Cyber Security Quiz Questions

Asymmetric key encryption is a cryptographic system that uses a pair of keys, consisting of a private signing key and a public verification key. The private key is kept secret by the owner and is used for signing messages, while the public key is freely distributed and is used by others to verify the authenticity of the signed messages. This allows for secure communication without the need for the sender and receiver to share a common key. Asymmetric key encryption can be used for various purposes, including encryption, digital signatures, and authentication. However, it is not suitable for non-repudiation purposes, as it does not provide absolute proof of the sender's identity.

Continually bombarding a targeted network with fake requests is a form of Denial of Service (DoS) attack. In this type of attack, the attacker overwhelms the network or system with a large volume of fake requests, consuming its resources and causing it to become slow or unresponsive to legitimate users. This hinders the network's ability to handle genuine traffic, resulting in a denial of service to legitimate users.

Spyware is a type of monitoring software that is installed on a device without the user's consent or knowledge. It secretly gathers information about the user's activities, such as browsing habits, keystrokes, and personal data, and sends it to a third party without the user's permission. Unlike malware, adware, and ransomware, which may cause harm or disrupt the device, spyware primarily focuses on collecting information covertly.

WPA (Wi-Fi Protected Access) offers the strongest wireless signal encryption among the given options. WPA is a security protocol that provides improved encryption and authentication compared to its predecessor, WEP (Wired Equivalent Privacy). WPA uses a stronger encryption algorithm called TKIP (Temporal Key Integrity Protocol) and provides better protection against unauthorized access and attacks. WAP (Wireless Application Protocol) is a different technology used for accessing internet services on mobile devices, while WIPS (Wireless Intrusion Prevention System) is a security solution that detects and prevents unauthorized access to wireless networks.

Of the choices, only SSH and Telnet are remote access protocols. SSH is encrypted while Telnet is not.

A false positive is when an event is incorrectly identified as an attack by an IDS (Intrusion Detection System) when in fact no attack has taken place. This can occur due to misconfiguration, false alarms, or the IDS misinterpreting normal behavior as malicious activity. In this scenario, the IDS produces an alarm, indicating a potential attack, even though there is none. This can lead to wasted resources and time investigating non-existent threats.

A worm is a type of malware that replicates itself in order to spread to other computers. Unlike viruses, worms do not need a carrier file to infect a system. Instead, worms exploit vulnerabilities in network protocols to spread automatically from one computer to another. This self-replicating behavior distinguishes worms from other types of malware, such as trojans, which rely on user actions to propagate, and viruses, which typically require a host file to attach themselves to.

Black Box testing is a type of testing where the tester has no prior knowledge about the system being tested. The tester is not provided with any information about the internal workings or architecture of the system. This type of testing simulates an attacker with no insider knowledge, allowing them to approach the system as an external entity. Therefore, Black Box testing provides little to no information about the system to the penetration tester.

This is an example of social engineering because the attacker is manipulating and deceiving the victim by posing as an IT tech to gain access to their computer configuration information. Social engineering involves exploiting human psychology and trust to trick individuals into revealing sensitive information or performing actions that they normally wouldn't. In this case, the attacker is using their knowledge of IT to appear legitimate and convince the victim to disclose information that could potentially be used for malicious purposes.

A honeypot is a security measure that involves creating a network site that appears to contain valuable information, but is actually isolated and monitored. The purpose of a honeypot is to attract potential attackers and gather information about their techniques and tactics. By luring attackers into the honeypot, organizations can gain valuable insights into their methods and enhance their overall security measures.

To set up a wireless access point, you need the SSID (Service Set Identifier). The SSID is the name that identifies the wireless network, allowing devices to connect to it. By configuring the SSID, you can specify the network's name and make it visible to devices in range. This way, users can select and connect to the correct wireless network. The SSID is an essential piece of information required for setting up a wireless access point.

Stateful and stateless are two types of network layer firewalls. Stateful firewalls keep track of the state of network connections and only allow incoming traffic that is part of an established connection. They examine the context of the traffic and make decisions based on the connection's state. On the other hand, stateless firewalls do not keep track of the connection state and make decisions based on individual packets. They examine the packet's header information, such as source and destination IP addresses, and apply filtering rules accordingly. Both types of firewalls are used to protect networks from unauthorized access and malicious activities.

MD4 is a password hashing algorithm. It is a widely used cryptographic hash function that produces a 128-bit hash value. It is designed to be fast and efficient, making it suitable for password hashing. However, MD4 is considered to be insecure and vulnerable to various attacks, so it is not recommended for use in modern systems. AES, PGP, and 3DES are encryption algorithms, not password hashing algorithms.

HoneyMonkey is a Microsoft research honeypot. The others are tools used to crack passwords. Hashcat is specifically for password hashes, while Cain and Abel are designed for password recovery.

Server spoofing is not a DoS attack because it involves impersonating a server to gain unauthorized access or deceive users, rather than overwhelming a server or network to cause a denial of service. DoS attacks, on the other hand, aim to disrupt the availability of a service by flooding it with excessive traffic or exploiting vulnerabilities.

An IPS can be installed on the host computer or on the network server.

802.11i is the correct answer because it is the security standard for WPA2. WPA2 (Wi-Fi Protected Access 2) is a security protocol that provides encryption and authentication for wireless networks. It is based on the IEEE 802.11i standard, which specifies the implementation of advanced encryption algorithms such as AES (Advanced Encryption Standard) and CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol). WPA2 is considered more secure than its predecessor, WPA, and is widely used to protect Wi-Fi networks from unauthorized access.

PGP (Pretty Good Privacy) uses asymmetric key encryption. Asymmetric encryption involves the use of a pair of keys, a public key and a private key. The public key is used to encrypt data, while the private key is used to decrypt it. PGP utilizes this encryption method to secure communication and data transfer. It is commonly used for email encryption and digital signatures. AES (Advanced Encryption Standard), 3DES (Triple Data Encryption Standard), and RC5 are symmetric key encryption algorithms, which use the same key for both encryption and decryption.

The given options are Tunneling, Boot sector, Macro, and Wrapper. Tunneling, Boot sector, and Macro are all types of viruses that infect computer systems. However, a Wrapper is not a type of virus. A wrapper is a term used to describe a piece of code that is used to encapsulate or wrap around another program or component to provide additional functionality or to simplify the usage of the underlying code. It is not inherently malicious like a virus.

Mandatory and discretionary are two types of role-based access control lists. Mandatory access control (MAC) is a security model where access decisions are based on the classification level of the information and the security clearance of the user. Discretionary access control (DAC) is a security model where access decisions are based on the discretion of the owner of the resource. These two types of access control lists provide different levels of control and security in managing access to resources.