords until gaining unauthorized access.

11. Which attack type involves an attacker impersonating a trusted entity to extract sensitive information from users?

12. A ____ vulnerability exists when software does not properly validate or sanitize user input.

13. What is the primary goal of a social engineering attack?

14. Which attack exploits the trust relationship between a user and a website they visit regularly?

15. A ____ is malicious software that encrypts user files and demands payment for decryption.

16. Which type of malware self-replicates by attaching itself to other programs?

17. What does a man-in-the-middle (MITM) attack accomplish?

18. A ____ attack tricks users into clicking malicious links embedded in legitimate-looking emails.

19. Which vulnerability allows attackers to execute arbitrary code by exploiting improper input validation in web applications?

20. What is the primary purpose of a distributed denial-of-service (DDoS) attack?