Cyber Security MCQs

Computer

Cyber Security MCQs

Practice Cyber Security MCQs covering viruses, malware, phishing, hacking, firewall, antivirus and cybersecurity concepts with answers and explanations.

269
Total Questions

Practice Questions

Page 6 of 14
Question #101
What type of attack focuses on saturating a web resource's bandwidth or computing capacity by flooding it with data from thousands of hijacked botnet devices?
A. SQL Injection Matrix
B. Phishing Campaign
C. Distributed Denial of Service (DDoS) Attack
D. Cross-Site Execution Loop

Correct Answer: Option C


Explanation:
DDoS attacks deploy distributed botnet nodes to overwhelm target infrastructure bandwidth, causing services to crash or go offline.

This question belongs to: Computer Cyber Security
Question #102
Which software utility evaluates file directories by calculating SHA-256 hashes, alerting administrators if any core application files have been modified or corrupted?
A. File Compression Engine
B. Sandbox Controller
C. Firewall Packet Filter
D. Integrity Checker

Correct Answer: Option D


Explanation:
Integrity checkers calculate cryptographic hashes of files, comparing them to known vendor benchmarks to verify the file hasn't been modified.

This question belongs to: Computer Cyber Security
Question #103
What form of malware records an operator's physical keyboard strokes, capturing credentials and credit card fields before they hit web browser encryption layers?
A. Rootkit Framework
B. Ransomware Core
C. Keylogger / Spyware
D. Logic Bomb Tracker

Correct Answer: Option C


Explanation:
Keyloggers are specialized spyware tools that log physical keyboard strokes, capturing sensitive authentication metrics before they are encrypted.

This question belongs to: Computer Cyber Security
Question #104
Which social engineering scam method involves an attacker building a detailed false persona—like a corporate security auditor—to trick targets into sharing password configurations?
A. Baiting
B. Pharming
C. Tailgating
D. Pretexting

Correct Answer: Option D


Explanation:
Pretexting relies on an invented background scenario to gain a victim's trust, manipulating them into disclosing sensitive data or bypassing security policies.

This question belongs to: Computer Cyber Security
Question #105
A decoy server environment containing realistic fake database logs deployed alongside real company servers to trick hackers and track their attack techniques is a/an:
A. Encryption Vault
B. Honeypot
C. Firewall Layer
D. Sandboxing Unit

Correct Answer: Option B


Explanation:
Honeypots are decoy nodes configured to attract, log, and study security attackers while isolating them from the rest of the enterprise network.

This question belongs to: Computer Cyber Security
Question #106
Which process converts plain text data strings into unreadable ciphertext formats using mathematical cryptographic keys, securing files against unauthorized viewing?
A. Encryption
B. De-duplication
C. Hashing Allocation
D. Sandboxing Matrix

Correct Answer: Option A


Explanation:
Encryption alters readable data into ciphertext using cryptographic mathematical algorithms, requiring specialized keys to reverse and decode.

This question belongs to: Computer Cyber Security
Question #107
What type of malware is a computer worm classified as, given its unique capability to auto-propagate across network loops without needing human host file deployment?
A. Self-Replicating Network Malware
B. Keylogger Interface
C. Trojan Horse Module
D. Macro Virus Exploit

Correct Answer: Option A


Explanation:
Worms are self-contained, self-replicating malware strains that exploit network vulnerabilities to spread autonomously among connected devices.

This question belongs to: Computer Cyber Security
Question #108
What type of script vulnerability targets database processing fields by passing unvalidated parameters directly into an application’s dynamic query logic?
A. Buffer Overflow Exploit
B. Denial of Service Loop
C. SQL Injection
D. Cross-Site Scripting

Correct Answer: Option C


Explanation:
SQL injection executes arbitrary database commands by inserting malicious SQL code statements into unvalidated input fields.

This question belongs to: Computer Cyber Security
Question #109
Which antivirus analysis protocol checks for zero-day malware variants by scanning code layouts for suspicious instructions, rather than relying on established file hashes?
A. Dynamic Cryptographic Hashing
B. Static Signature Identification
C. Database Static Lookup
D. Heuristic / Behavioral Analysis

Correct Answer: Option D


Explanation:
Heuristic analysis checks software patterns and rules of behavior to detect unknown zero-day malware variants that lack established signature profiles.

This question belongs to: Computer Cyber Security
Question #110
What form of malicious exploit alters data packet source address labels to match a trusted network interface, spoofing internal network defenses?
A. Man-in-the-Middle
B. SQL Tampering
C. Cross-Site Execution
D. IP Spoofing

Correct Answer: Option D


Explanation:
IP spoofing masks packet origins by replacing real source headers with fake addresses to bypass firewall restrictions or gain unauthorized network access.

This question belongs to: Computer Cyber Security
Question #111
Which security framework eliminates default perimeter trust settings, validating user identities and credentials continuously at every access step?
A. Zero Trust Architecture
B. Defense in Depth
C. Least Privilege Access
D. Stateful Network Control

Correct Answer: Option A


Explanation:
Zero Trust eliminates old default trust perimeters, enforcing strict continuous verification parameters for all connection assets regardless of network location.

This question belongs to: Computer Cyber Security
Question #112
What is the technical security term for an intentional, hidden entry point or software routine left behind by a developer to easily bypass system authentication parameters?
A. Logic Loop
B. Trojan Module
C. Zero-Day Route
D. Backdoor

Correct Answer: Option D


Explanation:
A backdoor bypasses standard authentication protocols, letting insiders or threat actors retain persistent access to targeted operating platforms.

This question belongs to: Computer Cyber Security
Question #113
Which specific malware variety isolates data files by encrypting directories with high-grade algorithms, demanding cryptocurrency payments to unlock access?
A. Ransomware
B. Rootkit Module
C. Computer Worm
D. Adware Module

Correct Answer: Option A


Explanation:
Ransomware targets data directories via cryptographic algorithms, locking file access until a ransom payment is made.

This question belongs to: Computer Cyber Security
Question #114
A type of targeted phishing scam designed to look like an urgent confirmation message from an executive's direct supervisor is classified as:
A. Vishing connection
B. Pharming redirection
C. Spear Phishing
D. Bulk Spamming

Correct Answer: Option C


Explanation:
Spear phishing targets specific groups or individuals within an enterprise, using familiar internal context to improve the likelihood of deception.

This question belongs to: Computer Cyber Security
Question #115
Which firewall asset tracks the ongoing state of active data interactions, filtering out incoming data packets that do not correspond to an established, verified session?
A. Application Layer Proxy
B. Circuit Level Gateway
C. Stateless Packet Filter
D. Stateful Inspection Firewall

Correct Answer: Option D


Explanation:
Stateful firewalls maintain connection tables tracking the state of active network interactions, blocking unexpected or unsolicited inbound traffic.

This question belongs to: Computer Cyber Security
Question #116
What form of malicious script runs automatically whenever an infected Microsoft Office document or database sheet is loaded, exploiting built-in macro tools?
A. Boot Sector Threat
B. Macro Virus
C. Network Packet Sniffer
D. Asynchronous Worm

Correct Answer: Option B


Explanation:
Macro viruses exploit programming languages embedded inside productivity suite applications, running automated scripts when files are opened.

This question belongs to: Computer Cyber Security
Question #117
Which security measure bundles diverse defenses—such as network firewalls, end-user security awareness training, patch cycles, and MFA—to eliminate single points of failure?
A. Stateful Boundary Control
B. Zero Trust Model
C. Defense in Depth
D. Least Privilege Access

Correct Answer: Option C


Explanation:
Defense in Depth combines technical, physical, and administrative security layers to build redundant protection boundaries and avoid single points of failure.

This question belongs to: Computer Cyber Security
Question #118
What form of malicious code hides itself inside the deep administrative or kernel layer of an operating system to hide active system tracking files from malware sweeps?
A. Macro Virus
B. Adware Module
C. Rootkit
D. Spyware Script

Correct Answer: Option C


Explanation:
Rootkits modify system kernel code to hide processes, files, and network links, rendering themselves invisible to standard antivirus utilities.

This question belongs to: Computer Cyber Security
Question #119
Which key concept limits user accounts and operational profiles to only the access parameters required to perform their specific job duties?
A. Principle of Least Privilege (PoLP)
B. Stateful Inspection Mapping
C. Defense in Depth
D. Zero Trust Validation

Correct Answer: Option A


Explanation:
The Principle of Least Privilege helps contain security breaches by ensuring users only have access to systems and files necessary for their specific role.

This question belongs to: Computer Cyber Security
Question #120
What form of security exploit occurs when an application inputs more variable data into a memory block than it can hold, overwriting nearby execution instructions with malicious payloads?
A. SQL Injection
B. Buffer Overflow
C. Cross-Site Scripting
D. Zero-Day Exploit

Correct Answer: Option B


Explanation:
Buffer overflows occur when input variables exceed memory segment boundaries, allowing malicious payloads to alter memory instructions and execute arbitrary commands.

This question belongs to: Computer Cyber Security