Cyber Security Essentials MCQs

1. What is a "threat actor" in cybersecurity?

a) A software tool used to detect vulnerabilities b) An individual or group that conducts cyberattacks c) A type of firewall d) A security protocol

2. Which of the following is an example of a state-sponsored threat actor?

a) A hacker working for personal gain b) A script kiddie using pre-made tools c) A group funded by a government to conduct cyber espionage d) A cybersecurity researcher

3. What is the primary motivation of a hacktivist?

a) Financial gain b) Political or social causes c) Personal fame d) Espionage

4. Which type of threat actor is most likely to use ransomware?

a) Script kiddies b) Cybercriminals c) Hacktivists d) State-sponsored actors

5. What is a "script kiddie"?

a) A highly skilled hacker b) A beginner who uses pre-made tools to attack systems c) A government-sponsored hacker d) A cybersecurity professional

6. What is an "attack surface" in cybersecurity?

a) A type of malware b) The total number of vulnerabilities in a system c) The sum of all points where an attacker can exploit a system d) A security protocol

7. Which of the following is an example of a physical attack surface?

a) An unpatched software vulnerability b) An open port on a server c) An unlocked server room d) A phishing email

8. What is the primary goal of reducing an attack surface?

a) To increase system complexity b) To minimize the number of exploitable vulnerabilities c) To improve system performance d) To eliminate all risks

9. Which of the following is NOT part of a digital attack surface?

a) Open network ports b) Unpatched software c) Weak passwords d) Unlocked doors

10. What is a common method to reduce the attack surface of a web application?

a) Disabling firewalls b) Increasing the number of open ports c) Regularly updating and patching software d) Using weak passwords

11. What is social engineering in cybersecurity?

a) A type of malware b) Manipulating people to gain unauthorized access c) A physical attack on hardware d) A type of encryption

12. Which of the following is an example of social engineering?

a) A brute force attack b)Using a keylogger c) Exploiting a software vulnerability d) A phishing email

13. What is the primary goal of a phishing attack?

a) To encrypt data b) To steal sensitive information c) To disrupt services d) To improve system performance

14. What is "pretexting" in social engineering?

a) Sending malicious software b) Creating a fabricated scenario to gain trust c) Exploiting a software vulnerability d) Using brute force to crack passwords

15. Which of the following is a defense against social engineering?

a) Using strong passwords b) Regularly updating software c) Employee training and awareness d) Installing a firewall

16. Which threat actor is most likely to target critical infrastructure?

a) Script kiddies b) State-sponsored actors c) Hacktivists d) Cybercriminals

17. What is the primary goal of a Distributed Denial of Service (DDoS) attack?

a) To steal data b) To disrupt services c) To encrypt files d) To gain unauthorized access

18. What is "tailgating" in social engineering?

a) Sending malicious emails b) Gaining physical access by following someone c) Exploiting software vulnerabilities d) Using brute force attacks

19. Which of the following is an example of a digital attack surface?

a) An unlocked server room b) An unpatched software vulnerability c) A weak password policy d) Both b and c

20. What is the primary goal of a ransomware attack?

a) To disrupt services b) To steal sensitive information c) To encrypt data and demand payment d) To gain unauthorized access

Cyber Security Essentials MCQs

Your Score: /20