Cyber Security MCQs

Computer

Cyber Security MCQs

Practice Cyber Security MCQs covering viruses, malware, phishing, hacking, firewall, antivirus and cybersecurity concepts with answers and explanations.

269
Total Questions

Practice Questions

Page 3 of 14
Question #41
Which concept dictates that computer operators should be granted only the minimum system access rights required to complete their specific job responsibilities?
A. Stateful Inspection Mapping
B. Defense in Depth
C. Zero Trust Validation
D. Principle of Least Privilege (PoLP)
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
The Principle of Least Privilege restricts user account privileges to the absolute bare minimum needed to perform authorized tasks, reducing potential attack surfaces.
This question belongs to: Computer Cyber Security
Question #42
What type of attack relies on social engineering to drop malicious flash drives in a company parking lot, hoping an employee will plug one into a corporate workstation out of curiosity?
A. Whaling Attack
B. Smishing Attempt
C. Baiting
D. Pharming Exploit
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Baiting uses the promise of an item or curiosity (like a misplaced USB drive with an intriguing label) to entice victims into compromising their own system security.
This question belongs to: Computer Cyber Security
Question #43
Which type of firewall inspects raw data payloads at the highest layer of the network stack, filtering traffic based on specific application commands and web parameters?
A. Circuit Level Interceptor
B. Stateful Connection Monitor
C. Packet Filter Gateway
D. Application Layer Firewall / Proxy Firewall
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Application firewalls operate at Layer 7 of the OSI model, analyzing specific application-level protocols (like HTTP or FTP) to block sophisticated web attacks.
This question belongs to: Computer Cyber Security
Question #44
What type of software vulnerability occurs when a program inputs more data into a memory allocation area than it can hold, overwriting adjacent memory spaces with malicious code?
A. SQL Injection
B. Cross-Site Scripting
C. Zero-Day Exploit
D. Buffer Overflow
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
A buffer overflow occurs when data volume exceeds memory allocation block boundaries, allowing attackers to overwrite execution tracks and run arbitrary code.
This question belongs to: Computer Cyber Security
Question #45
Which defensive monitoring tool continuously scans system configurations and event logs to alert security teams of active hacker intrusions in real time?
A. Data Sanitization Tool
B. Intrusion Detection System (IDS)
C. Proxy Server Gateway
D. File Encryption Engine
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
An IDS monitors network and host configurations for suspicious activity patterns, generating alerts when potential security breaches are detected.
This question belongs to: Computer Cyber Security
Question #46
A security scam where an attacker follows an authorized employee closely through a secured security door to slip into a restricted office building without scanning a badge is called:
A. Baiting Setup
B. Pharming Attack
C. Phishing Exploit
D. Tailgating / Piggybacking
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Tailgating is a physical security breach where an unauthorized person gains access to a restricted area by following closely behind a legitimate credential holder.
This question belongs to: Computer Cyber Security
Question #47
Which software utility uses cryptographic hashing to verify that a downloaded application patch has not been tampered with or modified by an intermediary threat actor?
A. File Compression Engine
B. Firewall Packet Filter
C. Integrity Checker / Hash Verifier
D. Sandbox Controller
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Integrity checkers calculate cryptographic hashes (like SHA-256) of files, comparing them to known vendor benchmarks to verify the file hasn't been modified.
This question belongs to: Computer Cyber Security
Question #48
What form of malware creates a secret communications link back to an attacker's control server, allowing them to remotely manipulate and spy on the victim's machine?
A. Macro Virus String
B. Logic Bomb Module
C. Adware Component
D. Remote Access Trojan (RAT)
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
A RAT is a specialized Trojan variant that establishes an unauthorized administrative control channel, giving remote threat actors full command over infected endpoints.
This question belongs to: Computer Cyber Security
Question #49
Which security measure involves using multiple layers of security controls throughout an IT infrastructure so that if one defense fails, others are in place to block the attack?
A. Defense in Depth / Layered Security
B. Least Privilege Architecture
C. Stateful Inspection Framework
D. Zero Trust Model
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Defense in Depth employs a variety of layered technical, administrative, and physical controls to secure organization assets and eliminate single points of security failure.
This question belongs to: Computer Cyber Security
Question #50
An attacker uses a fake Wi-Fi hotspot with the exact same name as a coffee shop's legitimate network to trick patrons into connecting so they can intercept their web traffic. This setup is a/an:
A. DDoS Squeeze
B. Brute Force Permutation
C. SQL Injection Matrix
D. Evil Twin Attack
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
An Evil Twin is a fraudulent Wi-Fi access point configured to look identical to a legitimate local network to harvest traffic from unsuspecting connections.
This question belongs to: Computer Cyber Security
Question #51
Which type of malware detection technique relies on sandboxing and virtual machines to monitor what a file actually attempts to do after execution?
A. Dynamic / Behavioral Detection
B. Static Signature Identification
C. Static Directory Indexing
D. Cryptographic Hash Comparison
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Dynamic behavioral detection monitors programs during runtime inside secure sandboxes, analyzing execution behavior for indicators of compromise.
This question belongs to: Computer Cyber Security
Question #52
What social engineering technique involves an attacker making up an elaborate scenario—such as pretending to be an internal IT technician—to trick an employee into giving up account credentials?
A. Pretexting
B. Pharming
C. Tailgating
D. Baiting
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Pretexting is the act of creating an invented scenario (the pretext) to persuade a targeted victim to release information or perform an action they wouldn't normally do.
This question belongs to: Computer Cyber Security
Question #53
What type of software vulnerability allows attackers to inject malicious client-side scripts into web pages viewed by other users, bypassing browser security controls?
A. Zero-Day Exploit
B. Cross-Site Scripting (XSS)
C. Buffer Overflow
D. SQL Injection
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
XSS vulnerabilities occur when web applications include unvalidated data in web outputs, allowing threat actors to inject malicious scripts into a victim's browser session.
This question belongs to: Computer Cyber Security
Question #54
Which administrative security tool establishes a mandatory company rule requiring passwords to contain uppercase letters, numbers, and symbols while expiring every 90 days?
A. Firewall Inspection Script
B. Password Policy Enforcement Subsystem
C. Multi-Factor Registry Check
D. Access Control List Matrix
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Password policy modules enforce programmatic rules regarding credential complexity, length, and rotation cycles to defend against automated cracking attempts.
This question belongs to: Computer Cyber Security
Question #55
A specialized tool that not only detects active network intrusions but also automatically reconfigures firewall rules to block the attacker’s source IP address immediately is a/an:
A. Proxy Server Gateway
B. Intrusion Detection System (IDS)
C. Cryptographic Hash Verifier
D. Intrusion Prevention System (IPS)
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
An IPS builds on standard IDS capabilities by proactively blocking or neutralizing detected threats in real time.
This question belongs to: Computer Cyber Security
Question #56
What type of attack vector uses a malicious payload embedded within a macro script to spread automatically through contacts when an infected spreadsheet is opened?
A. Network Sniffer
B. Logic Bomb Tracking
C. Boot Sector Threat
D. Macro Virus
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Macro viruses hijack application macro scripting automated sequences inside productivity suites, executing commands and spreading code when documents are opened.
This question belongs to: Computer Cyber Security
Question #57
Which cryptographic key mechanism is used to decrypt data that was scrambled using a publicly distributed asymmetric encryption key?
A. Private Key
B. Shared Symmetric Token
C. Public Key
D. Hash Digest Code
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Asymmetric cryptography pairs a public key (used by anyone to encrypt data) with a mathematically linked private key (kept secret by the recipient to decrypt the data).
This question belongs to: Computer Cyber Security
Question #58
What term is used to describe software that is downloaded alongside a desired application without the user's clear awareness, tracking web habits to display pop-up ads?
A. Ransomware Core
B. Computer Worm Module
C. Adware / Spyware Bundle
D. Rootkit Framework
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Adware/spyware bundles often hitchhike inside free software downloads, operating background tracking tools to generate unauthorized advertising pop-ups.
This question belongs to: Computer Cyber Security
Question #59
An attacker sends an email that appears to come from a company's HR department, asking workers to verify financial accounts on a linked website. This exploit is called:
A. Smishing Attempt
B. Vishing connection
C. Spear Phishing
D. Pharming redirection
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Spear phishing targets specific groups or individuals within an enterprise, using familiar internal context to improve the likelihood of deception.
This question belongs to: Computer Cyber Security
Question #60
Which technical mechanism isolates corporate servers from the public internet, routing all external requests through an intermediate gateway that filters malicious payloads?
A. Stateful Packet Matrix
B. Virtual Private Network
C. Intrusion Detection Loop
D. Proxy Server / Reverse Proxy
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Proxy servers intercept and forward requests between networks, masking internal infrastructure topologies and filtering incoming web traffic.
This question belongs to: Computer Cyber Security

More Computer Topics

Computer Abbreviations MCQs
Computer Fundamentals MCQs
Computer Hardware MCQs
Computer Networking MCQs
Computer Software MCQs
CPU (Central Processing Unit) MCQs
Database Management System (DBMS) MCQs
Internet and Web Technologies MCQs
Memory and Storage Devices MCQs
Microsoft Office MCQs
Operating Systems MCQs
Programming Languages MCQs
Today's Top Topics
Computer Software 347 CPU (Central Processing Unit) 327 Operating Systems 510 Database Management System (DBMS) 278 Memory and Storage Devices 438
Explore Subjects
Computer 5279 History GK 3374 Science 4430 Economy GK 2220 Maths 5575
Practice Mix
Who discovered the existence of the atomic nucleus through the famous Gold Foil Experiment?
Excluding institutional stops, a transit bus routes at 60 km/h and including stops it runs at 50 km/h. How many minutes does the bus stop per hour?
Select the most appropriate meaning of the idiom: 'Cloud cuckoo land'.
The 'Mumbai' is located on the:
Laspeyres price index uses weights of: