Cyber Security Cyber Security 3 — Questions and Answers
Question 1: What is the main goal of a denial-of-service (DoS) attack?
- To make a service or resource unavailable to legitimate users (Correct answer)
- To steal confidential files
- To gain administrator privileges
- To alter database records
Correct answer: To make a service or resource unavailable to legitimate users
A DoS attack overwhelms a system with traffic or requests so legitimate users cannot access it.
Question 2: Which encryption type uses the same key for both encryption and decryption?
- Symmetric encryption (Correct answer)
- Asymmetric encryption
- Hashing
- Public-key encryption
Correct answer: Symmetric encryption
Symmetric encryption relies on a single shared secret key for both operations.
Question 3: What is a zero-day vulnerability?
- A flaw unknown to the vendor with no available patch (Correct answer)
- A vulnerability that is decades old
- A bug that only appears at midnight
- A patched vulnerability
Correct answer: A flaw unknown to the vendor with no available patch
A zero-day is a security flaw that is unknown to those who should fix it, leaving no patch available.
Question 4: Which practice helps protect against password-based attacks the most?
- Using unique, complex passwords with a password manager (Correct answer)
- Reusing one strong password everywhere
- Writing passwords on a sticky note
- Using your birthday as a password
Correct answer: Using unique, complex passwords with a password manager
Unique complex passwords managed by a password manager limit the damage if one credential leaks.
Question 5: What does the acronym DDoS stand for?
- Distributed Denial of Service (Correct answer)
- Direct Data on Server
- Dual Domain Operating System
- Dynamic Denial of Security
Correct answer: Distributed Denial of Service
A DDoS attack uses many compromised systems to flood a target simultaneously.
Question 6: What is the purpose of hashing a password before storing it?
- To store a non-reversible representation so plaintext is never saved (Correct answer)
- To compress the password for storage
- To make the password easier to remember
- To encrypt the password reversibly
Correct answer: To store a non-reversible representation so plaintext is never saved
Hashing converts a password into a fixed irreversible value, so the original is never stored in plain form.
Question 7: A network of compromised computers controlled remotely by an attacker is called a:
- Botnet (Correct answer)
- Honeypot
- Subnet
- Sandbox
Correct answer: Botnet
A botnet is a collection of infected devices controlled by an attacker to carry out coordinated actions.
Cyber Security Cyber Security 3
What is the main goal of a denial-of-service (DoS) attack?