Cyber Security MCQs

Computer

Cyber Security MCQs

Practice Cyber Security MCQs covering viruses, malware, phishing, hacking, firewall, antivirus and cybersecurity concepts with answers and explanations.

269
Total Questions

Practice Questions

Page 6 of 14
Question #101
What type of attack focuses on saturating a web resource's bandwidth or computing capacity by flooding it with data from thousands of hijacked botnet devices?
A. Cross-Site Execution Loop
B. Distributed Denial of Service (DDoS) Attack
C. Phishing Campaign
D. SQL Injection Matrix
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
DDoS attacks deploy distributed botnet nodes to overwhelm target infrastructure bandwidth, causing services to crash or go offline.
This question belongs to: Computer Cyber Security
Question #102
Which software utility evaluates file directories by calculating SHA-256 hashes, alerting administrators if any core application files have been modified or corrupted?
A. Sandbox Controller
B. File Compression Engine
C. Firewall Packet Filter
D. Integrity Checker
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Integrity checkers calculate cryptographic hashes of files, comparing them to known vendor benchmarks to verify the file hasn't been modified.
This question belongs to: Computer Cyber Security
Question #103
What form of malware records an operator's physical keyboard strokes, capturing credentials and credit card fields before they hit web browser encryption layers?
A. Ransomware Core
B. Keylogger / Spyware
C. Rootkit Framework
D. Logic Bomb Tracker
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Keyloggers are specialized spyware tools that log physical keyboard strokes, capturing sensitive authentication metrics before they are encrypted.
This question belongs to: Computer Cyber Security
Question #104
Which social engineering scam method involves an attacker building a detailed false persona—like a corporate security auditor—to trick targets into sharing password configurations?
A. Pretexting
B. Baiting
C. Tailgating
D. Pharming
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Pretexting relies on an invented background scenario to gain a victim's trust, manipulating them into disclosing sensitive data or bypassing security policies.
This question belongs to: Computer Cyber Security
Question #105
A decoy server environment containing realistic fake database logs deployed alongside real company servers to trick hackers and track their attack techniques is a/an:
A. Sandboxing Unit
B. Honeypot
C. Encryption Vault
D. Firewall Layer
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Honeypots are decoy nodes configured to attract, log, and study security attackers while isolating them from the rest of the enterprise network.
This question belongs to: Computer Cyber Security
Question #106
Which process converts plain text data strings into unreadable ciphertext formats using mathematical cryptographic keys, securing files against unauthorized viewing?
A. Encryption
B. Sandboxing Matrix
C. Hashing Allocation
D. De-duplication
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Encryption alters readable data into ciphertext using cryptographic mathematical algorithms, requiring specialized keys to reverse and decode.
This question belongs to: Computer Cyber Security
Question #107
What type of malware is a computer worm classified as, given its unique capability to auto-propagate across network loops without needing human host file deployment?
A. Trojan Horse Module
B. Macro Virus Exploit
C. Self-Replicating Network Malware
D. Keylogger Interface
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Worms are self-contained, self-replicating malware strains that exploit network vulnerabilities to spread autonomously among connected devices.
This question belongs to: Computer Cyber Security
Question #108
What type of script vulnerability targets database processing fields by passing unvalidated parameters directly into an application’s dynamic query logic?
A. SQL Injection
B. Cross-Site Scripting
C. Denial of Service Loop
D. Buffer Overflow Exploit
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
SQL injection executes arbitrary database commands by inserting malicious SQL code statements into unvalidated input fields.
This question belongs to: Computer Cyber Security
Question #109
Which antivirus analysis protocol checks for zero-day malware variants by scanning code layouts for suspicious instructions, rather than relying on established file hashes?
A. Heuristic / Behavioral Analysis
B. Dynamic Cryptographic Hashing
C. Static Signature Identification
D. Database Static Lookup
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Heuristic analysis checks software patterns and rules of behavior to detect unknown zero-day malware variants that lack established signature profiles.
This question belongs to: Computer Cyber Security
Question #110
What form of malicious exploit alters data packet source address labels to match a trusted network interface, spoofing internal network defenses?
A. SQL Tampering
B. IP Spoofing
C. Cross-Site Execution
D. Man-in-the-Middle
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
IP spoofing masks packet origins by replacing real source headers with fake addresses to bypass firewall restrictions or gain unauthorized network access.
This question belongs to: Computer Cyber Security
Question #111
Which security framework eliminates default perimeter trust settings, validating user identities and credentials continuously at every access step?
A. Zero Trust Architecture
B. Stateful Network Control
C. Least Privilege Access
D. Defense in Depth
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
Zero Trust eliminates old default trust perimeters, enforcing strict continuous verification parameters for all connection assets regardless of network location.
This question belongs to: Computer Cyber Security
Question #112
What is the technical security term for an intentional, hidden entry point or software routine left behind by a developer to easily bypass system authentication parameters?
A. Trojan Module
B. Backdoor
C. Zero-Day Route
D. Logic Loop
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
A backdoor bypasses standard authentication protocols, letting insiders or threat actors retain persistent access to targeted operating platforms.
This question belongs to: Computer Cyber Security
Question #113
Which specific malware variety isolates data files by encrypting directories with high-grade algorithms, demanding cryptocurrency payments to unlock access?
A. Rootkit Module
B. Computer Worm
C. Ransomware
D. Adware Module
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Ransomware targets data directories via cryptographic algorithms, locking file access until a ransom payment is made.
This question belongs to: Computer Cyber Security
Question #114
A type of targeted phishing scam designed to look like an urgent confirmation message from an executive's direct supervisor is classified as:
A. Pharming redirection
B. Spear Phishing
C. Vishing connection
D. Bulk Spamming
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Spear phishing targets specific groups or individuals within an enterprise, using familiar internal context to improve the likelihood of deception.
This question belongs to: Computer Cyber Security
Question #115
Which firewall asset tracks the ongoing state of active data interactions, filtering out incoming data packets that do not correspond to an established, verified session?
A. Stateless Packet Filter
B. Stateful Inspection Firewall
C. Application Layer Proxy
D. Circuit Level Gateway
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Stateful firewalls maintain connection tables tracking the state of active network interactions, blocking unexpected or unsolicited inbound traffic.
This question belongs to: Computer Cyber Security
Question #116
What form of malicious script runs automatically whenever an infected Microsoft Office document or database sheet is loaded, exploiting built-in macro tools?
A. Asynchronous Worm
B. Network Packet Sniffer
C. Macro Virus
D. Boot Sector Threat
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option C

Explanation:
Macro viruses exploit programming languages embedded inside productivity suite applications, running automated scripts when files are opened.
This question belongs to: Computer Cyber Security
Question #117
Which security measure bundles diverse defenses—such as network firewalls, end-user security awareness training, patch cycles, and MFA—to eliminate single points of failure?
A. Least Privilege Access
B. Defense in Depth
C. Zero Trust Model
D. Stateful Boundary Control
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option B

Explanation:
Defense in Depth combines technical, physical, and administrative security layers to build redundant protection boundaries and avoid single points of failure.
This question belongs to: Computer Cyber Security
Question #118
What form of malicious code hides itself inside the deep administrative or kernel layer of an operating system to hide active system tracking files from malware sweeps?
A. Spyware Script
B. Adware Module
C. Macro Virus
D. Rootkit
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Rootkits modify system kernel code to hide processes, files, and network links, rendering themselves invisible to standard antivirus utilities.
This question belongs to: Computer Cyber Security
Question #119
Which key concept limits user accounts and operational profiles to only the access parameters required to perform their specific job duties?
A. Principle of Least Privilege (PoLP)
B. Stateful Inspection Mapping
C. Defense in Depth
D. Zero Trust Validation
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option A

Explanation:
The Principle of Least Privilege helps contain security breaches by ensuring users only have access to systems and files necessary for their specific role.
This question belongs to: Computer Cyber Security
Question #120
What form of security exploit occurs when an application inputs more variable data into a memory block than it can hold, overwriting nearby execution instructions with malicious payloads?
A. Cross-Site Scripting
B. Zero-Day Exploit
C. SQL Injection
D. Buffer Overflow
Discuss
Get Complete Subject PDF for Computer

Correct Answer: Option D

Explanation:
Buffer overflows occur when input variables exceed memory segment boundaries, allowing malicious payloads to alter memory instructions and execute arbitrary commands.
This question belongs to: Computer Cyber Security

More Computer Topics

Computer Abbreviations MCQs
Computer Fundamentals MCQs
Computer Hardware MCQs
Computer Networking MCQs
Computer Software MCQs
CPU (Central Processing Unit) MCQs
Database Management System (DBMS) MCQs
Internet and Web Technologies MCQs
Memory and Storage Devices MCQs
Microsoft Office MCQs
Operating Systems MCQs
Programming Languages MCQs
Today's Top Topics
Computer Software 347 CPU (Central Processing Unit) 327 Operating Systems 510 Database Management System (DBMS) 278 Memory and Storage Devices 438
Explore Subjects
Computer 5279 History GK 3374 Science 4430 Economy GK 2220 Maths 5575
Practice Mix
Who discovered the existence of the atomic nucleus through the famous Gold Foil Experiment?
Excluding institutional stops, a transit bus routes at 60 km/h and including stops it runs at 50 km/h. How many minutes does the bus stop per hour?
Select the most appropriate meaning of the idiom: 'Cloud cuckoo land'.
The 'Mumbai' is located on the:
Laspeyres price index uses weights of: