Cyber Security MCQs

Computer

Cyber Security MCQs

Practice Cyber Security MCQs covering viruses, malware, phishing, hacking, firewall, antivirus and cybersecurity concepts with answers and explanations.

269
Total Questions

Practice Questions

Page 5 of 14
Question #81
Which type of antivirus detection strategy analyzes an unverified program's instruction codes for malicious traits, helping it flag new threats even if the file hash is missing from standard databases?
A. Heuristic Analysis / Behavioral Monitoring
B. Static Signature Masking
C. Cryptographic Indexing
D. Database Static Lookup
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Heuristic analysis checks software patterns and rules of behavior to detect unknown zero-day malware variants that lack established signature profiles.
This question belongs to: Computer Cyber Security
Question #82
What form of malicious exploit attempts to guess an operator's password by using automated script loops that cycle through millions of characters or dictionary strings systematically?
A. Phishing Setup
B. SQL Injection Exploit
C. Brute Force Attack
D. Packet Sniffing Exploit
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Brute force attacks run automated character guessing scripts to test password permutations until finding a combination that unlocks the targeted account.
This question belongs to: Computer Cyber Security
Question #83
An IT security approach that removes implicit trust from within a network boundary, requiring continuous credential checking and session verification for every user, device, and connection is:
A. Least Privilege Access
B. Defense in Depth
C. Stateful Inspection Framework
D. Zero Trust Architecture
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Zero Trust eliminates old default trust perimeters, enforcing strict continuous verification parameters for all connection assets regardless of network location.
This question belongs to: Computer Cyber Security
Question #84
What form of software flaw allows a threat actor to trigger an application error by packing more data into a memory allocation sector than it can hold, overwriting processing tracks?
A. SQL Injection
B. Cross-Site Scripting
C. Zero-Day Exploit
D. Buffer Overflow
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Buffer overflows occur when input variables exceed memory segment boundaries, allowing malicious payloads to alter memory instructions and execute arbitrary commands.
This question belongs to: Computer Cyber Security
Question #85
Which cybersecurity framework requires users to provide two or more distinct verification indicators—such as a password mixed with an instantaneous biometric facial scan—to unlock an account?
A. Data Encryption Standard (DES)
B. Access Control Listing (ACL)
C. Multi-Factor Authentication (MFA)
D. Single Sign-On (SSO)
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
MFA strengthens identity management by requiring confirmation from multiple independent categories of authentication factors.
This question belongs to: Computer Cyber Security
Question #86
A piece of software code that remains hidden and completely inactive inside a corporate server until an executive's account deletion triggers its destructive routine is a:
A. Logic Bomb
B. Macro Virus
C. Rootkit Module
D. Computer Worm
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Logic bombs are snippets of malicious code hidden within legitimate software programmed to activate only when specific conditions are met.
This question belongs to: Computer Cyber Security
Question #87
What form of network security exploit uses a fake wireless router with the exact same SSID label as a corporate office network to trick workers into connecting so the attacker can log their data traffic?
A. Brute Force Cracking
B. DDoS Flood
C. SQL Injection Squeeze
D. Evil Twin Attack
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
An Evil Twin attack clones a legitimate Wi-Fi access point configuration to trick users into connecting, allowing the attacker to monitor network traffic.
This question belongs to: Computer Cyber Security
Question #88
Which principle limits user account privileges and configuration rights to the absolute minimum required to complete designated corporate operations, reducing the blast radius of a compromised account?
A. Stateful Inspection Mapping
B. Defense in Depth
C. Principle of Least Privilege (PoLP)
D. Zero Trust Tracking
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
The Principle of Least Privilege helps contain security breaches by ensuring users only have access to systems and files necessary for their specific role.
This question belongs to: Computer Cyber Security
Question #89
What form of social engineering trick uses a physical item—such as scattering malware-infected USB flash drives around an office elevator—to compromise a network via employee curiosity?
A. Baiting
B. Whaling Scam
C. Pharming Attack
D. Smishing Attempt
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Baiting leverages curiosity or greed by using physical media tokens to trick victims into executing malicious payloads on their systems.
This question belongs to: Computer Cyber Security
Question #90
What type of software vulnerability occurs when untrusted user code commands are output directly into another user’s browser view, enabling script injection exploits?
A. Cross-Site Scripting (XSS)
B. Buffer Overflow
C. SQL Injection
D. Zero-Day Exploit
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
XSS allows threat actors to execute malicious client-side scripts inside other users' browser views by compromising vulnerable web outputs.
This question belongs to: Computer Cyber Security
Question #91
Which technical utility tool acts as an encrypted network corridor, wrapping public internet traffic in a cryptographic layer to hide data from eavesdroppers?
A. Proxy Gateway Server
B. Virtual Private Network (VPN)
C. Intrusion Detection Module
D. Firewall Layer
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
VPNs establish encrypted tunnels over public networks, shielding active data traffic from interception or monitoring.
This question belongs to: Computer Cyber Security
Question #92
What term describes a newly discovered software vulnerability that is exploited by threat actors before the software creator has created or released a security patch?
A. Logic Bypass flaw
B. Backdoor Entry
C. Zero-Day Vulnerability
D. Buffer Overflow
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Zero-day vulnerabilities represent newly discovered software flaws that lack patch remediation, exposing users to exploitation risks.
This question belongs to: Computer Cyber Security
Question #93
Which defensive infrastructure component actively monitors network traffic logs, dynamically blocking malicious source IP addresses to protect network availability?
A. Intrusion Prevention System (IPS)
B. File Encryption Engine
C. Data Sanitization Tool
D. Proxy Server Gateway
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
An IPS actively analyzes data packet streams, automatically updating security controls or dropping malicious traffic to protect target networks.
This question belongs to: Computer Cyber Security
Question #94
A type of targeted social engineering threat delivered via corporate SMS text channels asking recipients to verify their bank logins on an unverified link is classified as:
A. Whaling Attack
B. Vishing Attempt
C. Smishing (SMS Phishing)
D. Pharming Scam
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Smishing utilizes cellular text messaging platforms to execute deceptive phishing plays, dropping compromised links into user notification boxes.
This question belongs to: Computer Cyber Security
Question #95
What form of malicious software masquerades as a legitimate spreadsheet processor or media utility, tricks users into downloading it, and then drops spyware onto the system?
A. Trojan Horse
B. Rootkit Module
C. Ransomware Core
D. Computer Worm
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Trojan horses use deceptive packaging to mimic safe software utilities, tricking victims into initiating code that compromises their own security perimeters.
This question belongs to: Computer Cyber Security
Question #96
Which firewall asset operates explicitly at Layer 7 of the OSI model, proxying web requests to filter input values and block application attacks?
A. Packet Filtering Gateway
B. Application Layer Firewall
C. Stateful Inspection Monitor
D. Circuit Level Gateway
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Application firewalls filter commands at Layer 7, inspecting protocol payloads to protect web servers from exploitation.
This question belongs to: Computer Cyber Security
Question #97
What type of attack involves a threat actor tracking, altering, or intercepting data packets moving between a user's mobile device and a web server without either party knowing?
A. Brute Force Guessing
B. SQL Injection Exploit
C. Man-in-the-Middle (MitM) Attack
D. Distributed Denial Squeeze
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
MitM exploits intercept communication links between separate nodes, enabling attackers to spy on, log, or manipulate data traffic.
This question belongs to: Computer Cyber Security
Question #98
What type of hacker is officially employed by companies to run authorized penetration tests, identifying security bugs so they can be patched before a breach occurs?
A. White Hat Hacker
B. Script Kiddie
C. Black Hat Hacker
D. Grey Hat Hacker
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
White hat hackers act as ethical safety professionals, using defensive and authorized offensive technical tools to improve organizational security controls.
This question belongs to: Computer Cyber Security
Question #99
Which administrative policy mitigates information leaks by requiring employees to lock physical records away and clear sensitive documents from desks when they leave their workspace?
A. Stateful Inspection Policy
B. Zero Trust Framework
C. Clean Desk Policy
D. Principle of Least Privilege
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Clean desk controls restrict exposure pathways for data assets by requiring physical document protection and monitor locks when desks are unattended.
This question belongs to: Computer Cyber Security
Question #100
An attacker uses a password cracker script to automate character guesses across an executive's profile login panel to find the correct password. This is a/an:
A. Eavesdropping Exploit
B. SQL Injection
C. Phishing Setup
D. Brute Force Attack
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Brute force attacks run systematic guessing scripts to test character permutations until finding a combination that unlocks the targeted account.
This question belongs to: Computer Cyber Security

More Computer Topics

Computer Abbreviations MCQs
Computer Fundamentals MCQs
Computer Hardware MCQs
Computer Networking MCQs
Computer Software MCQs
CPU (Central Processing Unit) MCQs
Database Management System (DBMS) MCQs
Internet and Web Technologies MCQs
Memory and Storage Devices MCQs
Microsoft Office MCQs
Operating Systems MCQs
Programming Languages MCQs
Today's Top Topics
Computer Abbreviations 369 Computer Hardware 430 Computer Networking 325 Programming Languages 0 Database Management System (DBMS) 278
Explore Subjects
Reasoning 2064 Geography GK 6121 Economy GK 2220 Accountancy and Statistics 3179 Science 4430
Practice Mix
Find the odd one out: 8, 27, 64, 100, 125, 216, 343
___ tea is grown in Darjeeling.
What will come in place of the question mark (?) in the following letter series? WY, AC, EG, IK, ?
______ you come with me depends on your mood.
Which of the following is a feature of monopolistic competition?