Cyber Security MCQs

Computer

Cyber Security MCQs

Practice Cyber Security MCQs covering viruses, malware, phishing, hacking, firewall, antivirus and cybersecurity concepts with answers and explanations.

269
Total Questions

Practice Questions

Page 1 of 14
Question #1
Which type of malicious software hides inside a seemingly legitimate utility or software application, only to execute its malicious payload once installed by an unsuspecting user?
A. Trojan Horse
B. Ransomware
C. Computer Worm
D. Spyware
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
A Trojan Horse masquerades as safe, benign software to trick users into running it, but contains hidden malicious code designed to compromise system security.
This question belongs to: Computer Cyber Security
Question #2
What is the primary operational difference between a standard computer virus and a computer worm?
A. A worm cannot run without administrative OS privileges.
B. A virus requires a human operator to execute an infected host file to spread, whereas a worm can self-replicate and spread independently across networks.
C. A virus targets network protocols, while a worm exclusively targets storage sectors.
D. A virus relies entirely on hardware modulation bugs.
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Viruses insert themselves into existing host files and require human execution to propagate, while worms exploit system vulnerabilities to self-replicate and travel autonomously across network lines.
This question belongs to: Computer Cyber Security
Question #3
Which social engineering attack vector uses spoofed emails, misleading hyperlinks, and look-alike landing pages to trick corporate employees into surrendering their login credentials?
A. Phishing
B. DDoS Attack
C. Man-in-the-Middle
D. SQL Injection
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Phishing involves masquerading as a trustworthy entity via digital communications to manipulate victims into revealing passwords, financial records, or sensitive personal tokens.
This question belongs to: Computer Cyber Security
Question #4
What security mechanism acts as an analytical perimeter boundary, monitoring and filtering incoming and outgoing network traffic based on an organization's pre-established rule policies?
A. Digital Certificate Registry
B. Antivirus Scan Engine
C. Firewall
D. Intrusion Detection Honeypot
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
A firewall filters data packets shifting across network interfaces, blocking or permitting connections according to specific access control security metrics.
This question belongs to: Computer Cyber Security
Question #5
An attacker uses specialized software to capture, inspect, and log unencrypted data packets as they travel across a shared public Wi-Fi network. This exploit is classified as a/an:
A. Eavesdropping / Packet Sniffing Attack
B. Denial of Service Attack
C. Buffer Overflow Exploit
D. Brute Force Cryptanalysis
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Packet sniffing or eavesdropping intercepts raw data frames over network links, allowing threat actors to spy on unencrypted confidential payloads.
This question belongs to: Computer Cyber Security
Question #6
Which malicious software type is explicitly engineered to silently monitor user inputs, record keystrokes, and track browsing histories to steal passwords covertly?
A. Rootkit Engine
B. Logic Bomb Tracker
C. Keylogger / Spyware
D. Ransomware
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Keyloggers are specialized spyware tools that log physical keyboard strokes, capturing sensitive authentication metrics before they are encrypted.
This question belongs to: Computer Cyber Security
Question #7
What term refers to a network of compromised, malware-infected computers under the remote command of a singular cybercriminal master node, often used to launch massive DDoS actions?
A. Proxy Node Array
B. Honeynet Grid
C. Dark Web Matrix
D. Botnet
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
A botnet is a collection of hijacked 'zombie' nodes controlled remotely via Command and Control (C2) servers to execute coordinated cyber operations.
This question belongs to: Computer Cyber Security
Question #8
What type of hacker explicitly operates inside strict legal guidelines, using their offensive computer expertise to locate system vulnerabilities via authorized penetration testing?
A. Black Hat Hacker
B. Grey Hat Hacker
C. Script Kiddie
D. White Hat Hacker / Ethical Hacker
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
White hat hackers use their technical skills legally and ethically to assess security postures, disclose vulnerabilities responsibly, and fortify enterprise defenses.
This question belongs to: Computer Cyber Security
Question #9
Which cyber attack strategy attempts to overload a target network server or application by flooding it with millions of concurrent artificial traffic requests until it crashes or denies access to real users?
A. Distributed Denial of Service (DDoS) Attack
B. Cross-Site Scripting Loop
C. SQL Injection Matrix
D. Phishing Scam
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
DDoS attacks leverage distributed node assets to saturate server bandwidth or processing resources, causing legitimate service outages.
This question belongs to: Computer Cyber Security
Question #10
A type of extortion malware that uses advanced cryptography to lock a user’s local operating system or data files, demanding payment via cryptocurrency to restore access, is called:
A. Ransomware
B. Adware
C. Rootkit
D. Spyware
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Ransomware restricts access to files or computing systems via powerful encryption, conditioning decryption on the verification of a financial ransom transfer.
This question belongs to: Computer Cyber Security
Question #11
Which detection methodology is used by standard antivirus tools to flag known malware files by matching their unique file hash codes against a local index directory?
A. Signature-based Detection
B. Heuristic Analysis
C. Sandbox Isolation Monitoring
D. Behavioral Monitoring
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Signature-based engines scan storage objects looking for byte patterns or static cryptographic hashes known to correspond to established malware databases.
This question belongs to: Computer Cyber Security
Question #12
What is the security term given to a highly targeted phishing campaign directed explicitly at high-profile corporate executives, politicians, or high-net-worth individuals?
A. Spam Blasting
B. Smishing Scam
C. Vishing Attempt
D. Whaling Attack
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Whaling is a premium sub-type of spear phishing focused on elite targets like CEOs or CFOs to pull down critical enterprise data assets or large wire transfers.
This question belongs to: Computer Cyber Security
Question #13
Which security standard forces a system to demand multiple independent proofs of identity—such as a password mixed with an instant mobile token—before permitting user access?
A. Single Sign-On (SSO)
B. Data Encrypting Standard (DES)
C. Access Control Listing (ACL)
D. Multi-Factor Authentication (MFA)
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
MFA combines validation factors from distinct categories: something you know (password), something you have (token/device), or something you are (biometrics).
This question belongs to: Computer Cyber Security
Question #14
A malicious script designed to lie completely dormant inside an operating system registry until a specific calendar date or logic condition triggers its destructive routine is a/an:
A. Macro Exploit
B. Adware Bundle
C. Logic Bomb
D. Computer Worm
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Logic bombs are code strings embedded inside software setups programmed to launch malicious operations only when precise conditions or time metrics are satisfied.
This question belongs to: Computer Cyber Security
Question #15
Which defensive security strategy isolates an unverified, suspicious executable file inside a restricted virtual space to monitor its runtime behavior safely without risking the main host OS?
A. Data Mirroring
B. Sandboxing
C. Firewall Rule Listing
D. Heuristic Patching
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Sandboxing creates a secure, isolated runtime wrapper where untrusted applications can execute safely while security tools analyze their behavior indicators for anomalies.
This question belongs to: Computer Cyber Security
Question #16
What technique involves an attacker manipulating or modifying the source IP address headers of data packets to disguise their true digital identity and spoof a trusted network node?
A. SQL Tampering
B. IP Spoofing
C. Cross-Site Execution
D. Man-in-the-Middle
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
IP spoofing masks packet origins by replacing real source headers with fake addresses to bypass firewall restrictions or gain unauthorized network access.
This question belongs to: Computer Cyber Security
Question #17
What type of hacker accesses computer systems without any operational authorization, driven by financial malice, espionage, or a desire to cause digital destruction?
A. Grey Hat Hacker
B. White Hat Hacker
C. Black Hat Hacker
D. Ethical Analyst
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Black hat hackers violate computer security domains explicitly for personal gain, monetary theft, political espionage, or malicious destruction.
This question belongs to: Computer Cyber Security
Question #18
Which specific malware variety embeds its code inside the boot sectors of a hard drive platter or deep within the operating system core to intercept and mask its presence from security software tools completely?
A. Macro Virus
B. Rootkit
C. Adware Module
D. Spyware Script
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Rootkits are stealthy malware packages built to acquire deep administrative access, altering kernel functions to render themselves invisible to standard OS monitoring utilities.
This question belongs to: Computer Cyber Security
Question #19
What form of phishing threat targets mobile phone users explicitly by broadcasting fraudulent SMS text messages disguised as notifications from delivery firms or financial institutions?
A. Smishing (SMS Phishing)
B. Whaling Attack
C. Pharming Scam
D. Vishing Attempt
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Smishing combines SMS short messaging with classic phishing logic, luring cellular targets to click compromised web addresses embedded in text notifications.
This question belongs to: Computer Cyber Security
Question #20
A protocol exploit where a threat actor inserts their device into the communication pathway between a client terminal and an internet server to eavesdrop or alter data packets silently is a/an:
A. SQL Injection Exploit
B. Distributed Traffic Flood
C. Brute Force Cracking
D. Man-in-the-Middle (MitM) Attack
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
MitM attacks intercept communication paths between two trusting parties to secretly listen to, relay, or manipulate data payloads.
This question belongs to: Computer Cyber Security

More Computer Topics

Computer Abbreviations MCQs
Computer Fundamentals MCQs
Computer Hardware MCQs
Computer Networking MCQs
Computer Software MCQs
CPU (Central Processing Unit) MCQs
Database Management System (DBMS) MCQs
Internet and Web Technologies MCQs
Memory and Storage Devices MCQs
Microsoft Office MCQs
Operating Systems MCQs
Programming Languages MCQs
Today's Top Topics
Computer Networking 325 Microsoft Office 1199 CPU (Central Processing Unit) 327 Cyber Security 269 Memory and Storage Devices 438
Explore Subjects
Geography GK 6121 Current Affairs 575 History GK 3374 Accountancy and Statistics 3179 Maths 5575
Practice Mix
Select the most appropriate meaning of the idiom: 'Make a mountain out of a molehill'.
What does the 'GUI' acronym stand for in computer interface terminology?
A trader marks his goods 80% above cost price and gives a discount of 40%. Find his gain percent.
Which type of memory is used to store the firmware that boots the computer?
The average of 8 numbers is 30. If one number is 40, find the average of the remaining 7.