What is a major risk of a rogue DHCP server on a network?

Distribution of invalid configuration to clients

Who can access encrypted data?

Only authorized users with the decryption key

What is a Zero-Day vulnerability?

A vulnerability exploited with no patch made

Which of the following is an example of shoulder surfing?

Watching someone type their password

What is the primary goal of a social engineering attack?

Trick individuals into revealing confidential

What is one of the main goals of MITM?

To steal sensitive or corporate information

Which of the following is a goal of a vulnerability assessment?

Evaluating a system’s security based on configuration

What is the main goal of MAC flooding?

Overload the switch's CAM table

How do social engineering attacks typically succeed?

By appearing trustworthy or authoritative

Which of the following is a known consequence of DNS attacks?

Disruption of internet services

What does GDPR emphasize in terms of user interaction?

Informed consent and data rights

Which is a key benefit of conducting a security audit?

Highlighting areas for security improvement

Which of the following would MOST LIKELY be considered a critical asset?

Core transaction processing system

Which of the following BEST defines a dictionary attack?

Guessing passwords using a list of common words

How can rogue DHCP servers lead to on-path attacks?

By assigning attackers as default gateways

What makes brute force attacks different from dictionary attacks?

They attempt every possible character combination

Which of the following BEST defines a vulnerability?

An unpatched system with a known flaw

What is the main purpose of deception technologies in cybersecurity?

To confuse and divert cyber attackers

What is spoofing in cybersecurity?

Disguising oneself to gain unauthorized access

What is an example of a threat?

Employee intentionally leaking data

What does the double tagging exploit?

The way VLAN tags are read by switches

What are the two main techniques used in VLAN hopping attacks?

Double tagging, Switch spoofing

What is the main focus of the GDPR?

Collection and processing of personal data in the EU

Why are DNS attacks dangerous?

They can silently redirect users to malicious websites

Converting plaintext into ciphertext

What does BIA primarily assess?

Potential losses from threat scenarios

Where are deception technologies typically placed?

Between internal and external networks

studbud

Net+ Day 9 Quiz

43 termsStudBud Administration26 plays

Imported from external platform

Flashcards43 cardsFPractice quizPHost liveL

Questions 43

Answers

1
What is a major risk of a rogue DHCP server on a network?
Excessive file compression
Reduced signal strength
Distribution of invalid configuration to clients
Expired SSL certificates
2
What is the primary objective of a VLAN hopping?
Distribute software updates
It disables wireless functionality
Bypass VLAN security
Improve switch efficiency
3
What happens when a switch’s CAM table is full due to a MAC flooding attack?
It blocks all traffic
It shuts down immediately
It disables wireless functionality
It starts broadcasting
4
Which of the following is NOT a common type of spoofing attack?
ARP spoofing
DNS poisoning
SQL spoofing
Email spoofing
5
Who can access encrypted data?
The general public
Only employees in the IT department
Anyone with administrative privileges
Only authorized users with the decryption key
All Admins
Anyone with physical access to the server
6
All of the following are types of social engineering attacks EXCEPT:
Shoulder surfing
Dumpster diving
Firewall spoofing
Tailgating
7
What is a Zero-Day vulnerability?
A software license expiration
A threat discovered during a full moon
A vulnerability exploited with no patch made
A vulnerability that’s been patched
8
Which of the following is an example of shoulder surfing?
Watching someone type their password
Digging through trash for documents
Sending a fake invoice via email
Pretending to be tech support
9
Which of the following is NOT typically associated with a threat?
Malicious intent
Asset value
Threat actor
External scanning tool
Accidental internal action
Attack vector
10
What is the primary goal of a social engineering attack?
Exploit software vulnerabilities
Gain unauthorized access to physical locations
Trick individuals into revealing confidential
Install ransomware
11
What is one of the main goals of MITM?
To degrade DNS resolution
To block malware
To decrease network redundancy
To optimize network performance
To steal sensitive or corporate information
To fix corrupted files
12
Which attack involves removing encryption to expose secure communications?
DNS poisoning
SSL stripping
WPA cracking
Phishing
Logic bomb
ARP de-escalation
13
Which of the following is a goal of a vulnerability assessment?
Evaluating a system’s security based on configuration
Archiving user credentials
Detecting malware and deleting it
Physically securing the server rack
Rebooting all endpoints
Reinstalling all apps
14
What is the main goal of MAC flooding?
Strengthen network authentication
Encrypt all user traffic
Overload the switch's CAM table
Replace the switch firmware
15
Which regulation is specifically aimed at protecting cardholder data?
NIST 800-53
HIPAA
PCI DSS
GDPR
16
How do social engineering attacks typically succeed?
By exploiting outdated software
By using sophisticated malware
By appearing trustworthy or authoritative
By jamming wireless signals
17
Which principle of the CIA Triad ensures that data is protected from unauthorized access?
Redundancy
Confidentiality
Scalability
Authentication
Availability
Integrity
18
Which of the following is a known consequence of DNS attacks?
Poor wireless reception
Disruption of internet services
Invalid BIOS configuration
Overheating of servers
19
Which of the following is an example of an on-path attack?
IP spoofing
Session hijacking
Keylogging
Ransomware
20
What does GDPR emphasize in terms of user interaction?
Informed consent and data rights
Strict password policies
24/7 security operations
Software license agreements
21
Which is a key benefit of conducting a security audit?
Lowering network speed
Highlighting areas for security improvement
Increasing social media engagement
Automating job functions
Creating new job descriptions
Reducing hardware costs
22
Which encryption method is typically used to protect data in transit?
TPM
BitLocker
TLS
AES
23
Which of the following would MOST LIKELY be considered a critical asset?
Breakroom schedule
Social media account
Core transaction processing system
Coffee machine in the breakroom
24
Which of the following BEST defines a dictionary attack?
Guessing passwords using a list of common words
Decrypting password hashes
Listening to password input via a microphone
Trying every possible character combination
25
How can rogue DHCP servers lead to on-path attacks?
By overwriting VLAN configurations
By deleting DHCP leases
By bypassing user authentication
By encrypting outgoing traffic
By creating extra broadcast domains
By assigning attackers as default gateways
26
Risk is calculated based on which two factors?
Impact and Likelihood
Security Awareness and Speed
Asset Value and Training
Vulnerability and Budget
Time and Effort
Firewall Rules and Uptime
27
What makes brute force attacks different from dictionary attacks?
They use zero-day exploits
They monitor keyboard strokes
They use user-provided hints
They attempt every possible character combination
28
Which of the following BEST defines a vulnerability?
A user clicking on a malicious link
A hacker actively attacking your network
An unpatched system with a known flaw
An antivirus program
The probability of data loss
A phishing email
29
What is the main purpose of deception technologies in cybersecurity?
To delete unused files
To back up system data
To patch known vulnerabilities
To monitor social media use
To confuse and divert cyber attackers
To update firewall firmware
30
What is spoofing in cybersecurity?
Creating a firewall rule
Encrypting user credentials
Compressing sensitive data
Disguising oneself to gain unauthorized access
31
What is an example of a threat?
Missing firewall rules
Safe browsing habits
VPN encryption
Weak password policy
Employee intentionally leaking data
Regular patching schedule
32
Which part of the CIA Triad is MOST concerned with preventing unauthorized data modification?
Encryption
Availability
Hashing
Non-repudiation
Integrity
Confidentiality
33
What is one primary purpose of encryption?
To reduce file size
To increase system boot speed
To ensure data confidentiality
To hide data from the user
34
What does the double tagging exploit?
The use of two usernames
The way VLAN tags are read by switches
Wireless channel overlapping
The failure of DHCP lease renewal
Port mirroring configuration
The number of active MAC addresses
35
What are the two main techniques used in VLAN hopping attacks?
Double tagging
MAC flooding
Switch spoofing
ARP spoofing
SSL stripping
VPN tunneling
36
What is the main focus of the GDPR?
Collection and processing of personal data in the EU
Controlling access to classified government data
Auditing system performance
Monitoring employee productivity
Protecting bank account balances
Regulating credit card transactions
37
What makes unpatched or legacy systems vulnerable?
They include unnecessary software
Lack of updates or support
They use outdated cables
They are not connected to the internet
38
Why are DNS attacks dangerous?
They prevent files from being saved
They can silently redirect users to malicious websites
They require physical access to a server
They overload RAM
39
What is encryption?
Sending data through a VPN
Copying data to a backup drive
Converting plaintext into ciphertext
Compressing files to save space
40
What resource is most associated with Data in Use?
ROM
IDS
UTM
SSD
RAM
HDD
41
Which state of data refers to information stored on a hard drive or SSD?
Data in Use
Data Archived
Data in Cloud
Data at Rest
Data in Motion
Data in Transit
42
What does BIA primarily assess?
Server uptime
Software version history
Potential losses from threat scenarios
Employee productivity
43
Where are deception technologies typically placed?
Inside mobile applications
On employee workstations
Within customer-facing portals
Between internal and external networks

Net+ Day 9 Quiz Flashcards | StudBud