APCSP Cybersecurity 3 — Questions and Answers
Question 1: Which cryptographic concept ensures that a sender cannot later deny having sent a message?
- Confidentiality
- Non-repudiation (Correct answer)
- Availability
- Integrity
Correct answer: Non-repudiation
Non-repudiation, often achieved through digital signatures, prevents a sender from falsely claiming they did not send a message.
Question 2: A user receives an email claiming to be from their bank asking them to verify account details via a link. What type of attack is this?
- Vishing
- Spear phishing
- Phishing (Correct answer)
- Smishing
Correct answer: Phishing
Phishing uses deceptive emails impersonating trusted entities to trick users into revealing sensitive information.
Question 3: What is the role of a firewall in network security?
- Encrypting all outbound data
- Filtering network traffic based on rules (Correct answer)
- Scanning files for viruses before they are opened
- Backing up data to prevent loss
Correct answer: Filtering network traffic based on rules
A firewall monitors and controls incoming and outgoing network traffic according to predefined security rules.
Question 4: In the context of public-key cryptography, which key should a user share publicly to receive encrypted messages?
- Private key
- Session key
- Symmetric key
- Public key (Correct answer)
Correct answer: Public key
In asymmetric encryption, the public key is shared openly so others can encrypt messages that only the holder of the private key can decrypt.
Question 5: Which of the following is an example of multi-factor authentication (MFA)?
- A long, complex password
- A password combined with a fingerprint scan (Correct answer)
- Logging in from a trusted device
- Using a password manager
Correct answer: A password combined with a fingerprint scan
MFA requires two or more verification factors from different categories (something you know, have, or are), such as a password plus biometric.
Question 6: What does 'least privilege' mean in cybersecurity?
- Users should have no more access rights than necessary for their tasks (Correct answer)
- Administrators should have fewer privileges than regular users
- Systems should use minimal encryption to save resources
- Only privileged users can access the internet
Correct answer: Users should have no more access rights than necessary for their tasks
The principle of least privilege limits user access rights to only what is necessary, reducing potential damage from errors or breaches.
Question 7: An attacker intercepts communication between two parties and secretly relays or alters messages. This is called a:
- Replay attack
- Man-in-the-middle attack (Correct answer)
- SQL injection attack
- Denial-of-service attack
Correct answer: Man-in-the-middle attack
A man-in-the-middle attack involves an attacker secretly intercepting and possibly altering communications between two parties.
APCSP Cybersecurity 3
Which cryptographic concept ensures that a sender cannot later deny having sent a message?