BSCS Computer Security and Cybersecurity 2

Question 1

What is a SQL injection attack?

Accepted Answer

An attack that inserts malicious SQL code into input fields to manipulate a database

Answer

An attack that physically damages SQL server hardware

Answer

An attack that denies legitimate users access to a SQL database

Answer

An attack that encrypts SQL database files and demands ransom

Question 2

In public key (asymmetric) cryptography, which key must be kept confidential?

Accepted Answer

The private key

Answer

The public key

Answer

Both the public and private keys

Answer

Neither key — both are publicly distributed

Question 3

What is a firewall's primary function in network security?

Accepted Answer

To monitor and control incoming and outgoing network traffic based on predefined security rules

Answer

To encrypt all network traffic between endpoints

Answer

To scan files for malware before they are downloaded

Answer

To authenticate users attempting to access network resources

Question 4

Which of the following best describes a rainbow table attack?

Accepted Answer

An attack using precomputed hash-to-password mappings to efficiently crack stored password hashes

Answer

A brute-force attack that tries every possible password sequentially

Answer

An attack that eavesdrops on network traffic to capture password hashes

Answer

A social engineering attack that tricks users into revealing passwords

Question 5

What is the purpose of adding a salt to passwords before hashing?

Accepted Answer

To prepend a unique random value so identical passwords produce different hashes, defeating precomputed attacks

Answer

To encrypt passwords using a secret key before storage

Answer

To compress passwords for more efficient storage

Answer

To obfuscate passwords during transmission over the network

Question 6

What type of malware disguises itself as legitimate software while secretly performing malicious actions in the background?

Accepted Answer

Trojan Horse

Answer

Worm

Answer

Virus

Answer

Spyware

Question 7

Which protocol allows two parties to establish a shared cryptographic secret over an insecure channel without transmitting the secret itself?

Accepted Answer

Diffie-Hellman key exchange

Answer

RSA

Answer

AES

Answer

MD5