Cyber Security Jobs Cyber-hacker Protection 2

Question 1

A user receives an email appearing to be from the IT department asking them to confirm their password via a link. What attack is this?

Accepted Answer

Phishing

Answer

Phishing uses deceptive messages impersonating trusted entities to steal credentials.

Question 2

Which control most effectively limits damage if a single user account is compromised?

Accepted Answer

Principle of least privilege

Answer

Least privilege restricts accounts to only the access they need, limiting an attacker's reach.

Question 3

What does multi-factor authentication (MFA) add beyond a password?

Accepted Answer

An additional verification factor like a code or token

Answer

MFA requires a second independent factor, so a stolen password alone is not enough.

Question 4

An attacker intercepts traffic between a user and a website on public Wi-Fi. What attack is this?

Accepted Answer

Man-in-the-middle

Answer

A man-in-the-middle attack secretly relays and possibly alters communication between two parties.

Question 5

Which practice best protects against a ransomware attack encrypting your files?

Accepted Answer

Maintaining offline, tested backups

Answer

Reliable offline backups allow recovery without paying attackers.

Cyber Security Jobs Practice Test