Cyber Security MCQs

Computer

Cyber Security MCQs

Practice Cyber Security MCQs covering viruses, malware, phishing, hacking, firewall, antivirus and cybersecurity concepts with answers and explanations.

269
Total Questions

Practice Questions

Page 10 of 14
Question #181
What is the purpose of a cryptographic hash function in cybersecurity?
A. To create a fixed-size digital fingerprint of data for integrity verification
B. To compress data
C. To transmit data securely
D. To encrypt data

Correct Answer: Option A


Explanation:
A cryptographic hash function produces a fixed-size hash value from input data, which can be used to verify the integrity of the data by detecting any changes.

This question belongs to: Computer Cyber Security
Question #182
Which of the following is a common technique used by hackers to gain unauthorized access?
A. Social engineering
B. Using a firewall
C. Encrypting data
D. Installing antivirus

Correct Answer: Option A


Explanation:
Social engineering is a common technique used by hackers to manipulate individuals into divulging confidential information or performing actions that compromise security.

This question belongs to: Computer Cyber Security
Question #183
What is the role of a Chief Information Security Officer (CISO) in an organization?
A. To handle customer complaints
B. To oversee the organization's cybersecurity strategy
C. To develop software
D. To manage the IT department

Correct Answer: Option B


Explanation:
A CISO is a senior executive responsible for developing and implementing an organization's information security program, ensuring the protection of data and systems.

This question belongs to: Computer Cyber Security
Question #184
Which of the following is a type of attack that uses a network of compromised computers (bots) to target a system?
A. Phishing
B. DDoS (Distributed Denial-of-Service)
C. SQL injection
D. Man-in-the-middle

Correct Answer: Option B


Explanation:
A DDoS attack uses a network of infected computers (botnet) to flood a target with traffic, overwhelming it and causing a denial of service.

This question belongs to: Computer Cyber Security
Question #185
What is the purpose of a digital certificate?
A. To compress a file
B. To verify the identity of an entity in a digital communication
C. To speed up data transmission
D. To encrypt a message

Correct Answer: Option B


Explanation:
A digital certificate is an electronic document that uses a digital signature to bind a public key with an identity, verifying the owner's authenticity in online communications.

This question belongs to: Computer Cyber Security
Question #186
Which of the following is a common security risk associated with public Wi-Fi?
A. Man-in-the-middle attacks
B. Increased internet speed
C. Better security
D. Lower data usage

Correct Answer: Option A


Explanation:
Public Wi-Fi networks are often unsecured, making users vulnerable to man-in-the-middle attacks where hackers can intercept data transmitted over the network.

This question belongs to: Computer Cyber Security
Question #187
What is 'pharming'?
A. A type of farming
B. A type of phishing that redirects users to fake websites without their knowledge
C. A type of firewall
D. A type of antivirus

Correct Answer: Option B


Explanation:
Pharming is a cyber attack that redirects a website's traffic to a fake site without the user's knowledge, often by exploiting DNS vulnerabilities, to steal information.

This question belongs to: Computer Cyber Security
Question #188
Which of the following is a method to protect against ransomware?
A. Opening all email attachments
B. Regular data backups
C. Using weak passwords
D. Disabling firewalls

Correct Answer: Option B


Explanation:
Regularly backing up important data is a critical defense against ransomware, as it allows restoration of files without paying the ransom.

This question belongs to: Computer Cyber Security
Question #189
What is the purpose of a security policy in an organization?
A. To market products
B. To define rules and procedures for protecting information assets
C. To increase employee salaries
D. To manage finances

Correct Answer: Option B


Explanation:
A security policy is a formal set of rules and guidelines that an organization implements to protect its information assets and ensure the security of its systems.

This question belongs to: Computer Cyber Security
Question #190
Which of the following is a type of malware that tracks a user's keystrokes?
A. Worm
B. Keylogger
C. Trojan
D. Ransomware

Correct Answer: Option B


Explanation:
A keylogger is a type of malware that records every keystroke a user makes on a device, capturing sensitive information like passwords and credit card numbers.

This question belongs to: Computer Cyber Security
Question #191
What is the role of encryption in cybersecurity?
A. To convert data into a secure format that is unreadable without a key
B. To speed up data processing
C. To delete data
D. To compress data

Correct Answer: Option A


Explanation:
Encryption converts readable data (plaintext) into an unreadable format (ciphertext) using an algorithm and key, ensuring that only authorized parties can access the information.

This question belongs to: Computer Cyber Security
Question #192
What is 'cybercrime'?
A. A criminal activity that is committed using computers or the internet
B. A crime that involves physical theft
C. A crime that is always violent
D. A crime that involves only financial fraud

Correct Answer: Option A


Explanation:
Cybercrime refers to any illegal activity that involves a computer, network, or the internet, including identity theft, hacking, and online fraud.

This question belongs to: Computer Cyber Security
Question #193
Which of the following is a method to prevent SQL injection attacks?
A. Using strong passwords
B. Using parameterized queries
C. Using a firewall
D. Installing antivirus

Correct Answer: Option B


Explanation:
Parameterized queries are a programming technique that prevents SQL injection by treating user input as data, not as part of the SQL command.

This question belongs to: Computer Cyber Security
Question #194
What is the purpose of a honeypot in cybersecurity?
A. To store sensitive data
B. To attract attackers and analyze their behavior
C. To provide backup services
D. To encrypt data

Correct Answer: Option B


Explanation:
A honeypot is a decoy system or network that is set up to attract attackers, allowing security teams to study their methods and gather intelligence.

This question belongs to: Computer Cyber Security
Question #195
Which of the following is a common security threat to mobile devices?
A. Malicious apps
B. Physical theft
C. All of the above
D. Unsecured Wi-Fi

Correct Answer: Option C


Explanation:
Mobile devices face multiple security threats, including malicious apps, physical theft, and unsecured Wi-Fi networks that can be exploited by attackers.

This question belongs to: Computer Cyber Security
Question #196
What is the difference between encryption and hashing?
A. Encryption is used for integrity, hashing for confidentiality
B. Encryption is reversible, hashing is not
C. Hashing is reversible, encryption is not
D. They are the same

Correct Answer: Option B


Explanation:
Encryption is a two-way function that can be reversed with a key, while hashing is a one-way function that produces a fixed-size output from input and cannot be reversed to obtain the original data.

This question belongs to: Computer Cyber Security
Question #197
Which of the following is a common method used by attackers to bypass security controls?
A. Encrypting data
B. Exploiting software vulnerabilities
C. Installing firewalls
D. Using strong passwords

Correct Answer: Option B


Explanation:
Attackers often exploit software vulnerabilities, such as unpatched security flaws, to bypass security controls and gain unauthorized access to systems.

This question belongs to: Computer Cyber Security
Question #198
What is the role of an incident response plan in cybersecurity?
A. To encrypt all data
B. To prevent all cyber attacks
C. To monitor employee activities
D. To provide a structured approach for handling and recovering from a security breach

Correct Answer: Option D


Explanation:
An incident response plan outlines the steps an organization should take when a security incident occurs, from detection to recovery, to minimize damage and ensure a swift return to normal operations.

This question belongs to: Computer Cyber Security
Question #199
Which of the following is a type of attack that uses deceptive websites to steal user credentials?
A. Denial-of-service
B. Phishing
C. Man-in-the-middle
D. SQL injection

Correct Answer: Option B


Explanation:
Phishing attacks often involve creating fake websites that mimic legitimate ones to trick users into entering their login credentials or other sensitive information.

This question belongs to: Computer Cyber Security
Question #200
What is 'cybersecurity'?
A. The practice of managing hardware
B. The practice of protecting systems, networks, and data from digital attacks
C. The practice of building computers
D. The practice of designing software

Correct Answer: Option B


Explanation:
Cybersecurity is the practice of protecting computers, servers, mobile devices, electronic systems, networks, and data from malicious attacks.

This question belongs to: Computer Cyber Security