Cyber Security MCQs

Computer

Cyber Security MCQs

Practice Cyber Security MCQs covering viruses, malware, phishing, hacking, firewall, antivirus and cybersecurity concepts with answers and explanations.

269
Total Questions

Practice Questions

Page 3 of 14
Question #41
Which concept dictates that computer operators should be granted only the minimum system access rights required to complete their specific job responsibilities?
A. Principle of Least Privilege (PoLP)
B. Defense in Depth
C. Stateful Inspection Mapping
D. Zero Trust Validation
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
The Principle of Least Privilege restricts user account privileges to the absolute bare minimum needed to perform authorized tasks, reducing potential attack surfaces.
This question belongs to: Computer Cyber Security
Question #42
What type of attack relies on social engineering to drop malicious flash drives in a company parking lot, hoping an employee will plug one into a corporate workstation out of curiosity?
A. Baiting
B. Smishing Attempt
C. Pharming Exploit
D. Whaling Attack
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Baiting uses the promise of an item or curiosity (like a misplaced USB drive with an intriguing label) to entice victims into compromising their own system security.
This question belongs to: Computer Cyber Security
Question #43
Which type of firewall inspects raw data payloads at the highest layer of the network stack, filtering traffic based on specific application commands and web parameters?
A. Packet Filter Gateway
B. Circuit Level Interceptor
C. Application Layer Firewall / Proxy Firewall
D. Stateful Connection Monitor
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Application firewalls operate at Layer 7 of the OSI model, analyzing specific application-level protocols (like HTTP or FTP) to block sophisticated web attacks.
This question belongs to: Computer Cyber Security
Question #44
What type of software vulnerability occurs when a program inputs more data into a memory allocation area than it can hold, overwriting adjacent memory spaces with malicious code?
A. Cross-Site Scripting
B. Buffer Overflow
C. Zero-Day Exploit
D. SQL Injection
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
A buffer overflow occurs when data volume exceeds memory allocation block boundaries, allowing attackers to overwrite execution tracks and run arbitrary code.
This question belongs to: Computer Cyber Security
Question #45
Which defensive monitoring tool continuously scans system configurations and event logs to alert security teams of active hacker intrusions in real time?
A. Data Sanitization Tool
B. File Encryption Engine
C. Proxy Server Gateway
D. Intrusion Detection System (IDS)
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
An IDS monitors network and host configurations for suspicious activity patterns, generating alerts when potential security breaches are detected.
This question belongs to: Computer Cyber Security
Question #46
A security scam where an attacker follows an authorized employee closely through a secured security door to slip into a restricted office building without scanning a badge is called:
A. Tailgating / Piggybacking
B. Phishing Exploit
C. Baiting Setup
D. Pharming Attack
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Tailgating is a physical security breach where an unauthorized person gains access to a restricted area by following closely behind a legitimate credential holder.
This question belongs to: Computer Cyber Security
Question #47
Which software utility uses cryptographic hashing to verify that a downloaded application patch has not been tampered with or modified by an intermediary threat actor?
A. Firewall Packet Filter
B. Integrity Checker / Hash Verifier
C. Sandbox Controller
D. File Compression Engine
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Integrity checkers calculate cryptographic hashes (like SHA-256) of files, comparing them to known vendor benchmarks to verify the file hasn't been modified.
This question belongs to: Computer Cyber Security
Question #48
What form of malware creates a secret communications link back to an attacker's control server, allowing them to remotely manipulate and spy on the victim's machine?
A. Logic Bomb Module
B. Remote Access Trojan (RAT)
C. Macro Virus String
D. Adware Component
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
A RAT is a specialized Trojan variant that establishes an unauthorized administrative control channel, giving remote threat actors full command over infected endpoints.
This question belongs to: Computer Cyber Security
Question #49
Which security measure involves using multiple layers of security controls throughout an IT infrastructure so that if one defense fails, others are in place to block the attack?
A. Least Privilege Architecture
B. Stateful Inspection Framework
C. Zero Trust Model
D. Defense in Depth / Layered Security
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Defense in Depth employs a variety of layered technical, administrative, and physical controls to secure organization assets and eliminate single points of security failure.
This question belongs to: Computer Cyber Security
Question #50
An attacker uses a fake Wi-Fi hotspot with the exact same name as a coffee shop's legitimate network to trick patrons into connecting so they can intercept their web traffic. This setup is a/an:
A. SQL Injection Matrix
B. Brute Force Permutation
C. DDoS Squeeze
D. Evil Twin Attack
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
An Evil Twin is a fraudulent Wi-Fi access point configured to look identical to a legitimate local network to harvest traffic from unsuspecting connections.
This question belongs to: Computer Cyber Security
Question #51
Which type of malware detection technique relies on sandboxing and virtual machines to monitor what a file actually attempts to do after execution?
A. Static Directory Indexing
B. Cryptographic Hash Comparison
C. Dynamic / Behavioral Detection
D. Static Signature Identification
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Dynamic behavioral detection monitors programs during runtime inside secure sandboxes, analyzing execution behavior for indicators of compromise.
This question belongs to: Computer Cyber Security
Question #52
What social engineering technique involves an attacker making up an elaborate scenario—such as pretending to be an internal IT technician—to trick an employee into giving up account credentials?
A. Pharming
B. Baiting
C. Pretexting
D. Tailgating
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Pretexting is the act of creating an invented scenario (the pretext) to persuade a targeted victim to release information or perform an action they wouldn't normally do.
This question belongs to: Computer Cyber Security
Question #53
What type of software vulnerability allows attackers to inject malicious client-side scripts into web pages viewed by other users, bypassing browser security controls?
A. Buffer Overflow
B. Cross-Site Scripting (XSS)
C. Zero-Day Exploit
D. SQL Injection
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
XSS vulnerabilities occur when web applications include unvalidated data in web outputs, allowing threat actors to inject malicious scripts into a victim's browser session.
This question belongs to: Computer Cyber Security
Question #54
Which administrative security tool establishes a mandatory company rule requiring passwords to contain uppercase letters, numbers, and symbols while expiring every 90 days?
A. Multi-Factor Registry Check
B. Password Policy Enforcement Subsystem
C. Access Control List Matrix
D. Firewall Inspection Script
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Password policy modules enforce programmatic rules regarding credential complexity, length, and rotation cycles to defend against automated cracking attempts.
This question belongs to: Computer Cyber Security
Question #55
A specialized tool that not only detects active network intrusions but also automatically reconfigures firewall rules to block the attacker’s source IP address immediately is a/an:
A. Intrusion Detection System (IDS)
B. Cryptographic Hash Verifier
C. Intrusion Prevention System (IPS)
D. Proxy Server Gateway
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
An IPS builds on standard IDS capabilities by proactively blocking or neutralizing detected threats in real time.
This question belongs to: Computer Cyber Security
Question #56
What type of attack vector uses a malicious payload embedded within a macro script to spread automatically through contacts when an infected spreadsheet is opened?
A. Boot Sector Threat
B. Logic Bomb Tracking
C. Macro Virus
D. Network Sniffer
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Macro viruses hijack application macro scripting automated sequences inside productivity suites, executing commands and spreading code when documents are opened.
This question belongs to: Computer Cyber Security
Question #57
Which cryptographic key mechanism is used to decrypt data that was scrambled using a publicly distributed asymmetric encryption key?
A. Private Key
B. Hash Digest Code
C. Public Key
D. Shared Symmetric Token
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Asymmetric cryptography pairs a public key (used by anyone to encrypt data) with a mathematically linked private key (kept secret by the recipient to decrypt the data).
This question belongs to: Computer Cyber Security
Question #58
What term is used to describe software that is downloaded alongside a desired application without the user's clear awareness, tracking web habits to display pop-up ads?
A. Rootkit Framework
B. Adware / Spyware Bundle
C. Computer Worm Module
D. Ransomware Core
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Adware/spyware bundles often hitchhike inside free software downloads, operating background tracking tools to generate unauthorized advertising pop-ups.
This question belongs to: Computer Cyber Security
Question #59
An attacker sends an email that appears to come from a company's HR department, asking workers to verify financial accounts on a linked website. This exploit is called:
A. Spear Phishing
B. Pharming redirection
C. Smishing Attempt
D. Vishing connection
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Spear phishing targets specific groups or individuals within an enterprise, using familiar internal context to improve the likelihood of deception.
This question belongs to: Computer Cyber Security
Question #60
Which technical mechanism isolates corporate servers from the public internet, routing all external requests through an intermediate gateway that filters malicious payloads?
A. Intrusion Detection Loop
B. Stateful Packet Matrix
C. Virtual Private Network
D. Proxy Server / Reverse Proxy
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Proxy servers intercept and forward requests between networks, masking internal infrastructure topologies and filtering incoming web traffic.
This question belongs to: Computer Cyber Security

More Computer Topics

Computer Abbreviations MCQs
Computer Fundamentals MCQs
Computer Hardware MCQs
Computer Networking MCQs
Computer Software MCQs
CPU (Central Processing Unit) MCQs
Database Management System (DBMS) MCQs
Internet and Web Technologies MCQs
Memory and Storage Devices MCQs
Microsoft Office MCQs
Operating Systems MCQs
Programming Languages MCQs
Today's Top Topics
Cyber Security 269 Database Management System (DBMS) 278 Computer Abbreviations 369 Computer Fundamentals 326 Computer Software 347
Explore Subjects
Accountancy and Statistics 3179 Economy GK 2220 English 15164 Computer 5279 Current Affairs 575
Practice Mix
Which of the following is an indirect tax in India?
The valve between the left atrium and left ventricle is the:
A person faces north. He turns 45° left, then 90° right, then 45° left. Which direction is he facing?
Under the Income Tax Act, the 'TDS' on the sale of an immovable property (other than agricultural land) by a resident is governed by which section, and what is the rate?
In 'Piecemeal Distribution' during dissolution, the first priority for payment of outside liabilities is: