1.4 Lesson 1

Which of the following best describes phishing?

• A. Stealing data by exploiting vulnerabilities in code
  

• B. Tricking users into sharing sensitive information via fake emails or websites
  

• C. Overwhelming a server with too many requests
  

• D. Gaining unauthorised access by guessing passwords

What is malware?

• A. Software designed to protect devices
  

• B. A type of phishing attack
  

• C. Malicious software designed to harm or exploit systems
  

• D. Unauthorised access to a database

What is a brute force attack?

• A. Using a large number of random password attempts to gain access
  

• B. Sending fake emails to trick users
  

• C. Infecting computers with a virus
  

• D. Disrupting a system with too many requests

What is the goal of a Denial-of-Service (DoS) attack?

• A. To spread malicious software
  

• B. To gather personal data
  

• C. To disrupt the normal operations of a server
  

• D. To steal usernames and password

Which vulnerability does an SQL injection attack exploit?

• A. Weak passwords
  

• B. Flaws in database query handling
  

• C. Lack of user authentication
  

• D. Unauthorised email access

How can an organisation reduce the risk of phishing attacks?

• A. Use firewalls
  

• B. Educate employees about suspicious emails and links
  

• C. Encrypt data at rest
  

• D. Update database management systems regularly

What distinguishes a worm from a virus?

• A. Worms require user action to spread, while viruses do not
  

• B. Worms spread automatically, while viruses often rely on user actions
  

• C. Worms are a form of social engineering, but viruses are not
  

• D. Worms only target networks, while viruses only target computers

What is spyware?

• A. A program that secretly gathers information about a user
  

• B. A software used to protect sensitive data
  

• C. A type of brute force attack
  

• D. Malicious code embedded in an image

Which of the following is NOT a good way to protect against brute force attacks?

• A. Using multi-factor authentication
  

• B. Ensuring passwords are strong and complex
  

• C. Monitoring unusual login attempts
  

• D. Avoiding encrypted passwords in databases

Why are social engineering attacks difficult to prevent?

• A. They exploit human behavior and trust rather than technical vulnerabilities
  

• B. They require advanced software to detect
  

• C. They involve the use of brute force methods
  

• D. They rely on flaws in programming code