Cybersecurity Flashcards

Which of the following best explains why software updates are important for cybersecurity?

Answer: Updates patch known vulnerabilities that attackers could exploit

Software updates frequently include security patches that fix vulnerabilities before or after attackers exploit them.

What is a botnet?

Answer: A group of infected computers controlled remotely by an attacker

A botnet is a network of compromised computers (bots) that an attacker controls remotely, often used for spam or DDoS attacks.

Which security practice involves deliberately probing a system for weaknesses before attackers can?

Answer: Penetration testing

Penetration testing (ethical hacking) simulates real attacks to identify and fix vulnerabilities before malicious actors exploit them.

A hacker uses a list of common passwords to try to gain access to an account. This technique is called:

Answer: Dictionary attack

A dictionary attack uses a precompiled list of likely passwords or words to systematically attempt account access.

What is the main purpose of data encryption at rest?

Answer: To protect stored data if physical media is stolen or accessed without authorization

Encryption at rest protects stored data so that even if storage media is physically stolen, the data remains unreadable without the key.

Which of the following is NOT a common indicator of a phishing email?

Answer: A sender address matching the official company domain exactly

An email from the exact official domain is less suspicious; phishing emails typically use spoofed or similar-looking domains, not exact matches.

What is a zero-day vulnerability?

Answer: A vulnerability unknown to the software vendor with no available fix

A zero-day vulnerability is a security flaw unknown to the vendor, giving defenders zero days to patch it before it can be exploited.