What does TTP stand for in cybersecurity?

Tactics, Techniques, Procedures

studbud

chapter 13 Malware and Cybersecurity

174 termsStudBud Administration

Test your knowledge on different types of malware and cybersecurity concepts

Flashcards174 cardsFPractice quizPHost liveL

Questions 174

Answers

1
Which attack mimics a legitimate network?
Replay
Brute force
Dictionary
Evil twin
2
What does TTP stand for in cybersecurity?
Tactics, Techniques, Procedures
Tools, Techniques, Protocols
Tactics, Tools, Processes
Techniques, Tactics, Policies
3
How do backdoors evade detection?
By disguising as legitimate
By using encryption
By slowing down systems
By deleting logs
4
What is password spraying?
Try common passwords
Block access
Boost signal
Encrypt files
5
What is a brute force attack?
Block access
Boost signal
Guess passwords
Encrypt data
6
What is the main risk of using potentially unwanted programs?
Faster internet speed
Enhanced security
System performance boost
Data privacy issues
7
What is the purpose of a beacon in malware?
To encrypt data
To communicate with servers
To install updates
To track user behavior
8
What ensures persistence in attacks?
Sending spam
Encrypting data
Maintaining access
Deleting files
9
What is the function of %SystemRoot%?
Windows directory
Mac directory
Linux directory
Network directory
10
What is the first step in preventing forgery attacks?
User education
Firewall configuration
Software updates
Data encryption
11
What is the significance of understanding network attacks?
Improves security measures
Increases network speed
Enhances user experience
Reduces data storage
12
What is an application attack indicator?
Unusual app behavior
Encrypted data
Regular updates
Normal app behavior
13
What does the term 'back-end' refer to?
Network protocols
Server-side operations
User interface
Client-side scripts
14
What does missing logs indicate?
Potential security breach
Software update needed
Network issue
User inactivity
15
Which attack involves unauthorized access to directories?
Phishing
Directory Traversal
SQL Injection
Cross-Site Scripting
16
Which attack uses shellcode?
File deletion
Spam sending
Data encryption
Code execution
17
What is a significant challenge in detecting advanced persistent threats?
User awareness
Stealth and sophistication
Network speed
System updates
18
How does a dictionary attack work?
Use word lists
Encrypt files
Boost signal
Block access
19
How does ARP poisoning affect network security?
By blocking access
By redirecting traffic
By encrypting data
By improving performance
20
How can you identify a malware attack?
No internet connection
Increased battery life
Missing logs
Faster processing speed
21
What is a sign of potential application attack?
Single access log entry
Random IP addresses
No access logs
Repeated access attempts
22
What is a backdoor in cybersecurity?
A software update
A hidden entry point
A secure access point
A firewall breach
23
What is a directory traversal attack?
Accessing unauthorized files
Stealing user data
Injecting malicious code
Bypassing firewalls
24
What is the primary goal of credential harvesting?
To gain unauthorized access
To improve network speed
To monitor network traffic
To enhance user experience
25
What is LDAP used for?
File storage
Web hosting
Email management
Directory services
26
Which attack manipulates the Domain Name System?
ARP poisoning
DDoS attack
DNS poisoning
Credential harvesting
27
What is the result of privilege escalation?
Lower privileges
Same privileges
No privileges
Higher privileges
28
What does environmental attack refer to?
User error
Network slowdown
Software failure
Physical damage
29
How does shellcode function?
Sends emails
Deletes files
Encrypts data
Executes commands
30
What is the impact of user awareness on security?
Limits access
Reduces risks
Increases costs
Slows down processes
31
What is the role of developer tools?
Managing databases
Writing code
Debugging applications
Designing graphics
32
Where are Linux passwords stored?
/usr/bin
/etc/shadow
/home/user
/var/log
33
How can organizations protect against ransomware?
Regular backups
Software updates
Firewall updates
User training
34
Which attack uses arbitrary code execution?
SQL injection
Phishing attack
Remote code execution
DDoS attack
35
What does XML stand for?
Extensible Markup Language
Extended Model Language
Executable Markup Language
Extra Markup Language
36
What is a common response to account compromise?
Change passwords
Restart devices
Ignore alerts
Update software
37
What is a common method for malware delivery?
Software updates
Network scanning
Phishing emails
User downloads
38
Which method is used to send data to a server?
PATCH
POST
GET
DELETE
39
Which is a common injection type?
Denial of Service
SQL Injection
Cross-Site Scripting
Phishing Attack
40
Which file stores Windows passwords?
config.sys
shadow
NTDS.DIT
boot.ini
41
Which attack is characterized by overwhelming a target?
ARP poisoning
DDoS attack
On-path attack
Credential harvesting
42
What is the purpose of malicious code?
Send emails
Encrypt data
Harm systems
Protect systems
43
Which attack involves pivoting?
Lateral movement
Phishing attack
SQL injection
DDoS attack
44
What is the purpose of teaching tips?
Boost signal
Block access
Encrypt data
Enhance learning
45
What does a malware attack often encrypt?
Network settings
Hardware configurations
User files
Software applications
46
Which attack involves hash collisions?
Phishing attack
Birthday attack
Replay attack
DDoS attack
47
Which malware type can operate without traditional files?
Fileless Malware
Adware
Trojan Horses
Spyware
48
What is a common method for malware detection?
Network speed tests
System updates
User reports
Behavioral analysis
49
What does 'grc' refer to?
Governance, Risk, Compliance
Group Resource Channel
General Resource Control
Global Risk Center
50
Which protocol is associated with LDAP?
FTP
TCP/IP
HTTP
X.500
51
What indicates a successful HTTP request?
403
500
200
404
52
How do rootkits operate?
By slowing down systems
By deleting files
By encrypting data
By hiding their presence
53
Which attack involves lateral movement?
SQL injection
DDoS attack
Insider attack
Phishing attack
54
How does understanding network attacks benefit organizations?
Increases operational costs
Reduces employee productivity
Limits data access
Strengthens security posture
55
What does command injection exploit?
Database queries
User input validation
Network security
File permissions
56
Which malware type can use shellcode payloads?
Adware
Worms
Keyloggers
Trojan Horses
57
What is the goal of key recovery?
Block access
Encrypt files
Decrypt data
Boost signal
58
What is the main focus of cybersecurity?
Improving performance
Enhancing user experience
Increasing profits
Protecting data
59
What is the aim of credential dumping?
Send spam
Steal credentials
Delete files
Encrypt data
60
Which attack targets server requests?
Server-Side Request Forgery
SQL Injection
XML Parsing
Cross-Site Scripting
61
Which malware type poses the greatest threat today?
Adware
Worms
Spyware
Trojans
62
What is the role of tracking cookies?
To install malware
To encrypt data
To create backdoors
To track user behavior
63
What is the primary focus of network security?
Protecting data integrity
Increasing bandwidth
Reducing costs
Enhancing user experience
64
What is a common vector for malware distribution?
Firewall breaches
Email attachments
User passwords
Physical drives
65
How is remote code execution achieved?
Deleting files
Executing code remotely
Encrypting data
Sending spam
66
How does an injection attack occur?
Via network traffic
With software updates
By server configuration
Through user input
67
What is a common feature of memory resident malware?
Disables antivirus software
Stays active in memory
Requires user input
Installs on hard drive
68
How does a downgrade attack affect security?
Improves speed
No effect
Weakens security
Strengthens security
69
What is the significance of analyzing web server logs?
Identifying user preferences
Detecting security threats
Improving website design
Increasing server speed
70
What defines a downgrade attack?
Strengthens encryption
Deletes data
Weakens encryption
Increases speed
71
What is a key indicator of malware?
Frequent updates
Fast internet speed
High disk space
Encrypted files
72
What is Cross-Site Request Forgery?
A server-side issue
A database breach
An attack on users
A type of injection
73
What is the impact of online attacks?
Encrypt data
Compromise security
Boost signal
Block access
74
Which malware type encrypts files for ransom?
Rootkit
Logic Bomb
Backdoor
Ransomware
75
What is a common indicator of a DDoS attack?
Improved response time
Decreased bandwidth
Increased latency
Enhanced security measures
76
What does the term 'grayware' refer to?
Secure applications
System utilities
Malicious software
Potentially unwanted programs
77
What is the role of interaction opportunity?
Facilitate engagement
Block access
Boost signal
Encrypt files
78
What is a Trojan's primary function?
To operate secretly
To steal data
To encrypt files
To spread viruses
79
What does command injection exploit?
System commands
Network protocols
Database queries
User credentials
80
Which attack involves insider threats?
SQL injection
Insider attack
DDoS attack
Phishing attack
81
What is a common tactic used by malware?
System updates
Data encryption
Phishing attacks
Social engineering
82
Which malware can reside in memory?
Computer Viruses
Trojan Horses
Spyware
Adware
83
What is the primary function of a macro virus?
To enhance performance
To infect documents
To automate tasks
To encrypt files
84
Which tool can be used to detect DNS cache poisoning?
traceroute
nslookup
ping
netstat
85
What does the term 'access log' refer to?
Error report
System configuration
User activity record
Network status
86
Which malware type is known for self-replication?
Computer Worms
Adware
Trojan Horses
Spyware
87
How does a user present a TGT?
To a network
To an application
To a device
To a server
88
What is the significance of input validation?
Enhances user experience
Reduces server load
Prevents malicious input
Increases system speed
89
Which malware type is designed to evade detection?
Adware
Keyloggers
Script Viruses
Computer Worms
90
How can one prevent injection attacks?
Software updates
Firewall settings
Input validation
User education
91
How is privilege escalation achieved?
Deleting files
Gaining higher access
Encrypting data
Losing access
92
What is a TGT in security?
Time Generated Token
Ticket Granting Ticket
Transfer Grant Ticket
Temporary Grant Token
93
What does 'impossible travel' indicate?
Software update needed
Network speed issue
Hardware malfunction
User's location change
94
What is a network attack indicator?
Normal traffic
Regular updates
Unusual traffic
Encrypted data
95
What does account lockout signify?
Suspicious activity
Software update
Network issue
User inactivity
96
What is a logic bomb?
A malicious code trigger
A network security tool
A type of ransomware
A data recovery method
97
What is a keylogger primarily used for?
Creating backdoors
Tracking keystrokes
Spreading malware
Encrypting data
98
What is credential replay?
Block access
Boost signal
Encrypt data
Reuse credentials
99
What defines a rogue access point?
Secure connection
Unauthorized device
High speed
Low signal
100
What does LDAP stand for?
Lightweight Directory Access Protocol
Lightweight Data Access Protocol
Local Directory Access Protocol
Local Data Access Protocol
101
What is the significance of 'james1'?
Signal booster
Example password
Encryption key
Access code
102
What is the purpose of reconnaissance scanning?
To encrypt data
To gather information
To improve performance
To block attacks
103
What is the goal of a brute force attack?
Gain unauthorized access
Install malware
Create fake accounts
Steal data
104
Which protocol is targeted in ARP poisoning?
ARP
FTP
DNS
HTTP
105
Which malware type allows remote control?
Rootkit
Remote Access Trojan
Logic Bomb
Ransomware
106
What is a common response code for not found?
500
200
404
403
107
What does a threat actor aim to achieve in network attacks?
Control over systems
Enhanced data integrity
Better user experience
Increased network speed
108
How does lateral movement occur in network attacks?
By enhancing security
By exploiting vulnerabilities
By increasing bandwidth
By monitoring traffic
109
What is the principal threat of credential replay?
Data encryption
Signal boost
Unauthorized access
Access block
110
What is the purpose of analyzing indicators?
Enhance user experience
Reduce costs
Identify threats
Increase performance
111
What is the main goal of web security?
Protecting data integrity
Increasing website traffic
Reducing costs
Enhancing user interface
112
What is a common sign of a BEC incident?
Slow internet connection
Unusual email requests
High CPU usage
Frequent software updates
113
What is a common consequence of a security breach?
Improved performance
Data loss
Increased user trust
Higher revenue
114
What is the role of XML in web services?
Data exchange format
Server management
Network security
User interface design
115
Which malware type is often associated with APTs?
Worms
Fileless Malware
Spyware
Adware
116
What does PUP stand for?
Potentially Unwanted Programs
Private User Programs
Public User Protocols
Persistent Unwanted Payloads
117
What does the term 'application attack indicators' refer to?
Signs of security threats
Performance benchmarks
User engagement metrics
Design flaws
118
Which of the following is a characteristic of adware?
Installs backdoors
Steals passwords
Displays unwanted ads
Encrypts files
119
What is a common indicator of a rootkit?
Frequent crashes
Slow performance
Hidden processes
Unusual network activity
120
What does a 405 error indicate?
Internal server error
Method not allowed
Page not found
Forbidden access
121
How does a collision attack work?
Encrypted hash
No hash value
Different hash value
Same hash value
122
What is a key characteristic of a backdoor?
Visible to users
Enhances security
Secretive access
Requires authentication
123
What does a physical attack target?
User accounts
Software systems
Physical assets
Network infrastructure
124
What is the result of DNS Client Cache Poisoning?
Incorrect IP address resolution
Enhanced user experience
Improved security protocols
Faster internet access
125
What is the purpose of percent encoding?
URL formatting
Data compression
File transfer
Data encryption
126
What is a sign of concurrent session usage?
Frequent updates
Slow performance
Multiple devices logged in
High battery usage
127
What is the first step in improving database security?
Encrypting data
Monitoring traffic
Updating software
Validating requests
128
Which attack involves multiple compromised systems?
ARP poisoning
DDoS attack
Credential harvesting
On-path attack
129
What is a disassociation attack?
Disconnect users
Encrypt files
Boost signal
Steal data
130
What does the term 'interaction opportunity' imply?
Content creation plan
Data collection method
Marketing strategy
User feedback session
131
What is the role of NTDS.DIT?
Block access
Encrypt files
Boost signal
Store Active Directory data
132
What is a replay attack?
Deleting files
Reusing data packets
Encrypting data
Sending spam
133
What is the impact of compromised DNS servers?
Enhancing user privacy
Redirecting legitimate traffic
Improving data integrity
Blocking unauthorized access
134
How can you analyze malicious activity?
Reviewing logs
Updating software
Changing passwords
Restarting devices
135
Which term describes crypto-mining malware?
Ransomware
Logic Bomb
Cryptojacking
Backdoor
136
What is the role of resource consumption in malware detection?
To indicate anomalies
To enhance security
To optimize performance
To reduce costs
137
How can network attacks be mitigated?
Reducing user access
Increasing bandwidth
Implementing security protocols
Enhancing user experience
138
What is a common indicator of LDAP injection?
Frequent logouts
Slow response times
Unusual query patterns
High traffic volume
139
What is the primary goal of spyware?
To encrypt data
To gather information
To create malware
To spread viruses
140
What is a common consequence of server-side attacks?
System updates
Data theft
Increased traffic
User engagement
141
How does a wireless replay attack work?
Encrypt data
Change passwords
Block access
Repeat signals
142
What is the main goal of forgery attacks?
Data integrity
System performance
User impersonation
Network security
143
What is the impact of a successful cryptojacking attack?
Resource depletion
Data loss
System optimization
Increased performance
144
Which malware type is often bundled with legitimate software?
Keyloggers
Fileless Malware
Adware
Worms
145
What is the goal of a birthday attack?
Delete files
Encrypt data
Send spam
Find hash collisions
146
What does C2 stand for in cybersecurity?
Command and Control
Centralized Command
Control and Command
Cyber and Control
147
How can malicious activity be detected?
Through indicators
By user reports
Through firewalls
By system updates
148
What is the impact of a successful CSRF attack?
Data loss
System downtime
Network congestion
Unauthorized actions
149
What is a brute force attack?
Phishing attempt
Data encryption
Password guessing
Network scanning
150
What is the purpose of a security audit?
Identify vulnerabilities
Reduce costs
Increase user traffic
Enhance software features
151
What is a sign of physical attack?
Slow performance
Frequent updates
Software crash
Unauthorized access
152
How does lateral movement occur?
Move within network
Send spam
Delete files
Encrypt data
153
What is vertical privilege escalation?
Same access level
Lower access level
Higher access level
No access change
154
Which device is often used in physical attacks?
USB extension device
Printer
Smartphone
Router
155
Which technique is used by logic bombs?
Data encryption
Time-based activation
Network scanning
Remote access
156
What is the role of the Address Resolution Protocol?
Encrypting data packets
Mapping IP addresses to MAC addresses
Improving network speed
Blocking unauthorized access
157
What is the effect of DNS poisoning?
Enhancing user privacy
Improving data integrity
Speeding up DNS resolution
Redirecting users to fake sites
158
What is the primary function of ransomware?
Network monitoring
System optimization
Data encryption
Data recovery
159
What is a common indicator of account compromise?
Slow internet speed
High CPU usage
Concurrent session usage
Frequent updates
160
What is the significance of request validation?
Increasing server speed
Preventing unauthorized access
Enhancing user experience
Improving aesthetics
161
Which attack uses 'or123456'?
Dictionary
Brute force
Password spraying
Replay
162
What is a common method for securing web applications?
Regular updates
Content creation
Visual design
User feedback
163
What does a successful injection attack compromise?
Software functionality
Network bandwidth
User privacy
System speed
164
What is the main goal of cryptojacking?
To steal data
To encrypt files
To mine cryptocurrency
To control systems
165
What is the role of firewalls in security?
Block unauthorized access
Speed up connections
Manage user accounts
Store data securely
166
Which of the following is a method of lateral movement?
Blocking unauthorized access
Pivoting through systems
Monitoring user activity
Encrypting sensitive data
167
What is a hybrid password attack?
Combine methods
Block access
Encrypt data
Boost signal
168
What is the focus of collision attacks?
Data encryption
File deletion
Hash collisions
Spam sending
169
What is credential dumping?
Deleting logs
Sending spam
Stealing passwords
Encrypting files
170
What is a characteristic of on-path attacks?
User authentication
Data encryption
Network optimization
Traffic interception
171
What is the purpose of a command and control server?
To manage network traffic
To optimize performance
To store data securely
To control botnets
172
What are IoCs in cybersecurity?
Infiltration of Codes
Indicators of Change
Instances of Control
Indicators of Compromise
173
What is the purpose of a security audit?
Improving aesthetics
Identifying vulnerabilities
Increasing traffic
Enhancing user experience
174
What does RFID cloning involve?
Creating fake emails
Hacking passwords
Installing malware
Copying access cards

chapter 13 Malware and Cybersecurity Flashcards | StudBud

chapter 13 Malware and Cybersecurity

174 termsStudBud Administration

Test your knowledge on different types of malware and cybersecurity concepts

Flashcards174 cardsFPractice quizPHost liveL

Questions 174

Answers

1
Which attack mimics a legitimate network?
Replay
Brute force
Dictionary
Evil twin
2
What does TTP stand for in cybersecurity?
Tactics, Techniques, Procedures
Tools, Techniques, Protocols
Tactics, Tools, Processes
Techniques, Tactics, Policies
3
How do backdoors evade detection?
By disguising as legitimate
By using encryption
By slowing down systems
By deleting logs
4
What is password spraying?
Try common passwords
Block access
Boost signal
Encrypt files
5
What is a brute force attack?
Block access
Boost signal
Guess passwords
Encrypt data
6
What is the main risk of using potentially unwanted programs?
Faster internet speed
Enhanced security
System performance boost
Data privacy issues
7
What is the purpose of a beacon in malware?
To encrypt data
To communicate with servers
To install updates
To track user behavior
8
What ensures persistence in attacks?
Sending spam
Encrypting data
Maintaining access
Deleting files
9
What is the function of %SystemRoot%?
Windows directory
Mac directory
Linux directory
Network directory
10
What is the first step in preventing forgery attacks?
User education
Firewall configuration
Software updates
Data encryption
11
What is the significance of understanding network attacks?
Improves security measures
Increases network speed
Enhances user experience
Reduces data storage
12
What is an application attack indicator?
Unusual app behavior
Encrypted data
Regular updates
Normal app behavior
13
What does the term 'back-end' refer to?
Network protocols
Server-side operations
User interface
Client-side scripts
14
What does missing logs indicate?
Potential security breach
Software update needed
Network issue
User inactivity
15
Which attack involves unauthorized access to directories?
Phishing
Directory Traversal
SQL Injection
Cross-Site Scripting
16
Which attack uses shellcode?
File deletion
Spam sending
Data encryption
Code execution
17
What is a significant challenge in detecting advanced persistent threats?
User awareness
Stealth and sophistication
Network speed
System updates
18
How does a dictionary attack work?
Use word lists
Encrypt files
Boost signal
Block access
19
How does ARP poisoning affect network security?
By blocking access
By redirecting traffic
By encrypting data
By improving performance
20
How can you identify a malware attack?
No internet connection
Increased battery life
Missing logs
Faster processing speed
21
What is a sign of potential application attack?
Single access log entry
Random IP addresses
No access logs
Repeated access attempts
22
What is a backdoor in cybersecurity?
A software update
A hidden entry point
A secure access point
A firewall breach
23
What is a directory traversal attack?
Accessing unauthorized files
Stealing user data
Injecting malicious code
Bypassing firewalls
24
What is the primary goal of credential harvesting?
To gain unauthorized access
To improve network speed
To monitor network traffic
To enhance user experience
25
What is LDAP used for?
File storage
Web hosting
Email management
Directory services
26
Which attack manipulates the Domain Name System?
ARP poisoning
DDoS attack
DNS poisoning
Credential harvesting
27
What is the result of privilege escalation?
Lower privileges
Same privileges
No privileges
Higher privileges
28
What does environmental attack refer to?
User error
Network slowdown
Software failure
Physical damage
29
How does shellcode function?
Sends emails
Deletes files
Encrypts data
Executes commands
30
What is the impact of user awareness on security?
Limits access
Reduces risks
Increases costs
Slows down processes
31
What is the role of developer tools?
Managing databases
Writing code
Debugging applications
Designing graphics
32
Where are Linux passwords stored?
/usr/bin
/etc/shadow
/home/user
/var/log
33
How can organizations protect against ransomware?
Regular backups
Software updates
Firewall updates
User training
34
Which attack uses arbitrary code execution?
SQL injection
Phishing attack
Remote code execution
DDoS attack
35
What does XML stand for?
Extensible Markup Language
Extended Model Language
Executable Markup Language
Extra Markup Language
36
What is a common response to account compromise?
Change passwords
Restart devices
Ignore alerts
Update software
37
What is a common method for malware delivery?
Software updates
Network scanning
Phishing emails
User downloads
38
Which method is used to send data to a server?
PATCH
POST
GET
DELETE
39
Which is a common injection type?
Denial of Service
SQL Injection
Cross-Site Scripting
Phishing Attack
40
Which file stores Windows passwords?
config.sys
shadow
NTDS.DIT
boot.ini
41
Which attack is characterized by overwhelming a target?
ARP poisoning
DDoS attack
On-path attack
Credential harvesting
42
What is the purpose of malicious code?
Send emails
Encrypt data
Harm systems
Protect systems
43
Which attack involves pivoting?
Lateral movement
Phishing attack
SQL injection
DDoS attack
44
What is the purpose of teaching tips?
Boost signal
Block access
Encrypt data
Enhance learning
45
What does a malware attack often encrypt?
Network settings
Hardware configurations
User files
Software applications
46
Which attack involves hash collisions?
Phishing attack
Birthday attack
Replay attack
DDoS attack
47
Which malware type can operate without traditional files?
Fileless Malware
Adware
Trojan Horses
Spyware
48
What is a common method for malware detection?
Network speed tests
System updates
User reports
Behavioral analysis
49
What does 'grc' refer to?
Governance, Risk, Compliance
Group Resource Channel
General Resource Control
Global Risk Center
50
Which protocol is associated with LDAP?
FTP
TCP/IP
HTTP
X.500
51
What indicates a successful HTTP request?
403
500
200
404
52
How do rootkits operate?
By slowing down systems
By deleting files
By encrypting data
By hiding their presence
53
Which attack involves lateral movement?
SQL injection
DDoS attack
Insider attack
Phishing attack
54
How does understanding network attacks benefit organizations?
Increases operational costs
Reduces employee productivity
Limits data access
Strengthens security posture
55
What does command injection exploit?
Database queries
User input validation
Network security
File permissions
56
Which malware type can use shellcode payloads?
Adware
Worms
Keyloggers
Trojan Horses
57
What is the goal of key recovery?
Block access
Encrypt files
Decrypt data
Boost signal
58
What is the main focus of cybersecurity?
Improving performance
Enhancing user experience
Increasing profits
Protecting data
59
What is the aim of credential dumping?
Send spam
Steal credentials
Delete files
Encrypt data
60
Which attack targets server requests?
Server-Side Request Forgery
SQL Injection
XML Parsing
Cross-Site Scripting
61
Which malware type poses the greatest threat today?
Adware
Worms
Spyware
Trojans
62
What is the role of tracking cookies?
To install malware
To encrypt data
To create backdoors
To track user behavior
63
What is the primary focus of network security?
Protecting data integrity
Increasing bandwidth
Reducing costs
Enhancing user experience
64
What is a common vector for malware distribution?
Firewall breaches
Email attachments
User passwords
Physical drives
65
How is remote code execution achieved?
Deleting files
Executing code remotely
Encrypting data
Sending spam
66
How does an injection attack occur?
Via network traffic
With software updates
By server configuration
Through user input
67
What is a common feature of memory resident malware?
Disables antivirus software
Stays active in memory
Requires user input
Installs on hard drive
68
How does a downgrade attack affect security?
Improves speed
No effect
Weakens security
Strengthens security
69
What is the significance of analyzing web server logs?
Identifying user preferences
Detecting security threats
Improving website design
Increasing server speed
70
What defines a downgrade attack?
Strengthens encryption
Deletes data
Weakens encryption
Increases speed
71
What is a key indicator of malware?
Frequent updates
Fast internet speed
High disk space
Encrypted files
72
What is Cross-Site Request Forgery?
A server-side issue
A database breach
An attack on users
A type of injection
73
What is the impact of online attacks?
Encrypt data
Compromise security
Boost signal
Block access
74
Which malware type encrypts files for ransom?
Rootkit
Logic Bomb
Backdoor
Ransomware
75
What is a common indicator of a DDoS attack?
Improved response time
Decreased bandwidth
Increased latency
Enhanced security measures
76
What does the term 'grayware' refer to?
Secure applications
System utilities
Malicious software
Potentially unwanted programs
77
What is the role of interaction opportunity?
Facilitate engagement
Block access
Boost signal
Encrypt files
78
What is a Trojan's primary function?
To operate secretly
To steal data
To encrypt files
To spread viruses
79
What does command injection exploit?
System commands
Network protocols
Database queries
User credentials
80
Which attack involves insider threats?
SQL injection
Insider attack
DDoS attack
Phishing attack
81
What is a common tactic used by malware?
System updates
Data encryption
Phishing attacks
Social engineering
82
Which malware can reside in memory?
Computer Viruses
Trojan Horses
Spyware
Adware
83
What is the primary function of a macro virus?
To enhance performance
To infect documents
To automate tasks
To encrypt files
84
Which tool can be used to detect DNS cache poisoning?
traceroute
nslookup
ping
netstat
85
What does the term 'access log' refer to?
Error report
System configuration
User activity record
Network status
86
Which malware type is known for self-replication?
Computer Worms
Adware
Trojan Horses
Spyware
87
How does a user present a TGT?
To a network
To an application
To a device
To a server
88
What is the significance of input validation?
Enhances user experience
Reduces server load
Prevents malicious input
Increases system speed
89
Which malware type is designed to evade detection?
Adware
Keyloggers
Script Viruses
Computer Worms
90
How can one prevent injection attacks?
Software updates
Firewall settings
Input validation
User education
91
How is privilege escalation achieved?
Deleting files
Gaining higher access
Encrypting data
Losing access
92
What is a TGT in security?
Time Generated Token
Ticket Granting Ticket
Transfer Grant Ticket
Temporary Grant Token
93
What does 'impossible travel' indicate?
Software update needed
Network speed issue
Hardware malfunction
User's location change
94
What is a network attack indicator?
Normal traffic
Regular updates
Unusual traffic
Encrypted data
95
What does account lockout signify?
Suspicious activity
Software update
Network issue
User inactivity
96
What is a logic bomb?
A malicious code trigger
A network security tool
A type of ransomware
A data recovery method
97
What is a keylogger primarily used for?
Creating backdoors
Tracking keystrokes
Spreading malware
Encrypting data
98
What is credential replay?
Block access
Boost signal
Encrypt data
Reuse credentials
99
What defines a rogue access point?
Secure connection
Unauthorized device
High speed
Low signal
100
What does LDAP stand for?
Lightweight Directory Access Protocol
Lightweight Data Access Protocol
Local Directory Access Protocol
Local Data Access Protocol
101
What is the significance of 'james1'?
Signal booster
Example password
Encryption key
Access code
102
What is the purpose of reconnaissance scanning?
To encrypt data
To gather information
To improve performance
To block attacks
103
What is the goal of a brute force attack?
Gain unauthorized access
Install malware
Create fake accounts
Steal data
104
Which protocol is targeted in ARP poisoning?
ARP
FTP
DNS
HTTP
105
Which malware type allows remote control?
Rootkit
Remote Access Trojan
Logic Bomb
Ransomware
106
What is a common response code for not found?
500
200
404
403
107
What does a threat actor aim to achieve in network attacks?
Control over systems
Enhanced data integrity
Better user experience
Increased network speed
108
How does lateral movement occur in network attacks?
By enhancing security
By exploiting vulnerabilities
By increasing bandwidth
By monitoring traffic
109
What is the principal threat of credential replay?
Data encryption
Signal boost
Unauthorized access
Access block
110
What is the purpose of analyzing indicators?
Enhance user experience
Reduce costs
Identify threats
Increase performance
111
What is the main goal of web security?
Protecting data integrity
Increasing website traffic
Reducing costs
Enhancing user interface
112
What is a common sign of a BEC incident?
Slow internet connection
Unusual email requests
High CPU usage
Frequent software updates
113
What is a common consequence of a security breach?
Improved performance
Data loss
Increased user trust
Higher revenue
114
What is the role of XML in web services?
Data exchange format
Server management
Network security
User interface design
115
Which malware type is often associated with APTs?
Worms
Fileless Malware
Spyware
Adware
116
What does PUP stand for?
Potentially Unwanted Programs
Private User Programs
Public User Protocols
Persistent Unwanted Payloads
117
What does the term 'application attack indicators' refer to?
Signs of security threats
Performance benchmarks
User engagement metrics
Design flaws
118
Which of the following is a characteristic of adware?
Installs backdoors
Steals passwords
Displays unwanted ads
Encrypts files
119
What is a common indicator of a rootkit?
Frequent crashes
Slow performance
Hidden processes
Unusual network activity
120
What does a 405 error indicate?
Internal server error
Method not allowed
Page not found
Forbidden access
121
How does a collision attack work?
Encrypted hash
No hash value
Different hash value
Same hash value
122
What is a key characteristic of a backdoor?
Visible to users
Enhances security
Secretive access
Requires authentication
123
What does a physical attack target?
User accounts
Software systems
Physical assets
Network infrastructure
124
What is the result of DNS Client Cache Poisoning?
Incorrect IP address resolution
Enhanced user experience
Improved security protocols
Faster internet access
125
What is the purpose of percent encoding?
URL formatting
Data compression
File transfer
Data encryption
126
What is a sign of concurrent session usage?
Frequent updates
Slow performance
Multiple devices logged in
High battery usage
127
What is the first step in improving database security?
Encrypting data
Monitoring traffic
Updating software
Validating requests
128
Which attack involves multiple compromised systems?
ARP poisoning
DDoS attack
Credential harvesting
On-path attack
129
What is a disassociation attack?
Disconnect users
Encrypt files
Boost signal
Steal data
130
What does the term 'interaction opportunity' imply?
Content creation plan
Data collection method
Marketing strategy
User feedback session
131
What is the role of NTDS.DIT?
Block access
Encrypt files
Boost signal
Store Active Directory data
132
What is a replay attack?
Deleting files
Reusing data packets
Encrypting data
Sending spam
133
What is the impact of compromised DNS servers?
Enhancing user privacy
Redirecting legitimate traffic
Improving data integrity
Blocking unauthorized access
134
How can you analyze malicious activity?
Reviewing logs
Updating software
Changing passwords
Restarting devices
135
Which term describes crypto-mining malware?
Ransomware
Logic Bomb
Cryptojacking
Backdoor
136
What is the role of resource consumption in malware detection?
To indicate anomalies
To enhance security
To optimize performance
To reduce costs
137
How can network attacks be mitigated?
Reducing user access
Increasing bandwidth
Implementing security protocols
Enhancing user experience
138
What is a common indicator of LDAP injection?
Frequent logouts
Slow response times
Unusual query patterns
High traffic volume
139
What is the primary goal of spyware?
To encrypt data
To gather information
To create malware
To spread viruses
140
What is a common consequence of server-side attacks?
System updates
Data theft
Increased traffic
User engagement
141
How does a wireless replay attack work?
Encrypt data
Change passwords
Block access
Repeat signals
142
What is the main goal of forgery attacks?
Data integrity
System performance
User impersonation
Network security
143
What is the impact of a successful cryptojacking attack?
Resource depletion
Data loss
System optimization
Increased performance
144
Which malware type is often bundled with legitimate software?
Keyloggers
Fileless Malware
Adware
Worms
145
What is the goal of a birthday attack?
Delete files
Encrypt data
Send spam
Find hash collisions
146
What does C2 stand for in cybersecurity?
Command and Control
Centralized Command
Control and Command
Cyber and Control
147
How can malicious activity be detected?
Through indicators
By user reports
Through firewalls
By system updates
148
What is the impact of a successful CSRF attack?
Data loss
System downtime
Network congestion
Unauthorized actions
149
What is a brute force attack?
Phishing attempt
Data encryption
Password guessing
Network scanning
150
What is the purpose of a security audit?
Identify vulnerabilities
Reduce costs
Increase user traffic
Enhance software features
151
What is a sign of physical attack?
Slow performance
Frequent updates
Software crash
Unauthorized access
152
How does lateral movement occur?
Move within network
Send spam
Delete files
Encrypt data
153
What is vertical privilege escalation?
Same access level
Lower access level
Higher access level
No access change
154
Which device is often used in physical attacks?
USB extension device
Printer
Smartphone
Router
155
Which technique is used by logic bombs?
Data encryption
Time-based activation
Network scanning
Remote access
156
What is the role of the Address Resolution Protocol?
Encrypting data packets
Mapping IP addresses to MAC addresses
Improving network speed
Blocking unauthorized access
157
What is the effect of DNS poisoning?
Enhancing user privacy
Improving data integrity
Speeding up DNS resolution
Redirecting users to fake sites
158
What is the primary function of ransomware?
Network monitoring
System optimization
Data encryption
Data recovery
159
What is a common indicator of account compromise?
Slow internet speed
High CPU usage
Concurrent session usage
Frequent updates
160
What is the significance of request validation?
Increasing server speed
Preventing unauthorized access
Enhancing user experience
Improving aesthetics
161
Which attack uses 'or123456'?
Dictionary
Brute force
Password spraying
Replay
162
What is a common method for securing web applications?
Regular updates
Content creation
Visual design
User feedback
163
What does a successful injection attack compromise?
Software functionality
Network bandwidth
User privacy
System speed
164
What is the main goal of cryptojacking?
To steal data
To encrypt files
To mine cryptocurrency
To control systems
165
What is the role of firewalls in security?
Block unauthorized access
Speed up connections
Manage user accounts
Store data securely
166
Which of the following is a method of lateral movement?
Blocking unauthorized access
Pivoting through systems
Monitoring user activity
Encrypting sensitive data
167
What is a hybrid password attack?
Combine methods
Block access
Encrypt data
Boost signal
168
What is the focus of collision attacks?
Data encryption
File deletion
Hash collisions
Spam sending
169
What is credential dumping?
Deleting logs
Sending spam
Stealing passwords
Encrypting files
170
What is a characteristic of on-path attacks?
User authentication
Data encryption
Network optimization
Traffic interception
171
What is the purpose of a command and control server?
To manage network traffic
To optimize performance
To store data securely
To control botnets
172
What are IoCs in cybersecurity?
Infiltration of Codes
Indicators of Change
Instances of Control
Indicators of Compromise
173
What is the purpose of a security audit?
Improving aesthetics
Identifying vulnerabilities
Increasing traffic
Enhancing user experience
174
What does RFID cloning involve?
Creating fake emails
Hacking passwords
Installing malware
Copying access cards