How do social engineering attacks typically succeed?

By appearing trustworthy or authoritative

Which of the following is a known consequence of DNS attacks?

Disruption of internet services

What is a Zero-Day vulnerability?

A vulnerability exploited with no patch made

What is spoofing in cybersecurity?

Disguising oneself to gain unauthorized access

Which of the following BEST defines a dictionary attack?

Guessing passwords using a list of common words

Which of the following is an example of shoulder surfing?

Watching someone type their password

What is the main purpose of deception technologies in cybersecurity?

To confuse and divert cyber attackers

What is an example of a threat?

Employee intentionally leaking data

Who can access encrypted data?

Only authorized users with the decryption key

What is the main focus of the GDPR?

Collection and processing of personal data in the EU

What is one of the main goals of MITM?

To steal sensitive or corporate information

What does the double tagging exploit?

The way VLAN tags are read by switches

What is the primary goal of a social engineering attack?

Trick individuals into revealing confidential

What is the main goal of MAC flooding?

Overload the switch's CAM table

What is a major risk of a rogue DHCP server on a network?

Distribution of invalid configuration to clients

Which is a key benefit of conducting a security audit?

Highlighting areas for security improvement

How can rogue DHCP servers lead to on-path attacks?

By assigning attackers as default gateways

Converting plaintext into ciphertext

Which of the following would MOST LIKELY be considered a critical asset?

Core transaction processing system

Which of the following BEST defines a vulnerability?

An unpatched system with a known flaw

What makes brute force attacks different from dictionary attacks?

They attempt every possible character combination

What are the two main techniques used in VLAN hopping attacks?

Double tagging, Switch spoofing

What does BIA primarily assess?

Potential losses from threat scenarios

Which of the following is a goal of a vulnerability assessment?

Evaluating a system’s security based on configuration

Why are DNS attacks dangerous?

They can silently redirect users to malicious websites

Where are deception technologies typically placed?

Between internal and external networks

What does GDPR emphasize in terms of user interaction?

Informed consent and data rights

studbud

Net+ Day 9 Quiz

43 termsStudBud Administration26 plays

Imported from external platform

Flashcards43 cardsFPractice quizPHost liveL

Questions 43

Answers

1
How do social engineering attacks typically succeed?
By exploiting outdated software
By jamming wireless signals
By appearing trustworthy or authoritative
By using sophisticated malware
2
Which of the following is a known consequence of DNS attacks?
Overheating of servers
Invalid BIOS configuration
Disruption of internet services
Poor wireless reception
3
What is a Zero-Day vulnerability?
A vulnerability that’s been patched
A vulnerability exploited with no patch made
A software license expiration
A threat discovered during a full moon
4
What is spoofing in cybersecurity?
Compressing sensitive data
Creating a firewall rule
Disguising oneself to gain unauthorized access
Encrypting user credentials
5
Which of the following is an example of an on-path attack?
Ransomware
Keylogging
Session hijacking
IP spoofing
6
What happens when a switch’s CAM table is full due to a MAC flooding attack?
It blocks all traffic
It starts broadcasting
It disables wireless functionality
It shuts down immediately
7
Which principle of the CIA Triad ensures that data is protected from unauthorized access?
Availability
Confidentiality
Authentication
Redundancy
Scalability
Integrity
8
Which of the following BEST defines a dictionary attack?
Listening to password input via a microphone
Trying every possible character combination
Guessing passwords using a list of common words
Decrypting password hashes
9
Risk is calculated based on which two factors?
Asset Value and Training
Time and Effort
Vulnerability and Budget
Impact and Likelihood
Security Awareness and Speed
Firewall Rules and Uptime
10
Which of the following is an example of shoulder surfing?
Watching someone type their password
Sending a fake invoice via email
Digging through trash for documents
Pretending to be tech support
11
What is the main purpose of deception technologies in cybersecurity?
To back up system data
To confuse and divert cyber attackers
To patch known vulnerabilities
To delete unused files
To monitor social media use
To update firewall firmware
12
Which part of the CIA Triad is MOST concerned with preventing unauthorized data modification?
Confidentiality
Non-repudiation
Encryption
Hashing
Availability
Integrity
13
What is an example of a threat?
Employee intentionally leaking data
Weak password policy
Regular patching schedule
VPN encryption
Safe browsing habits
Missing firewall rules
14
Who can access encrypted data?
Anyone with administrative privileges
Anyone with physical access to the server
Only authorized users with the decryption key
The general public
Only employees in the IT department
All Admins
15
What is the main focus of the GDPR?
Protecting bank account balances
Collection and processing of personal data in the EU
Regulating credit card transactions
Controlling access to classified government data
Auditing system performance
Monitoring employee productivity
16
What is one of the main goals of MITM?
To steal sensitive or corporate information
To optimize network performance
To degrade DNS resolution
To block malware
To decrease network redundancy
To fix corrupted files
17
All of the following are types of social engineering attacks EXCEPT:
Dumpster diving
Firewall spoofing
Shoulder surfing
Tailgating
18
What does the double tagging exploit?
Wireless channel overlapping
The number of active MAC addresses
Port mirroring configuration
The use of two usernames
The way VLAN tags are read by switches
The failure of DHCP lease renewal
19
What is one primary purpose of encryption?
To ensure data confidentiality
To reduce file size
To hide data from the user
To increase system boot speed
20
What is the primary goal of a social engineering attack?
Exploit software vulnerabilities
Install ransomware
Gain unauthorized access to physical locations
Trick individuals into revealing confidential
21
Which of the following is NOT a common type of spoofing attack?
SQL spoofing
Email spoofing
ARP spoofing
DNS poisoning
22
What makes unpatched or legacy systems vulnerable?
They are not connected to the internet
They include unnecessary software
Lack of updates or support
They use outdated cables
23
What is the main goal of MAC flooding?
Overload the switch's CAM table
Replace the switch firmware
Encrypt all user traffic
Strengthen network authentication
24
Which state of data refers to information stored on a hard drive or SSD?
Data in Transit
Data in Use
Data at Rest
Data Archived
Data in Cloud
Data in Motion
25
What is a major risk of a rogue DHCP server on a network?
Distribution of invalid configuration to clients
Expired SSL certificates
Excessive file compression
Reduced signal strength
26
Which encryption method is typically used to protect data in transit?
TPM
AES
BitLocker
TLS
27
Which regulation is specifically aimed at protecting cardholder data?
HIPAA
NIST 800-53
GDPR
PCI DSS
28
Which attack involves removing encryption to expose secure communications?
Logic bomb
ARP de-escalation
WPA cracking
Phishing
SSL stripping
DNS poisoning
29
Which is a key benefit of conducting a security audit?
Automating job functions
Reducing hardware costs
Highlighting areas for security improvement
Increasing social media engagement
Creating new job descriptions
Lowering network speed
30
How can rogue DHCP servers lead to on-path attacks?
By bypassing user authentication
By encrypting outgoing traffic
By deleting DHCP leases
By assigning attackers as default gateways
By creating extra broadcast domains
By overwriting VLAN configurations
31
What is encryption?
Converting plaintext into ciphertext
Compressing files to save space
Sending data through a VPN
Copying data to a backup drive
32
Which of the following would MOST LIKELY be considered a critical asset?
Coffee machine in the breakroom
Breakroom schedule
Social media account
Core transaction processing system
33
What is the primary objective of a VLAN hopping?
Bypass VLAN security
Improve switch efficiency
It disables wireless functionality
Distribute software updates
34
Which of the following BEST defines a vulnerability?
A user clicking on a malicious link
A phishing email
A hacker actively attacking your network
An antivirus program
The probability of data loss
An unpatched system with a known flaw
35
What makes brute force attacks different from dictionary attacks?
They attempt every possible character combination
They use user-provided hints
They use zero-day exploits
They monitor keyboard strokes
36
What are the two main techniques used in VLAN hopping attacks?
Double tagging
VPN tunneling
Switch spoofing
ARP spoofing
SSL stripping
MAC flooding
37
What does BIA primarily assess?
Software version history
Server uptime
Potential losses from threat scenarios
Employee productivity
38
Which of the following is a goal of a vulnerability assessment?
Rebooting all endpoints
Physically securing the server rack
Detecting malware and deleting it
Archiving user credentials
Reinstalling all apps
Evaluating a system’s security based on configuration
39
Why are DNS attacks dangerous?
They overload RAM
They require physical access to a server
They can silently redirect users to malicious websites
They prevent files from being saved
40
Which of the following is NOT typically associated with a threat?
Asset value
Attack vector
Accidental internal action
External scanning tool
Malicious intent
Threat actor
41
Where are deception technologies typically placed?
Within customer-facing portals
Inside mobile applications
On employee workstations
Between internal and external networks
42
What resource is most associated with Data in Use?
HDD
SSD
ROM
IDS
UTM
RAM
43
What does GDPR emphasize in terms of user interaction?
Informed consent and data rights
Strict password policies
Software license agreements
24/7 security operations

Net+ Day 9 Quiz Flashcards | StudBud