Cyber Security MCQs

Computer

Cyber Security MCQs

Practice Cyber Security MCQs covering viruses, malware, phishing, hacking, firewall, antivirus and cybersecurity concepts with answers and explanations.

269
Total Questions

Practice Questions

Page 11 of 14
Question #201
Which of the following is a characteristic of a secure password?
A. It is at least 12 characters long with a mix of characters
B. It is a common word
C. It is shared with others
D. It is easy to remember

Correct Answer: Option A


Explanation:
A secure password is long (at least 12 characters) and includes a mix of uppercase and lowercase letters, numbers, and special characters, making it difficult to guess or crack.

This question belongs to: Computer Cyber Security
Question #202
What is the purpose of a VPN in terms of privacy?
A. To increase internet speed
B. To hide the user's IP address and encrypt internet traffic
C. To block all ads
D. To provide free internet

Correct Answer: Option B


Explanation:
A VPN masks the user's IP address and encrypts internet traffic, enhancing online privacy and security by preventing third parties from monitoring online activities.

This question belongs to: Computer Cyber Security
Question #203
Which of the following is a type of malware that can replicate and spread across networks without user interaction?
A. Virus
B. Spyware
C. Trojan
D. Worm

Correct Answer: Option D


Explanation:
A worm is a standalone malware that self-replicates and spreads across networks without requiring any user action.

This question belongs to: Computer Cyber Security
Question #204
What is the primary goal of a phishing attack?
A. To disrupt network services
B. To encrypt files
C. To obtain sensitive information such as passwords and credit card details
D. To install a virus

Correct Answer: Option C


Explanation:
The primary goal of phishing is to trick individuals into revealing sensitive information like usernames, passwords, and financial details by impersonating a trustworthy entity.

This question belongs to: Computer Cyber Security
Question #205
Which of the following is a method to secure data in transit?
A. Using strong passwords
B. Using SSL/TLS encryption
C. Using antivirus software
D. Using a firewall

Correct Answer: Option B


Explanation:
SSL/TLS encryption secures data as it travels across networks, protecting it from interception and tampering.

This question belongs to: Computer Cyber Security
Question #206
What is the role of a Security Operations Center (SOC)?
A. To develop software
B. To handle customer service
C. To manage human resources
D. To monitor and respond to security threats in real-time

Correct Answer: Option D


Explanation:
A SOC is a centralized unit that monitors an organization's security posture, detects, analyzes, and responds to cybersecurity incidents using people, processes, and technology.

This question belongs to: Computer Cyber Security
Question #207
Which of the following is a type of cyber attack that involves intercepting and altering communications between two parties?
A. Denial-of-service
B. Man-in-the-middle (MITM)
C. Phishing
D. SQL injection

Correct Answer: Option B


Explanation:
In a man-in-the-middle attack, the attacker secretly intercepts and possibly alters the communication between two parties who believe they are directly communicating with each other.

This question belongs to: Computer Cyber Security
Question #208
What is the purpose of a security audit?
A. To manage employee salaries
B. To assess an organization's security posture and identify vulnerabilities
C. To increase system performance
D. To install new software

Correct Answer: Option B


Explanation:
A security audit is a systematic evaluation of an organization's information security policies, practices, and controls to identify vulnerabilities and ensure compliance.

This question belongs to: Computer Cyber Security
Question #209
Which of the following is a common security risk associated with cloud computing?
A. Data breaches
B. Loss of physical control
C. Shared vulnerabilities
D. All of the above

Correct Answer: Option D


Explanation:
Cloud computing introduces security risks such as data breaches, loss of physical control over infrastructure, and vulnerabilities from shared resources, making comprehensive security measures essential.

This question belongs to: Computer Cyber Security
Question #210
What is 'spear phishing'?
A. A physical attack
B. A mass email phishing campaign
C. A type of virus
D. A targeted phishing attack aimed at a specific individual or organization

Correct Answer: Option D


Explanation:
Spear phishing is a highly targeted form of phishing where attackers personalize their messages to a specific individual or group to increase the likelihood of success.

This question belongs to: Computer Cyber Security
Question #211
Which of the following is a method to prevent unauthorized access to a system?
A. Using default passwords
B. Multi-factor authentication
C. Sharing login credentials
D. Disabling firewalls

Correct Answer: Option B


Explanation:
Multi-factor authentication requires users to provide multiple forms of verification, significantly reducing the risk of unauthorized access even if one factor is compromised.

This question belongs to: Computer Cyber Security
Question #212
What is the purpose of a vulnerability assessment?
A. To fix all security issues
B. To monitor network traffic
C. To identify and quantify security vulnerabilities in a system
D. To install security patches

Correct Answer: Option C


Explanation:
A vulnerability assessment is a process that identifies, quantifies, and prioritizes vulnerabilities in a system, providing a basis for remediation.

This question belongs to: Computer Cyber Security
Question #213
Which of the following is a type of attack that uses malicious code to exploit vulnerabilities in web applications?
A. Man-in-the-middle
B. Denial-of-service
C. Phishing
D. Cross-site scripting (XSS)

Correct Answer: Option D


Explanation:
Cross-site scripting (XSS) is a type of attack where malicious scripts are injected into web applications, exploiting vulnerabilities to steal data or hijack sessions.

This question belongs to: Computer Cyber Security
Question #214
What is the role of a security policy in an organization?
A. To develop marketing strategies
B. To manage employee attendance
C. To increase profits
D. To define acceptable use of resources and security rules

Correct Answer: Option D


Explanation:
A security policy establishes guidelines and rules for acceptable use of an organization's resources, outlining security measures and responsibilities to protect information assets.

This question belongs to: Computer Cyber Security
Question #215
Which of the following is a common technique used in ransomware attacks?
A. Stealing passwords
B. Encrypting files and demanding payment for decryption
C. Installing adware
D. Sending spam emails

Correct Answer: Option B


Explanation:
Ransomware attacks typically involve encrypting the victim's files and demanding a ransom payment in exchange for the decryption key.

This question belongs to: Computer Cyber Security
Question #216
What is the purpose of a firewall in an organization?
A. To increase network speed
B. To manage user accounts
C. To protect the internal network from external threats
D. To provide backup services

Correct Answer: Option C


Explanation:
A firewall serves as a barrier between an internal network and external sources, filtering traffic to prevent unauthorized access and cyber threats.

This question belongs to: Computer Cyber Security
Question #217
What is 'vishing'?
A. Phishing through voice communication, such as phone calls
B. Phishing through email
C. Phishing through social media
D. Phishing through text messages

Correct Answer: Option A


Explanation:
Vishing is a type of phishing attack that uses voice communication, such as phone calls, to trick individuals into revealing sensitive information.

This question belongs to: Computer Cyber Security
Question #218
Which of the following is a method to secure a wireless network?
A. Sharing the password publicly
B. Using an open network
C. Disabling all security features
D. Using WPA2 encryption

Correct Answer: Option D


Explanation:
Using WPA2 encryption is a standard security measure for wireless networks, providing strong protection against unauthorized access and eavesdropping.

This question belongs to: Computer Cyber Security
Question #219
What is the purpose of a security token in authentication?
A. To store passwords permanently
B. To provide a time-based one-time password (TOTP)
C. To decrypt files
D. To manage network traffic

Correct Answer: Option B


Explanation:
A security token generates a time-based one-time password (TOTP) that changes periodically, adding an extra layer of security for authentication.

This question belongs to: Computer Cyber Security
Question #220
Which of the following is a common cyber threat to personal devices?
A. All of the above
B. Unsecured networks
C. Physical theft
D. Malware infections

Correct Answer: Option A


Explanation:
Personal devices face multiple cyber threats, including malware infections, physical theft, and security risks from unsecured networks, requiring comprehensive protection measures.

This question belongs to: Computer Cyber Security