Cyber Security MCQs

Computer

Cyber Security MCQs

Practice Cyber Security MCQs covering viruses, malware, phishing, hacking, firewall, antivirus and cybersecurity concepts with answers and explanations.

269
Total Questions

Practice Questions

Page 5 of 14
Question #81
Which type of antivirus detection strategy analyzes an unverified program's instruction codes for malicious traits, helping it flag new threats even if the file hash is missing from standard databases?
A. Static Signature Masking
B. Database Static Lookup
C. Heuristic Analysis / Behavioral Monitoring
D. Cryptographic Indexing
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Heuristic analysis checks software patterns and rules of behavior to detect unknown zero-day malware variants that lack established signature profiles.
This question belongs to: Computer Cyber Security
Question #82
What form of malicious exploit attempts to guess an operator's password by using automated script loops that cycle through millions of characters or dictionary strings systematically?
A. SQL Injection Exploit
B. Phishing Setup
C. Brute Force Attack
D. Packet Sniffing Exploit
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Brute force attacks run automated character guessing scripts to test password permutations until finding a combination that unlocks the targeted account.
This question belongs to: Computer Cyber Security
Question #83
An IT security approach that removes implicit trust from within a network boundary, requiring continuous credential checking and session verification for every user, device, and connection is:
A. Stateful Inspection Framework
B. Zero Trust Architecture
C. Defense in Depth
D. Least Privilege Access
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Zero Trust eliminates old default trust perimeters, enforcing strict continuous verification parameters for all connection assets regardless of network location.
This question belongs to: Computer Cyber Security
Question #84
What form of software flaw allows a threat actor to trigger an application error by packing more data into a memory allocation sector than it can hold, overwriting processing tracks?
A. Zero-Day Exploit
B. Buffer Overflow
C. Cross-Site Scripting
D. SQL Injection
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Buffer overflows occur when input variables exceed memory segment boundaries, allowing malicious payloads to alter memory instructions and execute arbitrary commands.
This question belongs to: Computer Cyber Security
Question #85
Which cybersecurity framework requires users to provide two or more distinct verification indicators—such as a password mixed with an instantaneous biometric facial scan—to unlock an account?
A. Data Encryption Standard (DES)
B. Single Sign-On (SSO)
C. Access Control Listing (ACL)
D. Multi-Factor Authentication (MFA)
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
MFA strengthens identity management by requiring confirmation from multiple independent categories of authentication factors.
This question belongs to: Computer Cyber Security
Question #86
A piece of software code that remains hidden and completely inactive inside a corporate server until an executive's account deletion triggers its destructive routine is a:
A. Computer Worm
B. Logic Bomb
C. Macro Virus
D. Rootkit Module
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Logic bombs are snippets of malicious code hidden within legitimate software programmed to activate only when specific conditions are met.
This question belongs to: Computer Cyber Security
Question #87
What form of network security exploit uses a fake wireless router with the exact same SSID label as a corporate office network to trick workers into connecting so the attacker can log their data traffic?
A. Brute Force Cracking
B. SQL Injection Squeeze
C. Evil Twin Attack
D. DDoS Flood
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
An Evil Twin attack clones a legitimate Wi-Fi access point configuration to trick users into connecting, allowing the attacker to monitor network traffic.
This question belongs to: Computer Cyber Security
Question #88
Which principle limits user account privileges and configuration rights to the absolute minimum required to complete designated corporate operations, reducing the blast radius of a compromised account?
A. Stateful Inspection Mapping
B. Defense in Depth
C. Zero Trust Tracking
D. Principle of Least Privilege (PoLP)
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
The Principle of Least Privilege helps contain security breaches by ensuring users only have access to systems and files necessary for their specific role.
This question belongs to: Computer Cyber Security
Question #89
What form of social engineering trick uses a physical item—such as scattering malware-infected USB flash drives around an office elevator—to compromise a network via employee curiosity?
A. Baiting
B. Smishing Attempt
C. Pharming Attack
D. Whaling Scam
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Baiting leverages curiosity or greed by using physical media tokens to trick victims into executing malicious payloads on their systems.
This question belongs to: Computer Cyber Security
Question #90
What type of software vulnerability occurs when untrusted user code commands are output directly into another user’s browser view, enabling script injection exploits?
A. Cross-Site Scripting (XSS)
B. Zero-Day Exploit
C. Buffer Overflow
D. SQL Injection
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
XSS allows threat actors to execute malicious client-side scripts inside other users' browser views by compromising vulnerable web outputs.
This question belongs to: Computer Cyber Security
Question #91
Which technical utility tool acts as an encrypted network corridor, wrapping public internet traffic in a cryptographic layer to hide data from eavesdroppers?
A. Intrusion Detection Module
B. Proxy Gateway Server
C. Virtual Private Network (VPN)
D. Firewall Layer
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
VPNs establish encrypted tunnels over public networks, shielding active data traffic from interception or monitoring.
This question belongs to: Computer Cyber Security
Question #92
What term describes a newly discovered software vulnerability that is exploited by threat actors before the software creator has created or released a security patch?
A. Logic Bypass flaw
B. Backdoor Entry
C. Buffer Overflow
D. Zero-Day Vulnerability
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Zero-day vulnerabilities represent newly discovered software flaws that lack patch remediation, exposing users to exploitation risks.
This question belongs to: Computer Cyber Security
Question #93
Which defensive infrastructure component actively monitors network traffic logs, dynamically blocking malicious source IP addresses to protect network availability?
A. Proxy Server Gateway
B. File Encryption Engine
C. Data Sanitization Tool
D. Intrusion Prevention System (IPS)
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
An IPS actively analyzes data packet streams, automatically updating security controls or dropping malicious traffic to protect target networks.
This question belongs to: Computer Cyber Security
Question #94
A type of targeted social engineering threat delivered via corporate SMS text channels asking recipients to verify their bank logins on an unverified link is classified as:
A. Vishing Attempt
B. Pharming Scam
C. Smishing (SMS Phishing)
D. Whaling Attack
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Smishing utilizes cellular text messaging platforms to execute deceptive phishing plays, dropping compromised links into user notification boxes.
This question belongs to: Computer Cyber Security
Question #95
What form of malicious software masquerades as a legitimate spreadsheet processor or media utility, tricks users into downloading it, and then drops spyware onto the system?
A. Ransomware Core
B. Rootkit Module
C. Trojan Horse
D. Computer Worm
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Trojan horses use deceptive packaging to mimic safe software utilities, tricking victims into initiating code that compromises their own security perimeters.
This question belongs to: Computer Cyber Security
Question #96
Which firewall asset operates explicitly at Layer 7 of the OSI model, proxying web requests to filter input values and block application attacks?
A. Stateful Inspection Monitor
B. Application Layer Firewall
C. Packet Filtering Gateway
D. Circuit Level Gateway
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Application firewalls filter commands at Layer 7, inspecting protocol payloads to protect web servers from exploitation.
This question belongs to: Computer Cyber Security
Question #97
What type of attack involves a threat actor tracking, altering, or intercepting data packets moving between a user's mobile device and a web server without either party knowing?
A. Man-in-the-Middle (MitM) Attack
B. Distributed Denial Squeeze
C. Brute Force Guessing
D. SQL Injection Exploit
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
MitM exploits intercept communication links between separate nodes, enabling attackers to spy on, log, or manipulate data traffic.
This question belongs to: Computer Cyber Security
Question #98
What type of hacker is officially employed by companies to run authorized penetration tests, identifying security bugs so they can be patched before a breach occurs?
A. White Hat Hacker
B. Grey Hat Hacker
C. Script Kiddie
D. Black Hat Hacker
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
White hat hackers act as ethical safety professionals, using defensive and authorized offensive technical tools to improve organizational security controls.
This question belongs to: Computer Cyber Security
Question #99
Which administrative policy mitigates information leaks by requiring employees to lock physical records away and clear sensitive documents from desks when they leave their workspace?
A. Zero Trust Framework
B. Clean Desk Policy
C. Principle of Least Privilege
D. Stateful Inspection Policy
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Clean desk controls restrict exposure pathways for data assets by requiring physical document protection and monitor locks when desks are unattended.
This question belongs to: Computer Cyber Security
Question #100
An attacker uses a password cracker script to automate character guesses across an executive's profile login panel to find the correct password. This is a/an:
A. Phishing Setup
B. Eavesdropping Exploit
C. Brute Force Attack
D. SQL Injection
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Brute force attacks run systematic guessing scripts to test character permutations until finding a combination that unlocks the targeted account.
This question belongs to: Computer Cyber Security

More Computer Topics

Computer Abbreviations MCQs
Computer Fundamentals MCQs
Computer Hardware MCQs
Computer Networking MCQs
Computer Software MCQs
CPU (Central Processing Unit) MCQs
Database Management System (DBMS) MCQs
Internet and Web Technologies MCQs
Memory and Storage Devices MCQs
Microsoft Office MCQs
Operating Systems MCQs
Programming Languages MCQs
Today's Top Topics
Cyber Security 269 Database Management System (DBMS) 278 Computer Abbreviations 369 Computer Fundamentals 326 Computer Software 347
Explore Subjects
Accountancy and Statistics 3179 Economy GK 2220 English 15164 Computer 5279 Current Affairs 575
Practice Mix
Which of the following is an indirect tax in India?
The valve between the left atrium and left ventricle is the:
A person faces north. He turns 45° left, then 90° right, then 45° left. Which direction is he facing?
Under the Income Tax Act, the 'TDS' on the sale of an immovable property (other than agricultural land) by a resident is governed by which section, and what is the rate?
In 'Piecemeal Distribution' during dissolution, the first priority for payment of outside liabilities is: