Week 10 - Cyber Attacks Exercise 2

What is a brute-force attack in cryptography?

• An attack that uses mathematical formulas to decrypt data.

• An attack that involves trying all possible keys to decrypt the data.

• An attack that involves manipulating the key during encryption.

• An attack that exploits weak encryption algorithms.

Which of the following is a type of attack that tries to discover the encryption key by analyzing patterns in ciphertext?

• • Birthday attack

• Dictionary attack

• • Ciphertext-only attack

• Man-in-the-middle attack

Which attack involves intercepting and altering the communication between two parties without their knowledge?

• Brute-force attack

• Replay attack

• Man-in-the-middle attack

• Side-channel attack

A cryptographic attack that exploits weaknesses in a hash function to produce two different messages with the same hash value is called what?

• Collision attack

• Birthday attack

• Chosen-plaintext attack

• Differential attack

In which type of cryptographic attack does the attacker have access to both the plaintext and its corresponding ciphertext?

• Known-plaintext attack

• Chosen-ciphertext attack

• Chosen-plaintext attack

• Ciphertext-only attack

What type of attack involves flooding a target with excessive traffic, causing a denial of service?

• SQL Injection

• Denial of Service (DoS)

• Cross-Site Scripting (XSS)

• Buffer Overflow

Which attack targets a vulnerability in web applications that allows attackers to execute malicious SQL statements?

• Cross-Site Request Forgery (CSRF)

• Cross-Site Scripting (XSS)

• Directory Traversal

• SQL Injection

Which of the following attacks allows an attacker to inject malicious scripts into web pages viewed by other users?

• Cross-Site Scripting (XSS)

• Session Hijacking

• Denial of Service (DoS)

• Man-in-the-middle attack

What is a buffer overflow attack?

• An attack where an attacker sends more data to a buffer than it can handle, causing memory corruption.

• An attack that exploits weak encryption algorithms.

• An attack where an attacker floods a network with excessive traffic.

• An attack where an attacker intercepts network communication.

Which type of attack exploits a session ID to impersonate a legitimate user and gain unauthorized access to a system?

• Cross-Site Request Forgery (CSRF)

• Session Hijacking

• Phishing

• DNS Spoofing