"Cybersecurity Awareness Quiz - SimeonOnSecurity"

Question 1

"What is the purpose of multi-factor authentication (MFA)?"

Accepted Answer

"MFA adds an additional layer of security beyond just a password. This helps to prevent unauthorized access to a system, even if the password has been compromised. Therefore, answer b is correct."

Question 2

"What is a phishing attack?"

Accepted Answer

"Phishing is a type of social engineering attack that attempts to trick a user into divulging sensitive information, such as login credentials or financial information. Therefore, answer c is correct."

Question 3

"What is ransomware?"

Accepted Answer

"Ransomware is a type of malware that encrypts data on a system and demands payment in exchange for the encryption key. Therefore, answer c is correct."

Question 4

"What is a firewall?"

Accepted Answer

"A firewall is a device that monitors network traffic and blocks unauthorized access. It can be configured to allow or deny traffic based on various criteria, such as the source or destination IP address, port number, or protocol. Therefore, answer b is correct."

Question 5

"What is a VPN?"

Accepted Answer

"A VPN (virtual private network) is a technology that creates a secure, encrypted tunnel between two points on a network. It can be used to securely connect to a remote network or to encrypt traffic on an untrusted network, such as a public Wi-Fi hotspot. Therefore, answer d is correct."

Question 6

"What is social engineering?"

Accepted Answer

"Social engineering is a technique used to gain unauthorized access to a system by manipulating people. This can involve techniques such as phishing, pretexting, or baiting. Therefore, answer b is correct."

Question 7

"What is a man-in-the-middle (MITM) attack?"

Accepted Answer

"A man-in-the-middle (MITM) attack is an attack that intercepts and alters communication between two parties without their knowledge. This can be used to steal sensitive information or to modify the contents of a communication. Therefore, answer a is correct."

Question 8

"What is a denial-of-service (DoS) attack?"

Accepted Answer

"A denial-of-service (DoS) attack is an attack that floods a network with traffic to disrupt service. This can make a system or network unavailable to legitimate users. Therefore, answer c is correct."

Question 9

"What is a password manager?"

Accepted Answer

"A password manager is a tool that automatically generates and stores complex passwords. This can help to prevent users from using weak or easily-guessed passwords, which can be easily compromised by attackers. Therefore, answer a is correct."

Question 10

"What is a SQL injection attack?"

Accepted Answer

"A SQL injection attack is an attack that exploits a vulnerability in a database to execute malicious SQL statements. This can be used to extract sensitive information or to modify the contents of a database. Therefore, answer d is correct."

Question 11

"What is a vulnerability assessment?"

Accepted Answer

"A vulnerability assessment is a technique used to identify weaknesses in a system or network. This can include techniques such as port scanning, vulnerability scanning, and penetration testing. Therefore, answer b is correct."

Question 12

"What is a patch?"

Accepted Answer

"A patch is a software update that fixes a vulnerability or bug in a system. Patches are often released by software vendors to address security vulnerabilities or to improve the functionality of their software. Therefore, answer b is correct."

Question 13

"What is two-factor authentication (2FA)?"

Accepted Answer

"Two-factor authentication (2FA) is a technique used to prevent unauthorized access to a system by requiring two forms of authentication. This can involve something the user knows (such as a password) and something the user has (such as a smartphone or hardware token). Therefore, answer b is correct."

Question 14

"What is a firewall?"

Accepted Answer

"A firewall is a device that monitors network traffic and blocks unauthorized access. It can be configured to allow or deny traffic based on various criteria, such as the source or destination IP address, port number, or protocol. Therefore, answer b is correct."

Question 15

"What is a honeypot?"

Accepted Answer

"A honeypot is a decoy system designed to attract attackers and gather information about their tactics. This can help organizations to identify and respond to attacks more effectively. Therefore, answer c is correct."

Question 16

"What is a VPN?"

Accepted Answer

"A VPN (virtual private network) is a technology that creates a secure, encrypted tunnel between two points on a network. It can be used to securely connect to a remote network or to encrypt traffic on an untrusted network, such as a public Wi-Fi hotspot. Therefore, answer d is correct."

Question 17

"What is a phishing email?"

Accepted Answer

"A phishing email is an email that attempts to trick a user into divulging sensitive information, such as login credentials or financial information. These emails often use social engineering techniques to create a sense of urgency or to appear legitimate. Therefore, answer a is correct."

Question 18

"What is a brute-force attack?"

Accepted Answer

"A brute-force attack is an attack that attempts to guess a password by trying every possible combination. This can be an effective way to crack weak passwords, but can be very time-consuming for longer, more complex passwords. Therefore, answer d is correct."

Question 19

"What is a ransomware attack?"

Accepted Answer

"A ransomware attack is an attack that encrypts a victim's data and demands payment for its release. These attacks can be very disruptive and can result in the loss of important data if proper backups are not in place. Therefore, answer d is correct."

Question 20

"What is multi-factor authentication (MFA)?"

Accepted Answer

"Multi-factor authentication (MFA) is a technique used to prevent unauthorized access to a system by requiring multiple forms of authentication. This can involve something the user knows (such as a password) and something the user has (such as a smartphone or hardware token), as well as something the user is (such as a fingerprint or facial recognition). Therefore, answer b is correct."

Question 21

"What is a zero-day vulnerability?"

Accepted Answer

"A zero-day vulnerability is a vulnerability that can be exploited by attackers before a patch or update is released. These vulnerabilities can be very dangerous because there is no known fix for them, and attackers can use them to gain unauthorized access to systems or steal sensitive information. Therefore, answer d is correct."

Question 22

"What is social engineering?"

Accepted Answer

"Social engineering is a type of attack that uses deception to manipulate individuals into divulging sensitive information, such as passwords or financial information. This can include techniques such as phishing emails, pretexting, and baiting. Therefore, answer c is correct."

Question 23

"What is a man-in-the-middle attack?"

Accepted Answer

"A man-in-the-middle attack is an attack that intercepts and alters communication between two parties without their knowledge. This can allow the attacker to eavesdrop on sensitive conversations, steal login credentials, or modify messages to suit their needs. Therefore, answer a is correct."

Question 24

"What is encryption?"

Accepted Answer

"Encryption is a technique used to convert plaintext into ciphertext to protect it from unauthorized access. This can be done using various algorithms and keys to ensure that only authorized users can read the encrypted data. Therefore, answer c is correct."

Question 25

"What is a bot?"

Accepted Answer

"A bot is a program that performs automated tasks on a system. This can include tasks such as crawling the web for information, generating spam emails, or carrying out distributed denial-of-service (DDoS) attacks. Therefore, answer c is correct."