Cybersecurity Quiz

What is the primary difference between a vulnerability and an exploit?

• A vulnerability is a weakness in a system, while an exploit is the method used to take advantage of that weakness.

• A vulnerability is an attack method, while an exploit is a software patch.

• A vulnerability and an exploit are the same concepts.

• A vulnerability is the process of fixing a system, while an exploit is a method for detecting threats.

• A vulnerability is hardware-based, and an exploit is software-based.

During which stage of the cyberattack lifecycle does an attacker gather information about a target?

• Exploitation

• Reconnaissance

• Weaponization

• Command-and-Control

• Installation

Which of the following is an example of weaponization in the cyberattack lifecycle?

• Scanning for open ports on a target system.

• Creating a malicious payload to deliver via phishing email.

• Establishing a command-and-control server.

• Installing a backdoor on a compromised system.

• Exfiltrating sensitive data from the victim's system.

What happens during the exploitation phase of the cyberattack lifecycle?

• The attacker uses a vulnerability to gain unauthorized access to a system.

• The attacker identifies vulnerabilities in the target system.

• The attacker deploys malware to multiple systems.

• The attacker performs lateral movement across the network.

• The attacker closes all traces of activity to evade detection.

What is the primary goal of the command-and-control (C2) stage?

• To establish ongoing communication with the compromised system.

• To gain initial access to the system.

• To disrupt the operations of a target system.

• To perform reconnaissance on the network.

• To deploy ransomware and demand payment.

Which of the following best describes malware?

• Software designed to monitor user activities without permission.

• A type of attack where malicious actors intercept communication.

• Any software intentionally designed to cause harm to a system.

• A large-scale attack designed to overwhelm network resources.

• A method of gaining unauthorized access by deceiving users.

What is the primary purpose of spyware?

• Encrypting user data for ransom.

• Monitoring user activity and stealing sensitive information.

• Exploiting vulnerabilities in software for unauthorized access.

• Infecting multiple systems in a botnet attack.

• Blocking legitimate traffic to network resources.

Which of the following best describes a Trojan?

• A type of malware that disguises itself as legitimate software.

• A virus that spreads through email attachments.

• A network-based denial-of-service attack.

• A tool for intercepting communication between two parties.

• A method for exploiting unpatched vulnerabilities.

Ransomware attacks primarily involve:

• Stealing sensitive data without the user's knowledge.

• Encrypting data and demanding payment for decryption.

• Overloading network systems with excessive traffic.

• Exploiting vulnerabilities to gain administrator access.

• Impersonating legitimate users in network communications.

What is a meddler-in-the-middle (MITM) attack?