What is the key difference between a virus and a worm?

A worm replicates independently, while a virus attaches to other files

What is a characteristic of a zero-day attack?

It exploits vulnerabilities before they are known or patched

What does a DNS spoofing attack do?

Introduces false data into a DNS resolver cache

What is a whaling attack?

A phishing attack targeting high-profile individuals

What is a threat domain?

An area of control that attackers can exploit

Which of the following is a sign of spam email?

The email’s sender address doesn’t match the claimed organization

Which of the following is an example of an internal threat?

An employee accidentally accessing a malicious website

Which of the following is a characteristic of ransomware?

It encrypts data until a ransom is paid

What is a common user threat to an organization’s information system?

Lack of awareness of security policies

What is spear phishing?

A targeted attack customized for a specific person

What does a rogue access point allow an attacker to do?

Capture login information via a MitM attack

What is a common defense against wireless and mobile device attacks?

Using tools like NetStumbler to detect rogue access points

Which of the following is a type of social engineering tactic?

Using intimidation to gain access

studbud

DONE - Lesson 154.1 - Cybersecurity, Threats, Vulnerabilities, and Attacks

20 termsStudBud Administration13 plays

Imported from external platform

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
What is the key difference between a virus and a worm?
A virus replicates independently, while a worm attaches to other files
A worm replicates independently, while a virus attaches to other files
A virus masks its true intent, while a worm does not
A worm encrypts data, while a virus does not
2
Social engineering is a technical strategy that manipulates individuals into sharing confidential information.
False
True
3
Which method do attackers use to observe a target’s PIN or access codes?
Shoulder surfing
Bluesnarfing
Pretexting
Dumpster diving
4
What is a characteristic of a zero-day attack?
It targets high-profile individuals
It exploits vulnerabilities after a patch is released
It involves intercepting communications between devices
It exploits vulnerabilities before they are known or patched
5
What does a DNS spoofing attack do?
Introduces false data into a DNS resolver cache
Overwhelms a network with traffic
Encrypts DNS server data
Hijacks a domain to make unauthorized changes
6
What is a whaling attack?
A phishing attack targeting high-profile individuals
An attack that copies data via Bluetooth
An attack that misdirects users to fake websites
An attack that overwhelms server resources
7
What is a threat domain?
A secure area that attackers cannot access
A firewall configuration
A type of malware
An area of control that attackers can exploit
8
Which of the following is a sign of spam email?
The email contains a single unsubscribe link at the bottom
A personalized message from a known contact
A professional tone with no attachments
The email’s sender address doesn’t match the claimed organization
9
Which of the following is an example of an internal threat?
An employee accidentally accessing a malicious website
A denial-of-service attack from an external source
A natural disaster like a hurricane
A skilled attacker exploiting vulnerabilities
10
Which of the following is a characteristic of ransomware?
Replicates by exploiting network vulnerabilities
It encrypts data until a ransom is paid
It sends unauthorized messages via Bluetooth
It waits for a specific trigger to activate
11
A buffer overflow can lead to a system crash or privilege escalation.
False
True
12
What is a recommended defense against application attacks?
Writing solid, validated code
Ignoring software update prompts
Allowing unfiltered user input
Disabling firewalls
13
What is a common user threat to an organization’s information system?
Regular software updates
Encrypting sensitive data
Lack of awareness of security policies
Using strong passwords
14
What is spear phishing?
A targeted attack customized for a specific person
An attack using voice communication
An attack that jams wireless signals
An attack using voice communication
15
What does a rogue access point allow an attacker to do?
Jam wireless signals
Encrypt network traffic
Update firewall settings
Capture login information via a MitM attack
16
What is a common defense against wireless and mobile device attacks?
Using tools like NetStumbler to detect rogue access points
Disabling encryption on wireless networks
Leaving default configurations unchanged
Placing access points within the firewall
17
Which of the following is a type of social engineering tactic?
Conducting a zero-day attack
Installing a backdoor
Using intimidation to gain access
Performing a buffer overflow
18
Which type of attack involves recording every key struck on a keyboard?
Man-in-the-Middle (MitM)
Keylogging
Cross-site request forgery (CSRF)
Bluesnarfing
19
DHCP allows hosts to connect to a network and get an IP address without manual configuration.
False
True
20
What type of cyberattack involves injecting malicious scripts into a web page?
SQL injection
Denial of Service (DoS)
Buffer overflow
Cross-site scripting (XSS)

DONE - Lesson 154.1 - Cybersecurity, Threats, Vulnerabilities, and Attacks Flashcards | StudBud