How can network attacks be mitigated?

Implementing security protocols

What is the result of DNS Client Cache Poisoning?

Incorrect IP address resolution

studbud

chapter 13 Malware and Cybersecurity

174 termsStudBud Administration

Test your knowledge on different types of malware and cybersecurity concepts

Flashcards174 cardsFPractice quizPHost liveL

Questions 174

Answers

1
What is the role of firewalls in security?
Manage user accounts
Block unauthorized access
Store data securely
Speed up connections
2
Which malware type is designed to evade detection?
Adware
Script Viruses
Computer Worms
Keyloggers
3
What is the goal of a birthday attack?
Send spam
Encrypt data
Find hash collisions
Delete files
4
What is the focus of collision attacks?
File deletion
Data encryption
Hash collisions
Spam sending
5
What is a common method for malware delivery?
Software updates
Phishing emails
User downloads
Network scanning
6
What is the role of resource consumption in malware detection?
To indicate anomalies
To reduce costs
To enhance security
To optimize performance
7
What is the significance of understanding network attacks?
Improves security measures
Reduces data storage
Enhances user experience
Increases network speed
8
What does the term 'application attack indicators' refer to?
Signs of security threats
Design flaws
User engagement metrics
Performance benchmarks
9
What does a physical attack target?
Network infrastructure
Software systems
User accounts
Physical assets
10
Which attack involves hash collisions?
DDoS attack
Birthday attack
Phishing attack
Replay attack
11
What is a hybrid password attack?
Combine methods
Boost signal
Block access
Encrypt data
12
What is a key characteristic of a backdoor?
Secretive access
Visible to users
Requires authentication
Enhances security
13
What is Cross-Site Request Forgery?
A database breach
An attack on users
A server-side issue
A type of injection
14
What is a common tactic used by malware?
Data encryption
Phishing attacks
Social engineering
System updates
15
What is the primary function of a macro virus?
To automate tasks
To enhance performance
To encrypt files
To infect documents
16
What is the goal of key recovery?
Block access
Boost signal
Encrypt files
Decrypt data
17
Which malware type poses the greatest threat today?
Worms
Adware
Spyware
Trojans
18
What is a common sign of a BEC incident?
Frequent software updates
Unusual email requests
High CPU usage
Slow internet connection
19
What is the function of %SystemRoot%?
Windows directory
Linux directory
Network directory
Mac directory
20
Which malware type can operate without traditional files?
Spyware
Adware
Fileless Malware
Trojan Horses
21
What is vertical privilege escalation?
No access change
Higher access level
Same access level
Lower access level
22
What is the primary goal of credential harvesting?
To improve network speed
To gain unauthorized access
To enhance user experience
To monitor network traffic
23
What is the goal of a brute force attack?
Install malware
Steal data
Gain unauthorized access
Create fake accounts
24
What indicates a successful HTTP request?
200
403
404
500
25
Which malware can reside in memory?
Spyware
Computer Viruses
Trojan Horses
Adware
26
What is a disassociation attack?
Steal data
Disconnect users
Encrypt files
Boost signal
27
What is the role of developer tools?
Debugging applications
Managing databases
Writing code
Designing graphics
28
What is the role of tracking cookies?
To track user behavior
To encrypt data
To create backdoors
To install malware
29
How does ARP poisoning affect network security?
By blocking access
By encrypting data
By redirecting traffic
By improving performance
30
What is a sign of potential application attack?
Single access log entry
Repeated access attempts
No access logs
Random IP addresses
31
What is a common vector for malware distribution?
Email attachments
Physical drives
User passwords
Firewall breaches
32
How can network attacks be mitigated?
Enhancing user experience
Increasing bandwidth
Reducing user access
Implementing security protocols
33
What is a network attack indicator?
Encrypted data
Normal traffic
Regular updates
Unusual traffic
34
What does environmental attack refer to?
Physical damage
Software failure
Network slowdown
User error
35
What is a backdoor in cybersecurity?
A firewall breach
A secure access point
A software update
A hidden entry point
36
What is the primary focus of network security?
Increasing bandwidth
Reducing costs
Protecting data integrity
Enhancing user experience
37
Which malware type is often bundled with legitimate software?
Worms
Adware
Fileless Malware
Keyloggers
38
How do backdoors evade detection?
By deleting logs
By disguising as legitimate
By using encryption
By slowing down systems
39
What is a common indicator of account compromise?
High CPU usage
Concurrent session usage
Slow internet speed
Frequent updates
40
Which malware type is often associated with APTs?
Spyware
Adware
Worms
Fileless Malware
41
What is the result of DNS Client Cache Poisoning?
Incorrect IP address resolution
Improved security protocols
Faster internet access
Enhanced user experience
42
What is the main risk of using potentially unwanted programs?
Faster internet speed
System performance boost
Enhanced security
Data privacy issues
43
What does a 405 error indicate?
Method not allowed
Internal server error
Forbidden access
Page not found
44
Which attack uses arbitrary code execution?
DDoS attack
SQL injection
Remote code execution
Phishing attack
45
Which malware type encrypts files for ransom?
Logic Bomb
Backdoor
Ransomware
Rootkit
46
What is the purpose of reconnaissance scanning?
To improve performance
To encrypt data
To block attacks
To gather information
47
Which file stores Windows passwords?
boot.ini
NTDS.DIT
config.sys
shadow
48
What ensures persistence in attacks?
Maintaining access
Encrypting data
Sending spam
Deleting files
49
What is the purpose of a security audit?
Enhance software features
Identify vulnerabilities
Reduce costs
Increase user traffic
50
How does lateral movement occur in network attacks?
By increasing bandwidth
By enhancing security
By monitoring traffic
By exploiting vulnerabilities
51
What is the main goal of forgery attacks?
User impersonation
System performance
Network security
Data integrity
52
Which attack uses shellcode?
Data encryption
Code execution
File deletion
Spam sending
53
What does a threat actor aim to achieve in network attacks?
Better user experience
Enhanced data integrity
Control over systems
Increased network speed
54
How do rootkits operate?
By hiding their presence
By encrypting data
By slowing down systems
By deleting files
55
What is the role of the Address Resolution Protocol?
Encrypting data packets
Improving network speed
Mapping IP addresses to MAC addresses
Blocking unauthorized access
56
How can malicious activity be detected?
Through indicators
Through firewalls
By user reports
By system updates
57
What defines a downgrade attack?
Strengthens encryption
Deletes data
Weakens encryption
Increases speed
58
What are IoCs in cybersecurity?
Indicators of Change
Instances of Control
Indicators of Compromise
Infiltration of Codes
59
How does an injection attack occur?
By server configuration
Through user input
With software updates
Via network traffic
60
Which term describes crypto-mining malware?
Logic Bomb
Backdoor
Cryptojacking
Ransomware
61
Which device is often used in physical attacks?
USB extension device
Printer
Router
Smartphone
62
Which malware type can use shellcode payloads?
Keyloggers
Adware
Trojan Horses
Worms
63
What is a common feature of memory resident malware?
Disables antivirus software
Stays active in memory
Installs on hard drive
Requires user input
64
What defines a rogue access point?
Low signal
Unauthorized device
High speed
Secure connection
65
What is password spraying?
Block access
Boost signal
Try common passwords
Encrypt files
66
What is credential dumping?
Encrypting files
Stealing passwords
Deleting logs
Sending spam
67
What is the significance of 'james1'?
Encryption key
Signal booster
Access code
Example password
68
How can you identify a malware attack?
No internet connection
Missing logs
Increased battery life
Faster processing speed
69
What is the purpose of a command and control server?
To store data securely
To optimize performance
To manage network traffic
To control botnets
70
Which attack involves multiple compromised systems?
DDoS attack
On-path attack
ARP poisoning
Credential harvesting
71
What is the first step in improving database security?
Validating requests
Encrypting data
Monitoring traffic
Updating software
72
How does a downgrade attack affect security?
No effect
Strengthens security
Weakens security
Improves speed
73
What is the role of NTDS.DIT?
Store Active Directory data
Encrypt files
Block access
Boost signal
74
What does 'impossible travel' indicate?
Hardware malfunction
User's location change
Software update needed
Network speed issue
75
Which is a common injection type?
Denial of Service
SQL Injection
Phishing Attack
Cross-Site Scripting
76
What is a common indicator of LDAP injection?
High traffic volume
Frequent logouts
Unusual query patterns
Slow response times
77
Which technique is used by logic bombs?
Data encryption
Network scanning
Time-based activation
Remote access
78
How does a dictionary attack work?
Boost signal
Block access
Use word lists
Encrypt files
79
What does a malware attack often encrypt?
User files
Network settings
Software applications
Hardware configurations
80
What is the main goal of cryptojacking?
To control systems
To encrypt files
To mine cryptocurrency
To steal data
81
Which of the following is a characteristic of adware?
Steals passwords
Installs backdoors
Encrypts files
Displays unwanted ads
82
What is a sign of physical attack?
Software crash
Unauthorized access
Slow performance
Frequent updates
83
Which attack is characterized by overwhelming a target?
DDoS attack
Credential harvesting
ARP poisoning
On-path attack
84
What is credential replay?
Block access
Boost signal
Encrypt data
Reuse credentials
85
What is the first step in preventing forgery attacks?
Data encryption
Software updates
Firewall configuration
User education
86
What is LDAP used for?
Web hosting
File storage
Email management
Directory services
87
What is the aim of credential dumping?
Encrypt data
Steal credentials
Send spam
Delete files
88
What is the significance of request validation?
Improving aesthetics
Increasing server speed
Preventing unauthorized access
Enhancing user experience
89
What is a directory traversal attack?
Injecting malicious code
Bypassing firewalls
Accessing unauthorized files
Stealing user data
90
What is a significant challenge in detecting advanced persistent threats?
System updates
Stealth and sophistication
User awareness
Network speed
91
How can one prevent injection attacks?
User education
Firewall settings
Software updates
Input validation
92
What does C2 stand for in cybersecurity?
Cyber and Control
Command and Control
Control and Command
Centralized Command
93
Which attack targets server requests?
Server-Side Request Forgery
Cross-Site Scripting
XML Parsing
SQL Injection
94
Which of the following is a method of lateral movement?
Pivoting through systems
Encrypting sensitive data
Monitoring user activity
Blocking unauthorized access
95
What is a brute force attack?
Network scanning
Password guessing
Data encryption
Phishing attempt
96
Which malware type allows remote control?
Logic Bomb
Remote Access Trojan
Rootkit
Ransomware
97
How does understanding network attacks benefit organizations?
Reduces employee productivity
Strengthens security posture
Limits data access
Increases operational costs
98
What is the main goal of web security?
Enhancing user interface
Reducing costs
Protecting data integrity
Increasing website traffic
99
What is the impact of compromised DNS servers?
Redirecting legitimate traffic
Enhancing user privacy
Improving data integrity
Blocking unauthorized access
100
What is a sign of concurrent session usage?
Slow performance
Frequent updates
High battery usage
Multiple devices logged in
101
What does account lockout signify?
Network issue
User inactivity
Software update
Suspicious activity
102
Which method is used to send data to a server?
DELETE
POST
PATCH
GET
103
What is the result of privilege escalation?
Lower privileges
Same privileges
No privileges
Higher privileges
104
Which attack involves insider threats?
SQL injection
Phishing attack
DDoS attack
Insider attack
105
What does LDAP stand for?
Lightweight Data Access Protocol
Local Data Access Protocol
Local Directory Access Protocol
Lightweight Directory Access Protocol
106
What is a characteristic of on-path attacks?
Network optimization
Data encryption
User authentication
Traffic interception
107
How does lateral movement occur?
Delete files
Move within network
Encrypt data
Send spam
108
How does a wireless replay attack work?
Block access
Encrypt data
Change passwords
Repeat signals
109
What is a common method for securing web applications?
Content creation
Visual design
Regular updates
User feedback
110
What is the purpose of a security audit?
Increasing traffic
Identifying vulnerabilities
Enhancing user experience
Improving aesthetics
111
What does a successful injection attack compromise?
User privacy
Software functionality
System speed
Network bandwidth
112
What is a common indicator of a DDoS attack?
Decreased bandwidth
Increased latency
Improved response time
Enhanced security measures
113
What is the main focus of cybersecurity?
Enhancing user experience
Increasing profits
Improving performance
Protecting data
114
What is a common response to account compromise?
Restart devices
Change passwords
Ignore alerts
Update software
115
What is a logic bomb?
A malicious code trigger
A network security tool
A data recovery method
A type of ransomware
116
What is the impact of online attacks?
Encrypt data
Compromise security
Boost signal
Block access
117
What does PUP stand for?
Potentially Unwanted Programs
Public User Protocols
Private User Programs
Persistent Unwanted Payloads
118
What is a common indicator of a rootkit?
Unusual network activity
Slow performance
Frequent crashes
Hidden processes
119
What is the role of interaction opportunity?
Encrypt files
Boost signal
Facilitate engagement
Block access
120
What does command injection exploit?
User input validation
Database queries
Network security
File permissions
121
How is remote code execution achieved?
Encrypting data
Sending spam
Executing code remotely
Deleting files
122
What is a keylogger primarily used for?
Tracking keystrokes
Encrypting data
Creating backdoors
Spreading malware
123
What does XML stand for?
Extra Markup Language
Extensible Markup Language
Executable Markup Language
Extended Model Language
124
What does 'grc' refer to?
Governance, Risk, Compliance
Global Risk Center
Group Resource Channel
General Resource Control
125
What does the term 'access log' refer to?
Network status
User activity record
System configuration
Error report
126
Which malware type is known for self-replication?
Spyware
Computer Worms
Trojan Horses
Adware
127
What does command injection exploit?
Network protocols
Database queries
User credentials
System commands
128
Where are Linux passwords stored?
/etc/shadow
/var/log
/usr/bin
/home/user
129
What does RFID cloning involve?
Hacking passwords
Creating fake emails
Installing malware
Copying access cards
130
What is the role of XML in web services?
Network security
Data exchange format
User interface design
Server management
131
How does shellcode function?
Encrypts data
Sends emails
Deletes files
Executes commands
132
Which protocol is associated with LDAP?
TCP/IP
X.500
FTP
HTTP
133
What is the significance of analyzing web server logs?
Identifying user preferences
Detecting security threats
Improving website design
Increasing server speed
134
Which attack involves unauthorized access to directories?
Directory Traversal
Cross-Site Scripting
Phishing
SQL Injection
135
What is the purpose of a beacon in malware?
To track user behavior
To install updates
To encrypt data
To communicate with servers
136
How can organizations protect against ransomware?
Software updates
Firewall updates
User training
Regular backups
137
What does the term 'back-end' refer to?
Client-side scripts
Server-side operations
Network protocols
User interface
138
How does a user present a TGT?
To a device
To an application
To a network
To a server
139
How does a collision attack work?
No hash value
Different hash value
Encrypted hash
Same hash value
140
What is the effect of DNS poisoning?
Improving data integrity
Enhancing user privacy
Speeding up DNS resolution
Redirecting users to fake sites
141
What does TTP stand for in cybersecurity?
Tools, Techniques, Protocols
Tactics, Techniques, Procedures
Tactics, Tools, Processes
Techniques, Tactics, Policies
142
What is the purpose of malicious code?
Harm systems
Protect systems
Send emails
Encrypt data
143
What is a brute force attack?
Encrypt data
Boost signal
Block access
Guess passwords
144
Which attack mimics a legitimate network?
Replay
Evil twin
Brute force
Dictionary
145
Which attack involves lateral movement?
Insider attack
DDoS attack
Phishing attack
SQL injection
146
What is a common consequence of a security breach?
Increased user trust
Data loss
Improved performance
Higher revenue
147
What does missing logs indicate?
Network issue
User inactivity
Software update needed
Potential security breach
148
What is a common response code for not found?
403
404
500
200
149
How can you analyze malicious activity?
Restarting devices
Reviewing logs
Updating software
Changing passwords
150
Which attack involves pivoting?
SQL injection
DDoS attack
Lateral movement
Phishing attack
151
What is the impact of a successful CSRF attack?
Network congestion
Data loss
Unauthorized actions
System downtime
152
What is the principal threat of credential replay?
Data encryption
Signal boost
Unauthorized access
Access block
153
Which tool can be used to detect DNS cache poisoning?
nslookup
ping
traceroute
netstat
154
What does the term 'grayware' refer to?
Potentially unwanted programs
Secure applications
Malicious software
System utilities
155
What is a common consequence of server-side attacks?
Data theft
User engagement
Increased traffic
System updates
156
What is a TGT in security?
Transfer Grant Ticket
Ticket Granting Ticket
Time Generated Token
Temporary Grant Token
157
What is the significance of input validation?
Increases system speed
Enhances user experience
Prevents malicious input
Reduces server load
158
Which protocol is targeted in ARP poisoning?
FTP
HTTP
DNS
ARP
159
What is the purpose of analyzing indicators?
Reduce costs
Identify threats
Enhance user experience
Increase performance
160
What does the term 'interaction opportunity' imply?
Data collection method
Marketing strategy
User feedback session
Content creation plan
161
What is the primary goal of spyware?
To encrypt data
To spread viruses
To create malware
To gather information
162
What is an application attack indicator?
Unusual app behavior
Encrypted data
Regular updates
Normal app behavior
163
Which attack uses 'or123456'?
Dictionary
Password spraying
Replay
Brute force
164
What is the primary function of ransomware?
Data encryption
System optimization
Network monitoring
Data recovery
165
What is a replay attack?
Encrypting data
Deleting files
Sending spam
Reusing data packets
166
What is the impact of a successful cryptojacking attack?
Increased performance
Resource depletion
System optimization
Data loss
167
How is privilege escalation achieved?
Losing access
Encrypting data
Deleting files
Gaining higher access
168
What is a Trojan's primary function?
To spread viruses
To operate secretly
To steal data
To encrypt files
169
What is the impact of user awareness on security?
Increases costs
Reduces risks
Slows down processes
Limits access
170
What is a key indicator of malware?
Encrypted files
Fast internet speed
High disk space
Frequent updates
171
What is a common method for malware detection?
Behavioral analysis
User reports
Network speed tests
System updates
172
Which attack manipulates the Domain Name System?
ARP poisoning
Credential harvesting
DNS poisoning
DDoS attack
173
What is the purpose of percent encoding?
Data compression
URL formatting
Data encryption
File transfer
174
What is the purpose of teaching tips?
Encrypt data
Enhance learning
Block access
Boost signal

chapter 13 Malware and Cybersecurity Flashcards | StudBud