1. What is the role of an "Antivirus" software?
A. To monitor network traffic for suspicious activity
B. To detect and remove malicious software (malware) from systems
C. To create a backup of important files
D. To manage user permissions and access control
Answer: b) To detect and remove malicious software (malware) from systems
Rationale: Antivirus software is designed to detect, quarantine, and remove malware
from computer systems.
2. What is "SQL Injection"?
A. An attack that exploits vulnerabilities in web applications to execute malicious SQL
queries
B. A method of injecting malicious code into a system via email
C. A tool used to encrypt sensitive data
D. A type of network protocol for secure communication
Answer: a) An attack that exploits vulnerabilities in web applications to execute
malicious SQL queries
Rationale: SQL injection attacks target web applications by inserting malicious SQL
commands to manipulate databases.
3. What is "Social Engineering" used for in cyberattacks?
,A. To exploit software vulnerabilities
B. To manipulate people into giving up confidential information
C. To create false websites
D. To protect against unauthorized access
Answer: b) To manipulate people into giving up confidential information
Rationale: Social engineering attacks manipulate people rather than exploiting technical
vulnerabilities.
4. Which of the following is an example of "two-factor authentication" (2FA)?
A. Using a password and a secret question
B. Using a password and a fingerprint scan
C. Using a password and an encryption key
D. Using a password and a username
Answer: b) Using a password and a fingerprint scan
Rationale: Two-factor authentication (2FA) requires two forms of identification, such as
something you know (password) and something you have (fingerprint).
5. What is "Cryptojacking"?
A. A technique for stealing cryptocurrency wallets
B. A method of using infected computers to mine cryptocurrency without user consent
C. A way to store cryptocurrency securely
D. A method of encrypting files for ransom
, Answer: b) A method of using infected computers to mine cryptocurrency without user
consent
Rationale: Cryptojacking involves hijacking the processing power of users' devices to
mine cryptocurrency without their consent.
6. Which of the following is an example of a "Distributed Denial of Service" (DDoS)
attack?
A. Overloading a server with traffic from multiple compromised devices
B. Encrypting a target’s files and demanding ransom
C. Using a phishing email to steal user credentials
D. Gaining unauthorized access to a database
Answer: a) Overloading a server with traffic from multiple compromised devices
Rationale: DDoS attacks use multiple compromised devices to flood a server or
network, causing it to become overwhelmed and unavailable.
7. Which of the following is NOT a component of the CIA triad in cybersecurity?
A. Confidentiality
B. Integrity
C. Availability
D. Accessibility
Answer: d) Accessibility
Rationale: The CIA triad consists of confidentiality, integrity, and availability.
Accessibility is not one of its core components.
A. To monitor network traffic for suspicious activity
B. To detect and remove malicious software (malware) from systems
C. To create a backup of important files
D. To manage user permissions and access control
Answer: b) To detect and remove malicious software (malware) from systems
Rationale: Antivirus software is designed to detect, quarantine, and remove malware
from computer systems.
2. What is "SQL Injection"?
A. An attack that exploits vulnerabilities in web applications to execute malicious SQL
queries
B. A method of injecting malicious code into a system via email
C. A tool used to encrypt sensitive data
D. A type of network protocol for secure communication
Answer: a) An attack that exploits vulnerabilities in web applications to execute
malicious SQL queries
Rationale: SQL injection attacks target web applications by inserting malicious SQL
commands to manipulate databases.
3. What is "Social Engineering" used for in cyberattacks?
,A. To exploit software vulnerabilities
B. To manipulate people into giving up confidential information
C. To create false websites
D. To protect against unauthorized access
Answer: b) To manipulate people into giving up confidential information
Rationale: Social engineering attacks manipulate people rather than exploiting technical
vulnerabilities.
4. Which of the following is an example of "two-factor authentication" (2FA)?
A. Using a password and a secret question
B. Using a password and a fingerprint scan
C. Using a password and an encryption key
D. Using a password and a username
Answer: b) Using a password and a fingerprint scan
Rationale: Two-factor authentication (2FA) requires two forms of identification, such as
something you know (password) and something you have (fingerprint).
5. What is "Cryptojacking"?
A. A technique for stealing cryptocurrency wallets
B. A method of using infected computers to mine cryptocurrency without user consent
C. A way to store cryptocurrency securely
D. A method of encrypting files for ransom
, Answer: b) A method of using infected computers to mine cryptocurrency without user
consent
Rationale: Cryptojacking involves hijacking the processing power of users' devices to
mine cryptocurrency without their consent.
6. Which of the following is an example of a "Distributed Denial of Service" (DDoS)
attack?
A. Overloading a server with traffic from multiple compromised devices
B. Encrypting a target’s files and demanding ransom
C. Using a phishing email to steal user credentials
D. Gaining unauthorized access to a database
Answer: a) Overloading a server with traffic from multiple compromised devices
Rationale: DDoS attacks use multiple compromised devices to flood a server or
network, causing it to become overwhelmed and unavailable.
7. Which of the following is NOT a component of the CIA triad in cybersecurity?
A. Confidentiality
B. Integrity
C. Availability
D. Accessibility
Answer: d) Accessibility
Rationale: The CIA triad consists of confidentiality, integrity, and availability.
Accessibility is not one of its core components.
