Cyber Security MCQs

Computer

Cyber Security MCQs

Practice Cyber Security MCQs covering viruses, malware, phishing, hacking, firewall, antivirus and cybersecurity concepts with answers and explanations.

269
Total Questions

Practice Questions

Page 4 of 14
Question #61
What type of hacker identifies security vulnerabilities in systems without permission, but instead of exploiting them, publicly posts the flaws online to force the vendor to patch them?
A. White Hat Hacker
B. Script Kiddie
C. Grey Hat Hacker
D. Black Hat Hacker
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Grey hat hackers compromise security perimeters without prior authorization, but generally lack malicious intent, aiming instead to expose vulnerabilities or force technical remediation.
This question belongs to: Computer Cyber Security
Question #62
Which component of a secure operating system architecture logs every successful and failed user authentication attempt to provide an audit trail for forensic review?
A. Heuristic Monitor
B. Quarantine Vault
C. Security Event Log / Audit Log
D. Firewall Filter Sheet
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Security event logs provide an immutable chronological record of access histories, system errors, and authentication attempts to assist forensic investigations.
This question belongs to: Computer Cyber Security
Question #63
A physical cyber security hazard where a threat actor looks over an employee's shoulder at an ATM or computer terminal to copy down passwords or PINs is called:
A. Tailgating
B. Baiting
C. Pretexting
D. Shoulder Surfing
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Shoulder surfing is the practice of looking over a target's shoulder to covertly observe passwords, PIN codes, or sensitive configurations as they type them.
This question belongs to: Computer Cyber Security
Question #64
What technique uses automated scripts to test a massive list of leaked username and password combinations across multiple websites to hijack accounts?
A. Buffer Overflow Exploit
B. Session Hijacking
C. Credential Stuffing
D. SQL Injection
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Credential stuffing exploits password reuse habits by testing databases of leaked credentials against automated web login forms.
This question belongs to: Computer Cyber Security
Question #65
Which form of malicious software can travel across network links to infect other network devices without needing a human user to copy or share an infected file?
A. Computer Worm
B. Trojan Horse
C. Keylogger Module
D. Macro Virus
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Worms are self-contained, self-replicating malware strains that exploit network vulnerabilities to spread autonomously among connected devices.
This question belongs to: Computer Cyber Security
Question #66
What administrative rule requires employees to lock their desks, secure printed papers, and password-protect their monitors whenever they step away from their desks?
A. Principle of Least Privilege
B. Stateful Boundary Policy
C. Clean Desk Policy
D. Zero Trust Validation Framework
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Clean desk policies mitigate insider threat options and corporate espionage risks by mandating that physical workspaces remain free of exposed sensitive records.
This question belongs to: Computer Cyber Security
Question #67
Which form of malware utilizes advanced encryption to scramble user data files, forcing the victim to pay a fee to obtain the decryption key?
A. Rootkit Engine
B. Ransomware
C. Logic Bomb Module
D. Keylogger Script
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Ransomware targets data directories via cryptographic algorithms, locking file access until a ransom payment is made.
This question belongs to: Computer Cyber Security
Question #68
An attacker uses a network configuration trick to intercept wireless session cookies, letting them access a corporate web account without needing the user's password. This exploit is:
A. Session Hijacking
B. Brute Force Attack
C. IP Header Spoofing
D. SQL Injection Exploit
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Session hijacking captures live authentication tokens or active session state cookies, enabling attackers to bypass authentication gateways and impersonate victims.
This question belongs to: Computer Cyber Security
Question #69
Which process uses a cryptographic hash function to convert a user's plain text password into a short, fixed-length string of characters before saving it in a secure database?
A. Heuristic Mapping
B. Sandboxing Isolation
C. Password Hashing / Salting
D. File Compression
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Password hashing applies one-way cryptographic algorithms to obscure plain text passwords, ensuring cleartext credentials aren't exposed if the database is breached.
This question belongs to: Computer Cyber Security
Question #70
What type of attack modifies a server’s DNS cache to silently redirect users to a fraudulent banking website, even when they type the correct web domain?
A. Vishing Exploitation
B. Pharming Attack / DNS Spoofing
C. Spear Phishing Scam
D. Smishing Notification
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Pharming compromises DNS lookup records to seamlessly reroute traffic to spoofed destinations, harvesting credentials even from users who input valid URLs.
This question belongs to: Computer Cyber Security
Question #71
Which software asset operates by intercepting device instructions deep within the kernel layer, allowing an unauthorized user to mask the presence of spyware from antivirus sweeps?
A. Macro Exploit
B. Adware Plugin
C. Worm Daemon
D. Rootkit
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Rootkits modify system kernel code to hide processes, files, and network links, rendering themselves invisible to standard antivirus utilities.
This question belongs to: Computer Cyber Security
Question #72
What is the primary role of a stateful inspection firewall in network security architectures?
A. To monitor and track the status of active network connections, allowing response packets only from established sessions.
B. To resolve hardware MAC pointers to DNS records.
C. To encrypt local data storage volumes automatically.
D. To dynamically isolate viruses inside file sandboxes.
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Stateful firewalls maintain connection tables tracking the state of active network interactions, blocking unexpected or unsolicited inbound traffic.
This question belongs to: Computer Cyber Security
Question #73
A hacker who uses simple, pre-written malicious scripts found online to deface websites or launch basic exploits without deep knowledge of programming is called a:
A. White Hat Engineer
B. Black Hat operative
C. Grey Hat analyst
D. Script Kiddie
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Script kiddies are low-skilled attackers who rely on pre-made, automated exploitation kits created by more experienced software developers.
This question belongs to: Computer Cyber Security
Question #74
Which defensive process runs suspicious executable files inside a restricted, isolated virtual machine to see if they attempt to alter system registries before allowing them onto the main network?
A. Static Signature Masking
B. Firewall Rule Listing
C. Sandboxing
D. Data Deduplication
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Sandboxing provides an isolated virtual testing environment where security tools can safely witness and analyze untrusted file behaviors.
This question belongs to: Computer Cyber Security
Question #75
What form of social engineering trick uses fraudulent phone calls from threat actors pretending to be bank employees to verify a target's credit card number?
A. Pharming
B. Vishing
C. Smishing
D. Whaling
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Vishing uses deceptive voice calls and social engineering strategies to trick victims into disclosing sensitive corporate or personal details.
This question belongs to: Computer Cyber Security
Question #76
What type of software exploit injects malicious SQL scripts into database input entry boxes, allowing attackers to download entire customer record directories illegally?
A. SQL Injection
B. Cross-Site Scripting
C. Denial of Service Loop
D. Buffer Overflow Exploit
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
SQL injection executes arbitrary database commands by inserting malicious SQL code statements into unvalidated input fields.
This question belongs to: Computer Cyber Security
Question #77
A security infrastructure strategy where multiple independent layers of security controls—such as firewalls, MFA, encryption, and awareness training—are deployed across an enterprise is:
A. Least Privilege Access
B. Zero Trust Model
C. Defense in Depth
D. Stateful Boundary Control
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Defense in Depth combines technical, physical, and administrative security layers to build redundant protection boundaries and avoid single points of failure.
This question belongs to: Computer Cyber Security
Question #78
Which software module isolates files flagged by antivirus software, locking them away from the filesystem to prevent them from executing code or infecting other applications?
A. Heuristic Analyzer
B. Quarantine
C. Firewall Rule Sheet
D. Sandbox Space
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Antivirus quarantine utilities isolate suspected malware files in a secure directory structure, keeping them from interacting with the main OS.
This question belongs to: Computer Cyber Security
Question #79
What social engineering tactic involves an attacker tailing an authorized corporate employee closely through an office entryway to slip inside without scanning security badges?
A. Baiting
B. Tailgating
C. Pretexting
D. Pharming
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Tailgating is a physical security breach where an unauthorized person enters a secured facility by following closely behind a legitimate credential holder.
This question belongs to: Computer Cyber Security
Question #80
What form of targeted phishing threat focuses explicitly on high-level corporate personnel like CEOs or financial directors to pull down business access codes?
A. Whaling Attack
B. Spam Blasting
C. Vishing Routine
D. Smishing Campaign
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Whaling is a highly specialized phishing variant designed to target C-suite executives and high-value corporate decision makers.
This question belongs to: Computer Cyber Security

More Computer Topics

Computer Abbreviations MCQs
Computer Fundamentals MCQs
Computer Hardware MCQs
Computer Networking MCQs
Computer Software MCQs
CPU (Central Processing Unit) MCQs
Database Management System (DBMS) MCQs
Internet and Web Technologies MCQs
Memory and Storage Devices MCQs
Microsoft Office MCQs
Operating Systems MCQs
Programming Languages MCQs
Today's Top Topics
Cyber Security 269 Database Management System (DBMS) 278 Computer Abbreviations 369 Computer Fundamentals 326 Computer Software 347
Explore Subjects
Accountancy and Statistics 3179 Economy GK 2220 English 15164 Computer 5279 Current Affairs 575
Practice Mix
Which of the following is an indirect tax in India?
The valve between the left atrium and left ventricle is the:
A person faces north. He turns 45° left, then 90° right, then 45° left. Which direction is he facing?
Under the Income Tax Act, the 'TDS' on the sale of an immovable property (other than agricultural land) by a resident is governed by which section, and what is the rate?
In 'Piecemeal Distribution' during dissolution, the first priority for payment of outside liabilities is: