9. What is the main objective of a Man-in-the-Middle (MitM) attack?

Intercept & alter communications between 2 parties without their knowledge

3. What distinguishes asymmetric encryption from symmetric encryption?

Asymmetric uses two different keys, encryption and decryption

4. What is the purpose of a network intrusion detection system (NIDS)?

Monitor network traffic for signsof malicious activity or policy violations

1. What is the primary advantage of using Multi-Factor Authentication (MFA) over single-factor authentication?

Adds an additional layer of security by requiring more than just password

2. Which of the following is an example of a spear phishing attack?

Attacker sends carefully crafted email to individual pretending toknow them

7. In a brute-force attack, how does an attacker attempt to gain access?

Systematically trying every possible password until one works

10. Which of the following best describes a ransomware attack?

Files are encrypted, and the attacker demands payment to decrypt them

8. Which of the following defines a buffer overflow attack?

System's memory buffer is overloaded; overwrites adjacent memory locations

5. Which of the following is the best description of a zero-day exploit?

Exploit that targets unpatched vulnerability unknown to the software vendor

studbud

Cybersecurity Basics

10 termsStudBud Administration

Imported from external platform

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
9. What is the main objective of a Man-in-the-Middle (MitM) attack?
To block access to websites by manipulating DNS settings
Intercept & alter communications between 2 parties without their knowledge
To gain direct access to a system by exploiting software vulnerabilities
To overload a system with network traffic and make it unavailable
2
3. What distinguishes asymmetric encryption from symmetric encryption?
Asymmetric encryption uses the same key for both encryption and decryption
Asymmetric is faster and more efficient than symmetric encryption
Asymmetric uses two different keys, encryption and decryption
Asymmetric encryption is primarily used for internal database encryption
3
4. What is the purpose of a network intrusion detection system (NIDS)?
To actively prevent and block suspicious traffic from entering the network
To encrypt all traffic between network devices for additional security
Monitor network traffic for signsof malicious activity or policy violations
To log and store network traffic for forensic analysis
4
1. What is the primary advantage of using Multi-Factor Authentication (MFA) over single-factor authentication?
It ensures that credentials are encrypted during transmission
Adds an additional layer of security by requiring more than just password
It reduces the complexity of password management
It makes password recovery easier for users
5
2. Which of the following is an example of a spear phishing attack?
Attacker sends generic email to group of users asking for login details
Attacker sends carefully crafted email to individual pretending toknow them
An attacker uses malware to record keystrokes and steal passwords
An attacker redirects users to a fake website to capture their credentials
6
6. Which encryption algorithm is considered more vulnerable to quantum computing?
SHA-3
AES
RSA
Blowfish
7
7. In a brute-force attack, how does an attacker attempt to gain access?
By exploiting a vulnerability in the software to escalate privileges
Systematically trying every possible password until one works
Using malware to gain administrative privileges and bypass authentication
By overwhelming a system with network traffic to make it crash
8
10. Which of the following best describes a ransomware attack?
Files are encrypted, and the attacker demands payment to decrypt them
Attack where sensitive data is stolen and sold on the dark web
An attack that disrupts network traffic by flooding servers with requests
An attack where user credentials are stolen via phishing
9
8. Which of the following defines a buffer overflow attack?
Outdated software patches are exploited to gain unauthorized access
An attack where encrypted data is intercepted during transmission
Malware is hidden in legitimate software to bypass security controls
System's memory buffer is overloaded; overwrites adjacent memory locations
10
5. Which of the following is the best description of a zero-day exploit?
Exploit that manipulates encryption protocols to gain unauthorized access
An exploit that spreads via social engineering tactics like phishing
Exploit that targets unpatched vulnerability unknown to the software vendor
An exploit that takes advantage of a recently patched vulnerability

Cybersecurity Basics Flashcards | StudBud