Network Security - Forms of Attack - CraignDave

Which term best describes malicious software designed to infect computers and commit crimes such as fraud or identity theft?

• Adware

• Malware

• Firmware

• Shareware

Phishing is best described as:

• Tricking people into revealing personal information by posing as a trusted entity

• Using trial-and-error methods to guess a password

• Flooding a server with traffic to make it crash

• Inserting malicious code into a database application

Which attack method relies on repeatedly attempting different password combinations until the correct one is discovered?

• SQL injection

• Worm infiltration

• Brute-force attack

• Trojan payload

Flooding a server with a large volume of useless traffic, rendering it inaccessible to legitimate users, is known as:

• Denial-of-service (DoS) attack

• Man-in-the-middle attack

• Ransomware exploit

• Eavesdropping

In the context of network security, which statement best describes a Distributed Denial-of-Service (DDoS) attack?

• A single compromised computer that scans for open ports

• A system that repeatedly submits random login credentials

• Multiple infected machines targeting one system simultaneously

• An attack that exploits a website’s login form

What is the primary goal of data interception and theft?

• Overloading network bandwidth to cause a server crash

• Preventing users from accessing email accounts

• Monitoring data streams to gather sensitive information

• Damaging computer hardware through power surges

Which of the following terms refers to the act of monitoring network traffic (often in plain text) to capture sensitive data?

• Spoofing

• Tunneling

• Sniffing (eavesdropping)

• SQL injection

SQL injection can be best described as:

• A way of cracking passwords by trying numerous combinations

• A hardware-based security feature for blocking unauthorized access

• Inserting malicious code into a poorly secured database query

• A tool for compressing data in order to use less storage space

Which of the following is an example of how trojan horse malware might be delivered?

• Installed by physically tampering with a computer’s motherboard

• Spread through harmless links in a legitimate software update

• Inserted via a printed document scanned into the system

• Installed by trusted antivirus software during routine updates

Which of the following is not commonly classified as a form of attack in GCSE-level network security topics?

• Malware

• Phishing

• Brute-force

• Key escrow