Cyber Security Jobs Cyber-hacker Protection 3 — Questions and Answers
Question 1: An attacker tries one common password against many accounts. What is this technique called?
- Password spraying (Correct answer)
- Dictionary cracking
- Rainbow table
- Keylogging
Correct answer: Password spraying
Password spraying tests a few common passwords across many accounts to avoid lockouts.
Question 2: Which method best protects passwords stored in a database?
- Salted hashing (Correct answer)
- Plain text storage
- Base64 encoding
- Reversible encryption with a shared key
Correct answer: Salted hashing
Salted hashing makes stored credentials resistant to cracking and rainbow tables.
Question 3: What is social engineering?
- Manipulating people into revealing information or access (Correct answer)
- Building secure network architecture
- Encrypting traffic between servers
- Automating software patches
Correct answer: Manipulating people into revealing information or access
Social engineering exploits human psychology rather than technical vulnerabilities.
Question 4: A USB drive is found in the parking lot and plugged into a work PC. What risk does this create?
- Malware execution via baiting (Correct answer)
- Faster file transfer
- Improved encryption
- Reduced network latency
Correct answer: Malware execution via baiting
Baiting uses tempting physical media to deliver malware when connected.
Question 5: What does network segmentation help achieve?
- Containing an attacker to limit lateral movement (Correct answer)
- Faster internet speeds
- Automatic password rotation
- Stronger encryption keys
Correct answer: Containing an attacker to limit lateral movement
Segmenting networks restricts an intruder's ability to move between systems.
Question 6: Which tool monitors a network for suspicious activity and alerts staff?
- Intrusion detection system (IDS) (Correct answer)
- Word processor
- Backup scheduler
- DNS resolver
Correct answer: Intrusion detection system (IDS)
An IDS detects and alerts on suspicious or malicious network behavior.
Question 7: Why should default vendor passwords be changed immediately?
- They are publicly known and easily exploited (Correct answer)
- They expire too quickly
- They use too much storage
- They slow down booting
Correct answer: They are publicly known and easily exploited
Default credentials are widely documented and a common attack vector.
Cyber Security Jobs Cyber-hacker Protection 3
An attacker tries one common password against many accounts.
What is this technique called?