stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cybersecurity - Medium Flashcards | StudBud
Explore
/
Cybersecurity - Medium
Cybersecurity - Medium
20 terms
·
StudBud Administration
·
6 plays
Imported from external platform
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
Which attack method involves creating a fraudulent website at a domain name that visually resembles a legitimate one?
Typosquatting
Session Hijacking
Pharming
Man-in-the-middle attack
2
Which of these password practices provides the LEAST security benefit?
Using a password manager
Creating passwords with simple character substitutions (e.g., p@$$w0rd)
Using different passwords across accounts
Implementing password rotation every 90 days
3
Which attack vector specifically exploits trust relationships between organizations?
Credential stuffing
Supply chain attack
Ransomware
DNS poisoning
4
What is the primary security vulnerability exploited in a pass-the-hash attack?
Weak password complexity
Password hash storage and authentication protocols
SSL certificate validation
Multi-factor authentication systems
5
Which phishing technique specifically targets high-value individuals within an organization?
Smishing
Vishing
Whaling
Clone Phishing
6
DMARC, SPF, and DKIM are all protocols designed to combat email spoofing.
True
False
7
What principle guides the practice of providing users with only the minimum access privileges necessary?
Zero trust architecture
Principle of least privilege
Security by obscurity
Defense in depth
8
Session hijacking can be prevented entirely by using HTTPS.
False
True
9
Which phishing simulation metric best indicates improvement in security awareness over time?
Number of employees who completed training
Trending click rates across multiple campaigns
Time to first click in each campaign
Total click rate percentage
10
True or False: HTTPS encryption guarantees that a website is legitimate and not fraudulent.
False
True
11
Which encryption approach is most vulnerable to quantum computing threats?
Post-quantum cryptography
AES-256 (symmetric encryption)
RSA (asymmetric encryption)
End-to-end encryption implementation
12
What is the standard port number for LDAP?
389
3389
636
22
13
In the context of an LMS-based security awareness program, which measurement best indicates actual security improvement?
Correlation between training completion and security incident reduction
Completion rates of training modules
Time spent in security training
Quiz scores on security content
14
What port does standard SMTP traffic traditionally use?
25
587
110
143
15
During MFA implementation, which of these represents the highest security risk?
Using biometric authentication
Using hardware tokens
Using SMS as a second factor
Using authenticator apps
16
Which of these is NOT a common indicator of a business email compromise (BEC) attack?
Language creating urgency around wire transfers
Unusual requests from executives
Requests containing malicious file attachments with obvious extensions
Subtle changes in email domain (e.g., company-inc.com vs. cornpany-inc.com)
17
Which port number is commonly used for secure HTTPS traffic?
80
443
8080
22
18
Zero-day vulnerabilities are named as such because organizations have zero days to patch before exploits occur.
True
False
19
In the context of simulated phishing campaigns, what does the term "susceptibility rate" refer to?
The number of users who report the phishing attempt
The percentage of emails caught by spam filters
The complexity rating of the phishing simulation
The percentage of users who engage with phishing content
20
A user receives an email with a Microsoft 365 document link requiring authentication. The most secure first action:
Click the link and verify the login page appears legitimate
Navigate independently to Microsoft 365 to check for shared documents
Reply to the sender to confirm they shared a document
Check if the email contains grammatical errors before proceeding
