Cyber Security Jobs Cyber-hacker Protection 2 — Questions and Answers
Question 1: A user receives an email appearing to be from the IT department asking them to confirm their password via a link. What attack is this?
- Phishing (Correct answer)
- DDoS
- SQL injection
- Buffer overflow
Correct answer: Phishing
Phishing uses deceptive messages impersonating trusted entities to steal credentials.
Question 2: Which control most effectively limits damage if a single user account is compromised?
- Principle of least privilege (Correct answer)
- Disabling the firewall
- Sharing admin accounts
- Longer session timeouts
Correct answer: Principle of least privilege
Least privilege restricts accounts to only the access they need, limiting an attacker's reach.
Question 3: What does multi-factor authentication (MFA) add beyond a password?
- An additional verification factor like a code or token (Correct answer)
- A faster login process
- A stronger password hash
- Automatic password resets
Correct answer: An additional verification factor like a code or token
MFA requires a second independent factor, so a stolen password alone is not enough.
Question 4: An attacker intercepts traffic between a user and a website on public Wi-Fi. What attack is this?
- Man-in-the-middle (Correct answer)
- Ransomware
- Cross-site scripting
- Password spraying
Correct answer: Man-in-the-middle
A man-in-the-middle attack secretly relays and possibly alters communication between two parties.
Question 5: Which practice best protects against a ransomware attack encrypting your files?
- Maintaining offline, tested backups (Correct answer)
- Paying the ransom promptly
- Using a single shared admin password
- Disabling antivirus to save resources
Correct answer: Maintaining offline, tested backups
Reliable offline backups allow recovery without paying attackers.
Question 6: What is the primary purpose of a firewall?
- Control inbound and outbound network traffic by rules (Correct answer)
- Encrypt stored files
- Scan email attachments for spelling errors
- Generate strong passwords
Correct answer: Control inbound and outbound network traffic by rules
Firewalls filter network traffic based on configured security rules.
Question 7: Why is patch management important for hacker protection?
- It closes known vulnerabilities attackers exploit (Correct answer)
- It speeds up the computer
- It improves screen resolution
- It deletes old user accounts
Correct answer: It closes known vulnerabilities attackers exploit
Applying patches fixes known security flaws before attackers can exploit them.
Cyber Security Jobs Cyber-hacker Protection 2
A user receives an email appearing to be from the IT department asking them to confirm their password via a link.
What attack is this?