Cyber Security MCQ (Multiple Choice Questions) With Answers, Cyber Security Online Quiz

1 .

What is Cyber Security?

A)

Cyber Security provides security against malware

B)

Cyber Security protects a system from cyber attacks

C)

Cyber Security provides security against cyber-terrorists

D)

All of the Above

Correct Answer : Option (D) : All of the Above

Explanation : Cyber Security is the practice of protecting critical systems and sensitive information from digital attacks. Also known as information technology (IT) security, cybersecurity measures are designed to combat threats against networked systems and applications, whether those threats originate from inside or outside of an organization.

Source : F T L

2 .

Who is the father of Computer Security or Cyber Security?

A)

Robert

B)

Charles

C)

Bob Thomas

D)

August Kerckhoffs

Correct Answer : Option (D) : August Kerckhoffs

Explanation : August Kerckhoffs, a linguist and German professor at HEC, wrote an essay in the Journal of Military Science in February 1883. Kerckhoff had unwittingly established the foundations for contemporary encryption, earning him the title of “Father of Computer Security.”

3 .

Who is the founder of Cyber Security?

A)

Vint Cerf

B)

Bob Thomas

C)

Marcian Hoff

D)

Tim Berners-Lee

Correct Answer : Option (B) : Bob Thomas

Explanation : The true birth of Cyber Security occurred in the 1970s. This began with a project called The Advanced Research Projects Agency Network (ARPANET). This was the connectivity network developed prior to the internet itself. A man named Bob Thomas determined it was possible for a computer program to move over a network.

4 .

In which of the following, a person is constantly followed/chased by another person or group of several peoples?

A)

Stalking

B)

Bulling

C)

Phishing

D)

Identity theft

Correct Answer : Option (A) : Stalking

Explanation :

In general, Stalking refers to continuous surveillance on the target (or person) done by a group of people or by the individual person.

Cyber Stalking is a type of cybercrime in which a person (or victim) is being followed continuously by another person or group of several people through electronic means to harass the victim. We can also say that the primary goal of Stalking is to observe or monitor each victim's actions to get the essential information that can be further used for threatening, harassing, etc.

5 .

Which of the following is defined as an attempt to steal, spy, damage or destroy computer systems, networks, or their associated information?

A)

Cryptography

B)

Digital hacking

C)

Cyber attack

D)

Computer security

Correct Answer : Option (C) : Cyber attack

Explanation : An effort to steal, spy on, damage, or destroy diverse components of cyberspace, such as computer systems, related peripherals, network systems, and information, is known as a cyber attack.

6 .

The full form of Malware is ______

A)

Multipurpose Software

B)

Malicious Software

C)

Malfunctioned Software

D)

Malfunctioning of Security

Correct Answer : Option (C) : Malicious Software

Explanation : Different types of harmful software and programs that can pose threats to a system, network or anything related to cyberspace are termed as Malware. Examples of some common malware are Virus, Trojans, Ransomware, spyware, worms, rootkits etc.

7 .

In general how many key elements constitute the entire security structure?

A)

3

B)

4

C)

5

D)

6

Correct Answer : Option (B) : 4

Explanation : The 4 key elements that constitute the security are:

* confidentiality
* integrity
* authenticity
* availability

Authenticity is not considered as one of the key elements in some other security models, but the popular CIA Triad eliminates this as authenticity at times comes under confidentiality & availability.

8 .

_______ is the practice and precautions taken to protect valuable information from unauthorised access, recording, disclosure or destruction.

A)

Physical Security

B)

Network Security

C)

Database Security

D)

Information Security

Correct Answer : Option (D) : Information Security

Explanation : Information Security (abbreviated as InfoSec) is a process or set of processes used for protecting valuable information for alteration, destruction, deletion or disclosure by unauthorised users.

9 .

Which one of the following can be considered as the class of computer threats?

A)

Dos Attack

B)

Soliciting

C)

Phishing

D)

None of the Above

Correct Answer : Option (A) : Dos Attack

Explanation : A dos attack refers to the denial of service attack. It is a kind of cyber attack in which one tries to make a machine (or targeted application, website etc.) unavailable for its intended users. It is usually accomplished by disturbing the service temporarily or indefinitely of the target connected to the internet.

10 .

Which of the following is a type of cyber security?

A)

Network Security

B)

Cloud Security

C)

Application Security

D)

All of the Above

Correct Answer : Option (D) : All of the Above

Explanation :

Since technology is improving, the threat and attacks against the technology are also increasing. Hence, to provide security, it is divided into the following types:

Network Security : Protects the internal network from threats.

Cloud Security : Provides security for the data stored on the cloud.

Application Security : Protects data stored in the application software.

11 .

Who deploy Malwares to a system or network?

A)

Criminal organizations, Black hat hackers, software developers, cyber-terrorists

B)

Criminal organizations, White hat hackers, malware developers, cyber-terrorists

C)

Criminal organizations, Black hat hackers, malware developers, cyber-terrorists

D)

Criminal organizations, gray hat hackers, Malware developers, Penetration testers

Correct Answer : Option (C) : Criminal organizations, Black hat hackers, malware developers, cyber-terrorists

Explanation : Criminal-minded organizations, groups and individuals cyber-terrorist groups, Black hat hackers, malware developers etc are those who can deploy malwares to any target system or network in order to deface that system.

12 .

According to the CIA Triad, which of the below-mentioned element is not considered in the triad?

A)

Integrity

B)

Authenticity

C)

Availability

D)

Confidentiality

Correct Answer : Option (B) : Authenticity

Explanation : According to the CIA triad the three components that a security need is the Confidentiality, Integrity, Availability (as in short read as CIA).

13 .

This is the model designed for guiding the policies of Information security within a company, firm or organization. What is "this" referred to here?

A)

Authenticity

B)

CIA Triad

C)

Confidentiality

D)

Non-repudiation

Correct Answer : Option (B) : CIA Triad

Explanation : Various security models were being developed till date. This is by far the most popular and widely used model which focuses on the information’s confidentiality, integrity as well as availability and how these key elements can be preserved for a better security in any organization.

14 .

From the options below, which of them is not a threat to information security?

A)

Disaster

B)

Eavesdropping

C)

Information leakage

D)

Unchanged default password

Correct Answer : Option (D) : Unchanged default password

Explanation : Disaster, eavesdropping and information leakage come under information security threats whereas not changing the default password of any system, hardware or any software comes under the category of vulnerabilities that the user may pose to its system.

15 .

Which of the following is considered as the unsolicited commercial email?

A)

Spam

B)

Virus

C)

Malware

D)

All of the Above

Correct Answer : Option (A) : Spam

Explanation : It is a type of unsolicited email which is generally sent in bulk to an indiscriminate recipient list for commercial purpose. Generally, these types of mail are considered unwanted because most users don't want these emails at all.

16 .

What are the features of cyber security?

A)

Compliance

B)

Threat Prevention

C)

Defense against internal threats

D)

All of the Above

Correct Answer : Option (D) : All of the Above

Explanation :

Creating a program that meets the requirements and rules of the users.

Defense against internal threats : Should provide security against internal exploitation.

Threat Prevention : Should be capable of detecting the threat and preventing them.

The Main Essential Features of Cybersecurity are as follows :

* Coverage for external threats

* Defense against internal threats

* Regulatory compliance for security

* Cloud-based security services

* Threat detection, prevention, and response

* Consolidated solutions

* Proper security analytics

17 .

Which of the following is an objective of network security?

A)

Confidentiality

B)

Integrity

C)

Availability

D)

All of the Above

Correct Answer : Option (D) : All of the Above

Explanation :

The objectives of network security are Confidentiality, Integrity, and Availability.

Confidentiality : The function of confidentiality is to keep sensitive company information safe from unwanted access. The confidentiality component of network security ensures that data is only accessible to those who are authorized to see it.

Integrity : This goal entails ensuring and preserving data accuracy and consistency. The purpose of integrity is to ensure that data is accurate and not tampered with by unauthorized individuals.

Availability : The purpose of availability in Network Security is to ensure that data, network resources, and services are always available to legitimate users, whenever they need them.

18 .

_______ is a code injecting method used for attacking the database of a system / website.

A)

XML Injection

B)

HTML injection

C)

SQL Injection

D)

Malicious code injection

Correct Answer : Option (C) : SQL Injection

Explanation : SQLi (Structured Query Language Injection) is a popular attack where SQL code is targeted or injected; for breaking the web application having SQL vulnerabilities. This allows the attacker to run malicious code and take access to the database of that server.

19 .

XSS is abbreviated as _______

A)

X Site Scripting

B)

Cross Site Scripting

C)

Cross Site Security

D)

Extreme Secure Scripting

Correct Answer : Option (B) : Cross Site Scripting

Explanation : Cross Site Scripting is another popular web application attack type that can hamper the reputation of any site.

20 .

CIA triad is also known as _____

A)

AIC (Availability, Integrity, Confidentiality)

B)

AIC (Authenticity, Integrity, Confidentiality)

C)

AIN (Availability, Integrity, Non-repudiation)

D)

NIC (Non-repudiation, Integrity, Confidentiality)

Correct Answer : Option (A) : AIC (Availability, Integrity, Confidentiality)

Explanation : This approach of naming it CIA Triad as AIC (Availability, Integrity, Confidentiality) Triad because people get confused about this acronym with the abbreviation and the secret agency name Central Intelligence Agency.

21 .

From the options below, which of them is not a vulnerability to information security?

A)

flood

B)

unchanged default password

C)

latest patches and updates not done

D)

without deleting data, disposal of storage media

Correct Answer : Option (A) : flood

Explanation : Flood comes under natural disaster which is a threat to any information and not acts as a vulnerability to any system.

22 .

____ platforms are used for safety and protection of information in the cloud.

A)

AWS

B)

One Drive

C)

Cloud security protocols

D)

Cloud workload protection platforms

Correct Answer : Option (D) : Cloud workload protection platforms

Explanation : Nowadays data centres support workloads from different geographic locations across the globe through physical systems, virtual machines, servers, and clouds. Their security can be managed using Cloud workload protection platforms which manage policies regarding security of information irrespective of its location.

23 .

Which of the following usually observe each activity on the internet of the victim, gather all information in the background, and send it to someone else?

A)

Adware

B)

Malware

C)

Spyware

D)

All of the above

Correct Answer : Option (C) : Spyware

Explanation : It is generally defined as the software designed to enter the target's device or computer system, gather all information, observe all user activities, and send this information to a third party. Another important thing about the spyware is that it works in the background sends all information without your permission.

24 .

Which of the following is not a cybercrime?

A)

AES

B)

Malware

C)

Man in the Middle

D)

Denial of Service

Correct Answer : Option (A) : AES

Explanation : Denial of Service, Man in the Middle, and Malware exploit the system causing a threat to security, hence they are considered as cybercrime. AES (Advanced Encryption Standard) provides security by encrypting the data.

25 .

Which of the following is a component of cyber security?

A)

AI

B)

Internet Of Things

C)

Attacks

D)

Database

Correct Answer : Option (B) : Internet Of Things

Explanation : The Internet of Things (IoT) is a network of physical objects embedded with sensors, software, and other technologies to connect and exchange data with other devices and systems through the internet.

26 .

Which of the following is a type of cyber attack?

A)

Phishing

B)

SQL Injections

C)

Password Attack

D)

All of the Above

Correct Answer : Option (D) : All of the Above

Explanation :

Attacks are Phishing, SQL Injections, and Password Attack.

Phishing : The attacker sends a large number of fraudulent emails and gains access to the system.

SQL Injections : The attacker gains access to the protected information by adding malicious code to the SQL server.

Password Attack : Attackers gain access to the passwords unethically and gain access to the confidential data.

27 .

"Cyberspace" was coined by _________

A)

Scott Fahlman

B)

William Gibson

C)

Richard Stallman

D)

Andrew Tannenbaum

Correct Answer : Option (B) : William Gibson

Explanation : William Gibson, an American-Canadian fiction pioneer, and coiner, examined the many streams of technology and invented the word “cyberspace” in 1821. The phrase refers to linked technologies that aid in information exchange, interaction with digital devices, storage and digital entertainment, computer and network security, and other information technology-related matters.

28 .

When there is an excessive amount of data flow, which the system cannot handle, _____ attack takes place.

A)

Data overflow Attack

B)

Database crash attack

C)

Buffer Overflow attack

D)

DoS (Denial of Service) attack

Correct Answer : Option (C) : Buffer Overflow attack

Explanation : The Buffer overflow attack takes place when an excessive amount of data occurs in the buffer, which it cannot handle and lead to data being over-flow into its adjoined storage. This attack can cause a system or application crash and can lead to malicious entry-point.

29 .

When integrity is lacking in a security system, _________ occurs.

A)

Data tampering

B)

Data deletion

C)

Data leakage

D)

Database hacking

Correct Answer : Option (A) : Data tampering

Explanation : The term data tampering is used when integrity is compromised in any security model and checking its integrity later becomes costlier. Example: let suppose you sent $50 to an authorised person and in between a Man in the Middle (MiTM) attack takes place and the value has tampered to $500. This is how integrity is compromised.

30 .

Which of the following information security technology is used for avoiding browser-based hacking?

A)

Anti-malware in browsers

B)

Incognito mode in a browser

C)

Remote browser access

D)

Adware remover in browsers

Correct Answer : Option (C) : Remote browser access

Explanation : Cyber-criminals target browsers for breaching information security. If a user establishes a remote browsing by isolating the browsing session of end user, cyber-criminals will not be able to infect the system along with browser with malware, ultimately reducing the attack surface area.

31 .

The full form of EDR is _____

A)

Early detection and response

B)

Endless Detection and Recovery

C)

Endpoint Detection and recovery

D)

Endpoint Detection and response

Correct Answer : Option (D) : Endpoint Detection and response

Explanation : It is a collective name for tools that monitor networks & endpoints of systems and record all the activities for further reporting, analysis & detection in a central database. Analyzing the reports generated through such EDR tools, loopholes in a system or any internal, as well as external breaching attempts can be detected.

32 .

Lack of access control policy is a ________

A)

Bug

B)

Attack

C)

Threat

D)

Vulnerability

Correct Answer : Option (D) : Vulnerability

Explanation : Access control policies are incorporated to a security system for restricting of unauthorised access to any logical or physical system. Every security compliance program must need this as a fundamental component. Those systems which lack this feature is vulnerable.

33 .

______ is a type of software designed to help the user's computer detect viruses and avoid them.

A)

Adware

B)

Antivirus

C)

Malware

D)

None of the Above

Correct Answer : Option (B) : Antivirus

Explanation : An antivirus is a kind of software that is specially designed to help the user's computer to detect the virus as well as to avoid the harmful effect of them. In some cases where the virus already resides in the user's computer, it can be easily removed by scanning the entire system with antivirus help.

34 .

In which year has hacking become a practical crime and a matter of concern in the field of cyber technology?

A)

1970

B)

1983

C)

1991

D)

1999

Correct Answer : Option (A) : 1970

Explanation : In the case of hackers in the 1970s, hackers and cyber thieves found out how wired technologies operate and how they might be abused to obtain a competitive edge or misuse the technology.

35 .

Which of the following is the hacking approach where cyber-criminals design fake websites or pages for tricking or gaining additional traffic?

A)

Mimicking

B)

Spamming

C)

Pharming

D)

Website-Duplication

Correct Answer : Option (C) : Pharming

Explanation : Pharming is a strategy and approach used by cybercriminals to create phony web pages and sites in order to mislead users into giving over personal information such as login IDs and passwords.

36 .

Which of the following is not a type of peer-to-peer cyber-crime?

A)

MiTM

B)

Credit card details leak in the deep web

C)

Phishing

D)

Injecting Trojans to a target victim

Correct Answer : Option (B) : Credit card details leak in the deep web

Explanation : Peer-to-Peer includes phishing, as well as the distribution of Trojans and worms to individuals. The leakage of a huge number of people’s credit card data on the deep web, on the other hand, is classified as a computer-as-weapon cyber-crime.

37 .

Which of the following do Cyber attackers commonly target for fetching IP address of a target or victim user?

A)

websites

B)

emails

C)

ip tracker

D)

web pages

Correct Answer : Option (A) : websites

Explanation : Enumeration by cyber-attackers is also feasible via websites since attackers target websites in order to obtain the victim’s or target user’s IP address.

38 .

Which of the following is defined as an attempt to harm, damage or cause threat to a system or network?

A)

Threats

B)

Digital crime

C)

System hijacking

D)

Cyber Attack

Correct Answer : Option (D) : Cyber Attack

Explanation : Extortion, identity theft, email hacking, digital surveillance, stealing hardware, mobile hacking, and physical security breaches are all examples of cyber assaults or activities.

39 .

Which of this is an example of physical hacking?

A)

Remote Unauthorised access

B)

SQL Injection on SQL vulnerable site

C)

DDoS (Distributed Denial of Service) attack

D)

Inserting malware loaded USB to a system

Correct Answer : Option (D) : Inserting malware loaded USB to a system

Explanation : If a suspicious gain access to server room or into any confidential area with a malicious pen-drive loaded with malware which will get triggered automatically once inserted to USB port of any employee’s PC; such attacks come under physical hacking, because that person in gaining unauthorized physical access to any room or organization first, then managed to get an employee’s PC also, all done physically – hence breaching physical security.

40 .

Which of these is not a proper method of maintaining confidentiality?

A)

Biometric verification

B)

2-factor authentication

C)

switching off the phone

D)

ID and password based verification

Correct Answer : Option (C) : switching off the phone

Explanation : Switching off the phone in the fear of preserving the confidentiality of data is not a proper solution for data confidentiality. Fingerprint detection, face recognition, password-based authentication, two-step verifications are some of these.

41 .

Which one of the following is a type of antivirus program?

A)

Mcafee

B)

Kaspersky

C)

Quick heal

D)

All of the Above

Correct Answer : Option (D) : All of the Above

Explanation : Antivirus is a kind of software program that helps to detect and remove viruses form the user's computer and provides a safe environment for users to work on. There are several kinds of antivirus software are available in the market, such as Kaspersky, Mcafee, Quick Heal, Norton etc., so the correct answer is D.

42 .

They are nefarious hackers, and their main motive is to gain financial profit by doing cyber crimes. Who are "they" referred to here?

A)

White Hat Hackers

B)

Black Hat hackers

C)

Gray Hat Hackers

D)

All Of The Above

Correct Answer : Option (B) : Black Hat hackers

Explanation : Black Hat hackers, often known as “crackers,” are a sort of cyber crime that gain illegal access to a user’s account or system in order to steal confidential data or introduce malware into the system for personal gain or to harm the company.

43 .

Where did the term "hacker" originate?

A)

MIT

B)

Bellâ€™s Lab

C)

Harvard University

D)

New York University

Correct Answer : Option (A) : MIT

Explanation : The term “hacker” was coined at MIT (Massachusetts Institute of Technology) because individuals and highly competent professionals use computer languages to address various challenges. In this context, labels such as geeks and nerds have been coined.

44 .

Which of the following is an internet scam done by cyber-criminals where the user is convinced digitally to provide confidential information.

A)

DoS attack

B)

MiTM attack

C)

Phishing attack

D)

Website attack

Correct Answer : Option (C) : Phishing attack

Explanation : Phishing is a type of cybercrime in which a person is digitally persuaded to disclose private information. Phishing comes in a variety of forms. Some of them employ malware and emails to divert users to various websites

45 .

Which of them is not a wireless attack?

A)

MAC Spoofing

B)

Phishing

C)

Eavesdropping

D)

Wireless Hijacking

Correct Answer : Option (B) : Phishing

Explanation : Wireless attacks are malicious attacks done in wireless systems, networks or devices. Attacks on Wi-Fi network is one common example that general people know. Other such sub-types of wireless attacks are wireless authentication attack, Encryption cracking etc.

46 .

Which method of hacking will record all your keystrokes?

A)

Keylogging

B)

Keyjacking

C)

Keyhijacking

D)

Keyboard monitoring

Correct Answer : Option (A) : Keylogging

Explanation : Keylogging is the method or procedure of recording all the key strokes/keyboard button pressed by the user of that system.

47 .

What is an Stuxnet?

A)

Trojan

B)

Virus

C)

Antivirus

D)

Worm

Correct Answer : Option (D) : Worm

Explanation : Stuxnet is a popular and powerful worm that came into existence in mid 2010, which was very powerful as it was accountable for the cause of huge damage to Iran’s Nuclear program. It mainly targets the PLCs (Programmable Logic Controllers) in a system.

48 .

Which of the following is not an email-related hacking tool?

A)

Sendinc

B)

Mail PassView

C)

Mail Password

D)

Email Finder Pro

Correct Answer : Option (A) : Sendinc

Explanation : Sendinc is not a tool that compromises email data. It is used to protect business email accounts and provides a fast web-based solution for businesses to start delivering secure emails. The other three are email hacking tools.

49 .

Which of the following DDoS in mobile systems wait for the owner to trigger the cyber attack?

A)

virus

B)

worms

C)

botnets

D)

programs

Correct Answer : Option (C) : botnets

Explanation : Botnets on infected mobile devices are waiting for orders from their owners. It starts a DDoS flood attack after receiving the owner’s instructions. As a result, calls are not connected or data is not sent.

50 .

Which of the following is the least strong security encryption standard?

A)

WPA

B)

WEP

C)

WPA2

D)

WPA3

Correct Answer : Option (B) : WEP

Explanation : Wireless security is an important aspect of cyber-security. Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA), WPA2, and WPA3 are the most common kinds of wireless security. WEP is a famously insecure encryption protocol.

51 .

Which of the following can diminish the chance of data leakage?

A)

Chorography

B)

Cryptography

C)

Authentication

D)

Steganography

Correct Answer : Option (D) : Steganography

Explanation :

Ordinary files are targeted by hackers or other cyber criminals in order to disguise distinct data or information within another data file. You can reduce the risk of data leaking by employing steganography.

52 .

Which of the following refers to stealing one's idea or invention of others and use it for their own benefits?

A)

Piracy

B)

Plagiarism

C)

Intellectual property rights

D)

All of the Above

Correct Answer : Option (D) : All of the Above

Explanation : The stealing ideas or the invention of others and using them for their own profits can also be defined in several different ways, such as piracy, intellectual property rights, and plagiarism.

53 .

Which of the following refers to exploring the appropriate, ethical behaviors related to the online environment and digital media platform?

A)

Cyber Ethics

B)

Cyber Low

C)

Cyber Safety

D)

Cyber Security

Correct Answer : Option (A) : Cyber Ethics

Explanation : Cyber Ethics refers to exploring the appropriate, ethical behaviors related to online environments and digital media.

54 .

A _________ can gain access illegally to a system if the system is not properly tested in scanning and gaining access phase.

A)

security auditor

B)

security officer

C)

malicious hacker

D)

network analyst

Correct Answer : Option (B) : malicious hacker

Explanation : Malicious hackers can gain illegal access at OS level, application level or network level if the penetration testers or ethical hackers lack in testing and reporting the vulnerabilities in a system.

55 .

________ is a special form of attack using which hackersâ€™ exploit â€“ human psychology.

A)

Insecure network

B)

Cross Site Scripting

C)

Social Engineering

D)

Reverse Engineering

Correct Answer : Option (C) : Social Engineering

Explanation : Using social engineering techniques, hackers try to exploit the victim’s mind to gain valuable information about that person such as his/her phone number, Date of Birth, pet name etc.

56 .

________ involves scams where an individual (usually an attacker) lie to a person (the target victim) to acquire privilege data.

A)

Vishing

B)

Phishing

C)

Pretexting

D)

Spamming

Correct Answer : Option (C) : Pretexting

Explanation : In the pretexting technique of social engineering, the attacker pretends in need of legitimate information from the victim for confirming his/her identity.

57 .

_________ ensures the integrity and security of data that are passing over a network.

A)

Firewall

B)

Antivirus

C)

Pentesting Tools

D)

Network-security protocols

Correct Answer : Option (D) : Network-security protocols

Explanation : The methods and processes in securing network data from unauthorized content extraction are controlled by network-security protocols.

58 .

Which of the following is not a strong security protocol?

A)

SMTP

B)

SSL

C)

SFTP

D)

HTTPS

Correct Answer : Option (A) : SMTP

Explanation : SMTP (Simple Mail Transfer Protocol) is a standard protocol to transmit electronic mail and is a widely used mail transmitting protocol.

59 .

Which of the following is not a secured mail transferring methodology?

A)

POP3

B)

SSMTP

C)

S/MIME

D)

Mail using PGP

Correct Answer : Option (A) : POP3

Explanation : POP (Post Office Protocol) is a simple protocol which fetches the updated mail stored for you by the server. S/MIME (Secure/Multipurpose Internet Mail Extensions), SSMTP (Secure-Simple Mail Transfer Protocol), and PGP (Pretty Good Privacy) are examples of protocols and methods for secure mailing.

60 .

In SSL, what is used for authenticating a message?

A)

MAC (Machine Access Code)

B)

MAC (Message Authentication Code)

C)

MAC (Message Access Code)

D)

MAC (Machine Authentication Code)

Correct Answer : Option (B) : MAC (Message Authentication Code)

Explanation : For authenticating in SSL, a short message known as MAC (Message Authentication Code) is used for authenticating a message; where both the sender & the receiver need to implement the same key in order to start communicating.

61 .

PCT is abbreviated as _____

A)

Private Connecting Technology

B)

Private Communication Technique

C)

Private Communication Technology

D)

Personal Communication Technology

Correct Answer : Option (C) : Private Communication Technology

Explanation : Private Communication Technology (PCT) is similar to SSL except that the size of the message is smaller in the case of PCT. It supports different encryption algorithms like DES, RSA, Diffie-Hellman etc.

62 .

Authentication in PCT requires _____ keys.

A)

1

B)

2

C)

3

D)

4

Correct Answer : Option (B) : 2

Explanation : For message encryption using PCT it requires two separate keys. Moreover, PCT has more options for data formats and security algorithms.

63 .

In which of the following cases Session Initiation Protocol is not used?

A)

Internet telephony

B)

Instant Messaging

C)

Voice over LTE (VoLTE)

D)

Data Transferring

Correct Answer : Option (D) : Data Transferring

Explanation : Session Initiation Protocol is used as real-time session maintaining and is used voice, video as well as messaging applications for controlling multimedia communication sessions.

64 .

SRTP is abbreviated as _____

A)

Secure Real-time Transport Protocol

B)

Secure Relay Transport Protocol

C)

Secure Real-time Transferring Protocol

D)

Secure Real-time Transportation Protocol

Correct Answer : Option (A) : Secure Real-time Transport Protocol

Explanation : Secure Real-time Transport Protocol is a real-time multimedia delivery protocol with encryption for message integrity and authentication. It is used mostly in entertainment systems and streaming media and sites.

65 .

______ is the entity for issuing digital certificates.

A)

Cert Authority (CA)

B)

Cert Authorization (CA)

C)

Certificate Authorization (CA)

D)

Certificate Authority (CA)

Correct Answer : Option (D) : Certificate Authority (CA)

Explanation : Digital Certificates are used for certifying the ownership of a public key and the entity who issue those certificates is the Certificate Authority.

66 .

When any IT product, system or network is in need for testing for security reasons, then the term used is called _____

A)

Attack

B)

Threat

C)

Target of Evaluation

D)

Vulnerability

Correct Answer : Option (C) : Target of Evaluation

Explanation : Target of Evaluation is the term used when any IT infrastructure, system, network require evaluation for security reasons or for fixing any bugs after being tested by penetration testers.

67 .

An/A ________ is an act that violates cyber-security.

A)

Threat

B)

Attack

C)

Exploit

D)

Vulnerability

Correct Answer : Option (B) : Attack

Explanation : An “attack” or “cyber-attack” is an attempt taken by attackers to alter, delete, steal or expose any specific data by gaining unauthorized access.

68 .

_______ is the method of developing or creating a structurally similar yet unauthentic and illegitimate data of any firm or company.

A)

Data copying

B)

Data masking

C)

Data breaching

D)

Data duplicating

Correct Answer : Option (B) : Data masking

Explanation : Data masking is the method used for developing or creating a structurally similar version of data of any organization that is not authentic. These types of unauthentic data are purposefully created for protecting the actual data.

69 .

Backdoors are also known as _______

A)

Trap doors

B)

Front doors

C)

Cover doors

D)

Back entry

Correct Answer : Option (A) : Trap doors

Explanation : Trap-doors are hidden entry points in any already hacked system that is set to bypass security measures.

70 .

_______ is an attack technique occurs when excess data gets written to a memory block.

A)

Buffering

B)

Memory full

C)

Over buffering

D)

Buffer overflow

Correct Answer : Option (D) : Buffer overflow

Explanation : Buffer Overflow is a flaw that occurs in memory when excessive data is written which makes the buffer allocated to seize.

71 .

Finding and publishing any user's identity with the help of different personal details is called ________

A)

Data Breaching

B)

Personal Data Copying

C)

Doxing

D)

Secure File Transferring Protocol

Correct Answer : Option (C) : Doxing

Explanation : When an identity of internet user is discovered and published by following his/her details over the internet is called doxing.

72 .

_______ are a specific section of any virus or malware that performs illicit activities in a system.

A)

Payload

B)

Worms

C)

Spyware

D)

Malicious programs

Correct Answer : Option (A) : Payload

Explanation : Payloads are parts of a virus that helps in performing malicious activities such as destroying information, blocking network traffic, compromising data, steal and spy for sensitive information.

73 .

___________ is a device which secretly collects data from credit / debit cards.

A)

Card cloner

B)

Card Copier

C)

Data Stealer

D)

Card Skimmer

Correct Answer : Option (D) : Card Skimmer

Explanation : Card Skimmer is hardware that is installed and setup in ATMs secretly so that when any user will swipe or insert their card in the ATM, the skimmer will fetch all information from the magnetic strip.

74 .

Physical ports are usually referred to as _______

A)

cables

B)

interfaces

C)

jacks

D)

hardware plugs

Correct Answer : Option (B) : interfaces

Explanation : Physical ports are connections that connect two systems for their interactions. LAN, PS2 and DVI are examples of physical ports.

75 .

________ are logical numbers assigned for logical connections.

A)

IP address

B)

Physical ports

C)

Logical ports

D)

Networking cables

Correct Answer : Option (C) : Logical ports

Explanation : Logical ports are end-point to a logical connection. The numbers are pre-assigned by IANA (Internet Assigned Numbers Authority) which ranges from 0 – 65536.

76 .

Number of logical ports ranges from _____ to _____

A)

0, 255

B)

1, 65535

C)

1, 65536

D)

0, 65536

Correct Answer : Option (D) : 0, 65536

Explanation : The numbers are pre-assigned by IANA (Internet Assigned Numbers Authority) which ranges from 0 – 65536. All the used protocols are assigned with a unique port number.

77 .

_________ is the kind of firewall is connected between the device and the network connecting to internet.

A)

Hardware Firewall

B)

Software Firewall

C)

Microsoft Firewall

D)

All of the Above

Correct Answer : Option (A) : Hardware Firewall

Explanation : Hardware firewalls are those firewalls that need to be connected as additional hardware between the device through which the internet is coming to the system and the network used for connecting to the internet.

78 .

Firewall examines each ____________ that are entering or leaving the internal network.

A)

data packets

B)

updates

C)

connections

D)

emails users

Correct Answer : Option (A) : data packets

Explanation : Firewalls examines each data packets that are entering or leaving the internal network which ultimately prevents unauthorized access.

79 .

How many types of firewall?

A)

3

B)

4

C)

5

D)

6

Correct Answer : Option (B) : 4

Explanation : There are four types of firewall based on their working and characteristics. These are Packet Filtering Firewalls, Circuit Level Gateway Firewalls, Application level Gateway Firewalls, and Stateful Multilayer Inspection Firewalls.

80 .

When a packet does not fulfil the ACL criteria, the packet is ______

A)

resend

B)

destroyed

C)

dropped

D)

acknowledged as received

Correct Answer : Option (C) : dropped

Explanation : In the packet filtering firewall, when the rules defined by the Access Control List is not meet by any data packet, the packet is dropped & logs are updated in the firewall.

81 .

Network administrators can create their own ACL rules based on ____, _____ and _______

A)

Address, policies and Packet attributes

B)

Network topology, Protocols and data packets

C)

Address, Protocols and security policies

D)

Address, Protocols and Packet attributes

Correct Answer : Option (D) : Address, Protocols and Packet attributes

Explanation : Network administrators can create their own ACL rules based on Address, Protocols and Packet attributes. This is generally done where the specific customised type of data packets need to pass through firewall screening.

82 .

One advantage of Packet Filtering firewall is _______

A)

very fast

B)

less costly

C)

less complex

D)

more efficient

Correct Answer : Option (B) : less costly

Explanation : Packet filtering firewalls are more advantageous because they are less costly and they use fewer resources and are used effectively in small networks.

83 .

Circuit-level gateway firewalls are installed in _______ layer of OSI model.

A)

Session layer

B)

Network layer

C)

Application layer

D)

Presentation layer

Correct Answer : Option (A) : Session layer

Explanation : In the session layer (which is the fifth layer) of the OSI model, circuit-level gateway firewalls are deployed for monitoring TCP sessions for 3-way handshakes.

84 .

Which of the following is a disadvantage of Circuit-level gateway firewalls?

A)

Theyâ€™re expensive

B)

Theyâ€™re complex to setup

C)

Theyâ€™re complex in architecture

D)

They do not filter individual packets

Correct Answer : Option (D) : They do not filter individual packets

Explanation : Circuit-level gateway firewalls don’t filter packets individually which gives the attacker a chance to take access in the network.

85 .

_______ gateway firewalls are deployed in application-layer of OSI model.

A)

Packet Filtering Firewalls

B)

Circuit Level Gateway Firewalls

C)

Application-level Gateway Firewalls

D)

Stateful Multilayer Inspection Firewalls

Correct Answer : Option (C) : Application-level Gateway Firewalls

Explanation : Application level Gateway Firewalls are deployed in the application-layer of OSI model for protecting the network for different protocols of the application layer.

86 .

Application level gateway firewalls protect the network for specific ___________

A)

botnet attacks

B)

session layer protocol

C)

application layer protocol

D)

network layer protocol

Correct Answer : Option (C) : application layer protocol

Explanation : Some specific application layer protocols need protection from attacks which is done by the application level gateway firewall in the application layer of the OSI model.

87 .

________ firewalls are a combination of other three types of firewalls.

A)

Packet Filtering

B)

Stateful Multilayer Inspection

C)

Circuit Level Gateway

D)

Application-level Gateway

Correct Answer : Option (B) : Stateful Multilayer Inspection

Explanation : Stateful Multilayer Inspection firewalls are a combination of other three types of firewalls. These combinations are Packet filtering, circuit level and application-level gateway firewalls.

88 .

Stateful Multilayer Inspection firewall cannot perform which of the following?

A)

Filter network layer packets

B)

Check for legitimate session

C)

Evaluate packets at application lager

D)

Scans for illicit data packets at the presentation layer

Correct Answer : Option (D) : Scans for illicit data packets at the presentation layer

Explanation : Stateful Multilayer Inspection firewalls are designed to perform filtering packets in the network layer, check for legitimate sessions in the session layer as well as evaluate all packets at the application layer of OSI model. But it cannot scan for illicit data packets at the presentation layer.

89 .

One advantage of Stateful Multilayer Inspection firewall is ______

A)

complex internal architecture

B)

large to manage

C)

large to manage but efficient

D)

costlier but easy to understand

Correct Answer : Option (A) : complex internal architecture

Explanation : Stateful Multilayer Inspection firewalls are complex internally due to multiple characteristics of different firewalls incorporated together which makes it powerful and more secure.

90 .

Application layer firewalls are also called ______

A)

first generation firewalls

B)

second generation firewalls

C)

third generation firewalls

D)

fourth generation firewalls

Correct Answer : Option (C) : third generation firewalls

Explanation : Application layer firewalls are also called third generation firewalls. They came into the picture in around 1995-1998. Application level gateway firewalls are helped in making the network performance smooth for logging traffic.

91 .

________ is the practice implemented to spy someone using technology for gathering sensitive information.

A)

Spyware

B)

Cyber-spy

C)

Digital Spying

D)

Cyber espionage

Correct Answer : Option (D) : Cyber espionage

Explanation : Cyber espionage is a practice done by both ethical and non-ethical hackers to spy on others for gathering confidential information.

92 .

________ is the way or technique through which majority of the malware gets installed in our system.

A)

Drive-by Click

B)

Drive-by Download

C)

Drive-by Redirection

D)

Drive-by Injecting USB devices

Correct Answer : Option (B) : Drive-by Download

Explanation : An accidental yet dangerous action that takes place in the cyberspace which helps attackers place their malware into the victim’s system. This technique is called Drive-by Download.

93 .

_________ is the hacking approach where cyber-criminals design fake websites or pages for tricking or gaining additional traffic.

A)

Mimicking

B)

Pharming

C)

Website-Duplication

D)

Cyber-Replication

Correct Answer : Option (D) : Cyber-Replication

Explanation : The technique and approach through which cyber-crooks develop fake web pages and sites to trick people for gaining personal details such as login ID and password as well as personal information, is known as pharming.

94 .

Which of the following is the technique used to look for information in trash or around dustbin container?

A)

Dumpster diving

B)

Baiting

C)

Pretexting

D)

Quid Pro Quo

Correct Answer : Option (A) : Dumpster diving

Explanation : In the technology world, where information about a person seems everywhere; dumpster diving is the name of the technique where the attacker looks for information in dustbins and trashes. For example, after withdrawing money from ATM, the user usually throw the receipt in which the total amount and account details are mentioned. These type of information becomes helpful to a hacker, for which they use dumpster diving.

95 .

Tailgating is also termed as ________

A)

Baiting

B)

Phishing

C)

Piggybacking

D)

Pretexting

Correct Answer : Option (C) : Piggybacking

Explanation : Piggybacking is the technique used for social engineering, as the attacker or unauthorized person/individual follows behind an authorized person/employee & gets into an authorized area to observe the system, gain confidential data or for a fraudulent purpose.

96 .

Stealing pen drives and DVDs after tailgating is an example of lack of _______ security.

A)

wireless security

B)

network security

C)

physical security

D)

database security

Correct Answer : Option (C) : physical security

Explanation : When cyber-criminal gain access to an authorized area and steal pen drives and DVDs which contain sensitive information about an employee or about the organization, then it can be said that the physical security of the organization is weak.

97 .

______ is the tool used for this purpose.

A)

Snort

B)

Nmap

C)

Aircrack â€“ ng

D)

Powersploit

Correct Answer : Option (D) : Powersploit

Explanation : The Powersploit is an access maintaining tool used for Windows systems. This tool is used for gaining re-access to the victim’s system using PowerShell.

98 .

In _______ phase, the hackers try to hide their footprints.

A)

Scanning

B)

Tracks clearing

C)

Gaining access

D)

Reconnaissance

Correct Answer : Option (B) : Tracks clearing

Explanation : Tracks clearing or covering tracks is the name of the phase where the hackers delete logs of their existence & other activity records they do during the hacking process. This step is actually an unethical one.

99 .

_______ is one of the most secured Linux OS that provides anonymity and an incognito option for securing its user data.

A)

Tails

B)

Fedora

C)

Ubuntu

D)

OpenSUSE

Correct Answer : Option (A) : Tails

Explanation : If any user is looking for Linux based security solutions, Tails is one of the most popular Linux-based operating systems that provides anonymity and an incognito option for securing its user data.

100 .

Which of the following OS does not comes under a secured Linux OS list?

A)

Ubuntu

B)

Tails

C)

Tin Hat

D)

Qubes OS

Correct Answer : Option (A) : Ubuntu

Explanation : Qubes OS, Tails OS, and Tin Hat are amongst the most secured Linux Operating Systems (OS) that provide fast and secure Linux experience along with maintaining anonymity for the users.

101 .

Which of the following comes under secured Linux based OS?

A)

Fedora

B)

Ubuntu

C)

Tails

D)

Kubuntu

Correct Answer : Option (C) : Tails

Explanation : If any user is looking for Linux based security solutions, Tails is one of the most popular Linux-based operating systems that provide anonymity and incognito option for securing its user data.

102 .

________ in a system is given so that users can use dedicated parts of the system for which theyâ€™ve been given access to.

A)

Machine Access Control

B)

Mandatory Accounts Control

C)

Mandatory Access Controlling

D)

Mandatory Access Control

Correct Answer : Option (D) : Mandatory Access Control

Explanation : Mandatory Access Control is a technique that provides separation of a computer with its OS into several small discrete sections so that the user of a system can only utilize those pieces of a system for which they’ve been given permission to.

103 .

RBAC is abbreviated as _______

A)

Rule-Based Access Control

B)

Role-Based Access Control

C)

Rule-Based Accessing Control

D)

Role-Based Accessing Control

Correct Answer : Option (B) : Role-Based Access Control

Explanation : RBAC which is abbreviated as Role-Based Access Control defines a set of functions for users in a Linux system and is often built on top of DTE systems. Here users can log for certain roles and run particular programs that are apposite for the role.

104 .

In a _______ attack, the extra data that holds some specific instructions in the memory for actions is projected by a cyber-criminal or penetration tester to crack the system.

A)

MiTM

B)

Phishing

C)

Clickjacking

D)

Buffer-overflow

Correct Answer : Option (D) : Buffer-overflow

Explanation : In a buffer-overflow attack, the extra data that holds some specific instructions in the memory for actions is projected by a cyber-criminal or penetration tester to crack the system.

105 .

Buffer-overflow may remain as a bug in apps if ______ are not done fully.

A)

buffer checks

B)

boundary hacks

C)

memory checks

D)

boundary checks

Correct Answer : Option (D) : boundary checks

Explanation : Buffer-overflow may remain as a bug in apps if boundary checks are not done fully by developers or are skipped by the QA (Quality Assurance) testers of the software development team.

106 .

Applications developed by programming languages like ____ and ______ have this common buffer-overflow error.

A)

C, C++

B)

C, Ruby

C)

Tcl, C#

D)

Python, Ruby

Correct Answer : Option (A) : C, C++

Explanation : Applications developed by programming languages like C and C++ have this common buffer-overflow error. The strcat(), strcpy(), sprintf(), gets() etc when called in C and C++ can be exploited because these functions don’t check whether the stack is large enough for storing the data.

107 .

________ buffer overflows, which are more common among attackers.

A)

Heap-based

B)

Queue-based

C)

Stack-based

D)

Memory-based

Correct Answer : Option (C) : Stack-based

Explanation : In the case of stack-based buffer overflows, which is very common among the two types of buffer-overflow; it exploits applications by flooding the stack: memory-space where users externally input the data.

108 .

In an application that uses stack, the memory for data is allocated ______

A)

logical

B)

statically

C)

dynamically

D)

at the end of the program

Correct Answer : Option (B) : statically

Explanation : In application that uses heap, memory utilized by the application is allocated at the beginning of the function call and the memory get released at the end of a program. Accessing of values in the stack is very fast.

109 .

Attackers commonly target ____________ for fetching IP address of a target or victim user.

A)

emails

B)

web pages

C)

websites

D)

ip tracker

Correct Answer : Option (C) : websites

Explanation : Enumeration by cyber-attackers is possible through websites also, as the attackers target websites for fetching the IP address of the victim or the target user.

110 .

What common web scripting languages are used by attackers to fetch various details from its surfing users?

A)

Tcl and C#

B)

C++ and HTML

C)

HTML and Python

D)

Perl and JavaScript

Correct Answer : Option (D) : Perl and JavaScript

Explanation : Various scripting languages are used by attackers, such as Perl and JavaScript, that are programmed to fetch not only the IP address from the site but also other user’s personal information.

111 .

Enumeration is done to gain information. Which of the following cannot be achieved using enumeration?

A)

Private chats

B)

IP Tables

C)

SNMP data, if not secured appropriately

D)

List of username and password policies

Correct Answer : Option (A) : Private chats

Explanation : Enumeration is an information gaining technique used in ethical hacking to achieve data regarding victim’s IP table, SNMP data, lists of username and passwords of different systems etc but not private chats.

112 .

_______ suite is used for NTP enumeration.

A)

NTP

B)

DNS

C)

HTTP

D)

SNMP

Correct Answer : Option (A) : NTP

Explanation : NTP Suite is employed for NTP enumeration. This is significant for a network environment; where anyone can discover other primary servers which assist the hosts to update their time, and the entire process can be done without authenticating.

113 .

enum4linux is used to enumerate _______

A)

Mac systems

B)

Linux systems

C)

Chrome systems

D)

Windows systems

Correct Answer : Option (B) : Linux systems

Explanation : ‘enum4linux’ is implemented for enumerating the Linux systems. Using this, the attacker can examine and establish the usernames that are present in a target host.

114 .

Even our emails contain the IP address of the sender which helps in the enumeration. We can get this IP from ________ from within the email.

A)

â€˜Show full emailâ€™

B)

â€˜forwardâ€™ option

C)

â€˜show originalâ€™ option

D)

â€˜View Originalâ€™ option

Correct Answer : Option (C) : â€˜show originalâ€™ option

Explanation : It is possible to know the IP address of the sender of your email by opening the email and going to the ‘more’ button and then selecting the ‘show original’ option. In this way, one can find the IP address and do enumeration.

115 .

A ______ is a computer program implemented for recovering usernames & info on groups, shares as well as services of networked computers.

A)

cloud enumerator

B)

software enumerator

C)

hardware enumerator

D)

network enumerator

Correct Answer : Option (D) : network enumerator

Explanation : A network enumerator is a computer program implemented for recovering usernames & info on groups, shares as well as services of networked computers. These type of programs are used for network enumeration in order to detect hosts or devices on a particular network.

116 .

____________ is an ethical hacking technique used for determining what operating system (OS) is running on a remote computer.

A)

Cyber-printing

B)

Footprinting

C)

OS fingerprinting

D)

OS penetration testing

Correct Answer : Option (C) : OS fingerprinting

Explanation : OS fingerprinting is an ethical hacking technique used for determining what operating system (OS) is running on a remote computer.

117 .

__________ is gained if you send especially skilled packets to a target machine.

A)

Active fingerprinting

B)

OS fingerprinting

C)

Network fingerprinting

D)

Passive fingerprinting

Correct Answer : Option (A) : Active fingerprinting

Explanation : Active fingerprinting is gained if you send especially skilled packets to a target machine and then listing down its replies and analyzing the information gathered for determining the target OS.

118 .

Which of the following operations DNSenum cannot perform?

A)

Perform reverse lookups

B)

Get the admin password

C)

Get the hostâ€™s addresses

D)

Get extra names and sub-domains through Google scraping

Correct Answer : Option (B) : Get the admin password

Explanation : DNSenum is a popular Perl script that can fetch information such as – fetching host address, perform a reverse lookup, get additional name and sub-domain through Google scraping etc.

119 .

_________ are piece of programs or scripts that allow hackers to take control over any system.

A)

Worms

B)

Exploits

C)

Antivirus

D)

Firewall by-passers

Correct Answer : Option (B) : Exploits

Explanation : Exploits are the piece of programs or scripts that allow hackers to take control over any system. Vulnerability scanners such as Nexpose and Nessus are used for finding such vulnerabilities.

120 .

Which of the following are not a vulnerability-listed site/database?

A)

Exploit-db

B)

National Vulnerability Database (NVD)

C)

Common Vulnerabilities and Exposures (CVE)

D)

Bing Vulnerability database (BVD)

Correct Answer : Option (D) : Bing Vulnerability database (BVD)

Explanation : Exploit-db (https://www.exploit-db.com/), Common Vulnerabilities and Exposures (CVE) (https://cve.mitre.org/), and National Vulnerability Database (NVD) (https://nvd.nist.gov/) are three vulnerability listing site.

121 .

Known bugs can be solved or removed by _________ develop by the vendors of the application.

A)

changing the software

B)

removing the application

C)

installing security patches

D)

installing database patches

Correct Answer : Option (C) : installing security patches

Explanation : Known bugs and vulnerabilities of a system can be solved or installing or updating the security patches developed by the vendor or owner of that particular application.

122 .

National Vulnerability Database (NVD) is ____ repository of data regarding vulnerability standards.

A)

U.S. government

B)

China Government

C)

India government

D)

Russian government

Correct Answer : Option (A) : U.S. government

Explanation : National Vulnerability Database (NVD) is the US government repository of data regarding vulnerability standards. It is available from the link https://nvd.nist.gov.

123 .

___________ is a malicious method used by cyber-criminals to trick a user into clicking on something different from what the user wants.

A)

Click-fraud

B)

Clickjacking

C)

Click-hacking

D)

Using torrent links

Correct Answer : Option (B) : Clickjacking

Explanation : Clickjacking is a malicious method used by cyber-criminals to trick a user into clicking on something else which is illicit from what the user wants. The single click usually redirects the employee to a strange site from where infected files get downloaded into the system of the employee.

124 .

Which of the following is not a type of scanning?

A)

Cloud scan

B)

Null Scan

C)

SYN Stealth

D)

Xmas Tree Scan

Correct Answer : Option (A) : Cloud scan

Explanation : Among the following-given options, the Cloud Scan is one, and only that is not a type of scanning.

125 .

In system hacking, which of the following is the most crucial activity?

A)

Covering tracks

B)

Cracking passwords

C)

Information gathering

D)

None of the above

Correct Answer : Option (B) : Cracking passwords

Explanation : While trying to hack a system, the most important thing is cracking the passwords.

126 .

Through the clickjacking attack, the employee's confidential ______________ may get leaked or stolen.

A)

papers

B)

media files

C)

hardcopy files d)

D)

information

Correct Answer : Option (D) : information

Explanation : Through clickjacking, the employee’s system may get compromised by an infected program, trojans or spyware which got downloaded in the background automatically as the user fell into the trick of an attacker

127 .

Which of the following is not a proper aspect of user integration?

A)

Access control

B)

Employeeâ€™s authentication

C)

Physical authorization

D)

Representing users in the database

Correct Answer : Option (C) : Physical authorization

Explanation : There are 3 main aspects that need to keep in mind when putting together new employees or users into an application. These are: Representing users in the database, Access control, and Employee’s authentication.

128 .

It is very important to block unknown, strange and _____ within the corporate network.

A)

programs

B)

unwanted files

C)

infected sites

D)

important folders

Correct Answer : Option (C) : infected sites

Explanation : It is very important to block unknown, strange and infected sites within the corporate network, by the network administrator so that any employee may not accidentally access those sites or open infected sites by means of clickjacking or URL-redirection techniques.

129 .

Use of _______ can bring external files and worms and virus along with it to the internal systems.

A)

pen drive

B)

iPod

C)

laptop

D)

smart-watch

Correct Answer : Option (A) : pen drive

Explanation : Use of pen drive to bring your work from home tasks to office systems may bring worms and virus along with it (if your home system is infected with any malware or infected programs) and may cause harm to your office systems.

130 .

Which one of the following is actually considered as the first computer virus?

A)

Blaster

B)

Creeper

C)

Sasser

D)

All of the Above

Correct Answer : Option (B) : Creeper

Explanation : The Creeper is called the first computer virus as it replicates itself (or clones itself) and spread from one system to another. It is created by Bob Thomas at BBN in early 1971 as an experimental computer program.

131 .

To protect the computer system against the hacker and different kind of viruses, one must always keep _________ on in the computer system.

A)

Script

B)

Antivirus

C)

VLC player

D)

Firewall

Correct Answer : Option (D) : Firewall

Explanation : It is essential to always keep the firewall on in our computer system. It saves the computer system against hackers, viruses, and installing software form unknown sources. We can also consider it the first line of defense of the computer system.

132 .

Which of the following are famous and common cyber-attacks used by hackers to infiltrate the user's system?

A)

Malware & Malvertising

B)

DDos and Derive-by Downloads

C)

Phishing and Password attacks

D)

All of the Above

Correct Answer : Option (D) : All of the Above

Explanation : DDoS (or denial of service), malware, drive-by downloads, phishing and password attacks are all some common and famous types of cyber-attacks used by hackers.

133 .

Which one of the following is also referred to as malicious software?

A)

Badware

B)

Ilegalware

C)

Malware

D)

Maliciousware

Correct Answer : Option (C) : Malware

Explanation : Malware is a kind of short program used by the hacker to gain access to sensitive data/ information. It is used to denote many kinds of viruses, worms, Trojans, and several other harmful programs. Sometimes malware is also known as malicious software.

134 .

The term "TCP/IP" stands for_____

A)

Transmission Control Protocol/ internet protocol

B)

Transaction Control protocol/ internet protocol

C)

Transmission Control Protocol/ internet protocol

D)

Transmission Contribution protocol/ internet protocol

Correct Answer : Option (A) : Transmission Control Protocol/ internet protocol

Explanation : The term "TCP/IP" stood for Transmission Control Protocol/Internet Protocol and was developed by the US Government in the early days of the internet.

135 .

The response time and transit time is used to measure the ______ of a network.

A)

Reliability

B)

Performance

C)

Security

D)

Longevity

Correct Answer : Option (B) : Performance

Explanation : On the basis of response time and transit time, the performance of a network is measured.

136 .

In the computer networks, the encryption techniques are primarily used for improving the ________

A)

Security

B)

Longevity

C)

Reliability

D)

Performance

Correct Answer : Option (A) : Security

Explanation : Encryption techniques are usually used to improve the security of the network.

137 .

Which of the following statements is correct about the firewall?

A)

It is a kind of wall built to prevent files form damaging the corporate.

B)

It is a device installed at the boundary of a company to prevent unauthorized physical access.

C)

It is a device installed at the boundary of an incorporate to protect it against the unauthorized access.

D)

None of the above.

Correct Answer : Option (C) : It is a device installed at the boundary of an incorporate to protect it against the unauthorized access.

Explanation : A firewall can be the type of either a software or the hardware device that filters each and every data packet coming from the network, internet. It can also be considered as a device installed at the boundary of an incorporate to protect form unauthorized access. Sometimes firewall also refers to the first line of defense against viruses, unauthorized access, malicious software etc.

138 .

When was the first computer virus created?

A)

1962

B)

1964

C)

1967

D)

1970

Correct Answer : Option (D) : 1970

Explanation : In 1970, the world's first computer virus was created by Robert (Bob) Thomas. This virus was designed as it creates copies of itself or clones itself and spreads one computer to another. So the correct answer will be 1970.

139 .

Which of the following is considered as the world's first antivirus program?

A)

Tinkered

B)

Creeper

C)

Ray Tomlinson

D)

Reaper

Correct Answer : Option (D) : Reaper

Explanation : Reaper is considered as the world's first antivirus program or software as it can detect the copies of a Creeper (the world's first man-made computer virus) and could delete it as well.

140 .

Which one of the following principles of cyber security refers that the security mechanism must be as small and simple as possible?

A)

Open-Design

B)

Least privilege

C)

Fail-safe Defaults

D)

Economy of the Mechanism

Correct Answer : Option (D) : Economy of the Mechanism

Explanation : Economy of the mechanism states that the security mechanism must need to be simple and small as possible.

141 .

A ______ takes over your systemâ€™s browser settings and the attack will redirect the websites you visit some other websites of its preference.

A)

MiTM

B)

Browser Hijacker

C)

Cookie-stealing

D)

Browser hacking

Correct Answer : Option (B) : Browser Hijacker

Explanation : Browser hijacking is a technique that takes over your system’s browser settings and the attack will redirect the websites you visit some other websites of its preference.

142 .

A)

Adware

B)

Spyware

C)

Ransomware

D)

Shareware

Correct Answer : Option (C) : Ransomware

Explanation : Ransomware has become a popular attack since last few years, and the attacker target board members, high-ranked officials and managing committee members of an organization; where the ransomware compromise the system by encrypting all files and ask for some ransom in order to unlock or decrypt all files.

143 .

_________ important and precious file is a solution to prevent your files from ransomware.

A)

Keeping backup of

B)

Not saving

C)

Deleting all

D)

Keeping in pen drive

Correct Answer : Option (A) : Keeping backup of

Explanation : Keeping a secured backup of the important and precious file is a solution to prevent your files from ransomware. The backup should have to be made in some secured cloud storage of any other location (server) in an encrypted form.

144 .

________ is the technique to obtain permission from a company for using, manufacturing & selling one or more products within a definite market area.

A)

item licensing

B)

code-licensing

C)

product licensing

D)

algorithm-licensing

Correct Answer : Option (C) : product licensing

Explanation : Product licensing is the technique to obtain permission from a firm or organization for using, manufacturing & selling one or more products within a definite market area. This is done by the company for security reasons and usually takes a royal fee/amount from its users.

145 .

It is important to limit ____________ to all data and information as well as limit the authority for installing software.

A)

work-load

B)

employee access

C)

admin permission

D)

installing unwanted apps

Correct Answer : Option (B) : employee access

Explanation : It is important to limit employee access to all data and information as well as limit the authority for installing software. Otherwise, any employee with illicit intention may install programs that are either pirated version or may cause damage to the internal corporate network.

146 .

One must isolate payment systems and payment processes from those computers that you think are used by _________ or may contain _________

A)

strangers, antivirus

B)

unknown, antivirus

C)

unknown, firewalls

D)

strangers, keyloggers

Correct Answer : Option (D) : strangers, keyloggers

Explanation : One must isolate payment systems and payment processes from those computers that you think are used by strangers or may contain keyloggers. Otherwise, your card details and PIN may get compromised.

147 .

Which of the following principle of cyber security restricts how privileges are initiated whenever any object or subject is created?

A)

Open-Design

B)

Fail-safe Defaults

C)

Least privilege

D)

None of the Above

Correct Answer : Option (B) : Fail-safe Defaults

Explanation : The fail-safe Defaults principle of cyber security restricts how privileges are initiated whenever a subject or object is created. In cases where the privileges, rights, access or some other security-related attribute is not granted explicitly, it should also not granted access to the object.

148 .

Suppose an employee demands the root access to a UNIX system, where you are the administrator; that right or access should not be given to the employee unless that employee has work that requires certain rights, privileges. It can be considered as a perfect example of which principle of cyber security?

A)

Least privileges

B)

Open Design

C)

Separation of Privileges

D)

Noe of the Above

Correct Answer : Option (A) : Least privileges

Explanation : The example given in the above question refers to the least privileges principle of cyber security. The least privileges principle of cyber security states that no rights, access to the system should be given to any of the employees of the organization unless he/she needs those particular rights, access in order to complete the given task. In short, we can say that its primary work is to restrict or control the assignment of rights to the employees.

149 .

Which of the following can also consider as the instances of Open Design?

A)

CSS

B)

DVD Player

C)

Only A

D)

Both A and B

Correct Answer : Option (D) : Both A and B

Explanation : The Open Design is a kind of open design artifact whose documentation is publically available, which means anyone can use it, study, modify, distribute, and make the prototypes. However, the CSS (or Content Scrambling System) and DVD Player are both examples of open design.

150 .

Which one of the following principles states that sometimes it is become more desirable to rescored the details of intrusion that to adopt more efficient measure to avoid it?

A)

Work Factor

B)

Psychological Acceptability

C)

Compromise Recording

D)

Least Common Mechanism

Correct Answer : Option (B) : Compromise recording

Explanation : The principle called compromise factor states that in some cases, it is more beneficial to records or document the details of the intrusion that to adopt more efficient measures to avoid it.

151 .

The web application like banking websites should ask its users to log-in again after some specific period of time, let say 30 min. It can be considered as an example of which cybersecurity principle?

A)

Compromise Recording

B)

Psychological Acceptability

C)

Complete Mediation

D)

None of the Above

Correct Answer : Option (C) : Complete Mediation

Explanation : The complete mediation principle of cybersecurity requires that all the access must be checked to ensure that they are genuinely allowed. However, the example given in the above question can be considered as an example of Complete Mediation.

152 .

_________ is a mono-alphabetic encryption code wherein each & every letter of plain-text is replaced by another letter in creating the cipher-text.

A)

Caesar Cipher

B)

Playfair Cipher

C)

Monoalphabetic Cipher

D)

Polyalphabetic Cipher

Correct Answer : Option (A) : Caesar Cipher

Explanation : Caesar Cipher is the simplest type of substitution cipher with a mono-alphabetic encryption code wherein each letter of plain-text is replaced by another letter in creating the cipher-text.

153 .

________ is the concept that tells us about the replacement of every alphabet by another alphabet and the entire series gets 'shifted' by some fixed quantity.

A)

Block Cipher

B)

Shift Cipher

C)

Rolling Cipher

D)

Playfair Cipher

Correct Answer : Option (B) : Shift Cipher

Explanation : Shift Cipher is the concept that tells us about the replacement of every alphabet by another alphabet and the entire series gets ‘shifted’ by some fixed quantity (which is the key) between 0 and 25.

154 .

_________ is a cipher formed out of substitution where for a given key-value the cipher alphabet for every plain text remains fixed all through the encryption procedure.

A)

Playfair Cipher

B)

Caesar Cipher

C)

Polyalphabetic Cipher

D)

Monoalphabetic Cipher

Correct Answer : Option (D) : Monoalphabetic Cipher

Explanation : Monoalphabetic cipher is a cipher formed out of substitution where for a given key-value the cipher alphabet for every plain text remains fixed all through the encryption procedure.

155 .

Which one of the following statements is correct about Email security in the network security methods?

A)

One has to deploy hardware, software, and security procedures to lock those apps down.

B)

One should know about what the normal behavior of a network look likes so that he/she can spot any changes, breaches in the behavior of the network.

C)

Phishing is one of the most commonly used methods that are used by hackers to gain access to the network

D)

All of the Above

Correct Answer : Option (C) : Phishing is one of the most commonly used methods that are used by hackers to gain access to the network

Explanation : In terms of Email Security, phishing is one of the standard methods that are used by Hackers to gain access to a network. The Email Security Tools can handle several types of attacks, such as the incoming attacks, and protect the outbound messages containing sensitive data/information as well.

156 .

Which of the following statements is true about the VPN in Network security?

A)

It typically creates a secure, encrypted virtual "tunnel" over the open internet

B)

It is usually based on the IPsec( IP Security) or SSL (Secure Sockets Layer)

C)

It is a type of device that helps to ensure that communication between a device and a network is secure.

D)

All of the Above

Correct Answer : Option (D) : All of the Above

Explanation : The term VPN stands for Virtual Private Network. It is a type of network security-enhancing tool that can be either a software program or a hardware device. It usually authenticates the communication between a device and a network by creating a secure encrypted virtual "tunnel". In general, the software VPNs are considered as the most cost-effective, user friendly over the hardware VPNs.

157 .

Which of the following type of text is transformed with the help of a cipher algorithm?

A)

Plain text

B)

Scalar text

C)

Complex text

D)

Transformed text

Correct Answer : Option (A) : Plain text

Explanation : The cipher algorithm is used to create an encrypted message by taking the input as understandable text or "plain text" and obtains unreadable or "cipher text" as output. It is usually used to protect the information while transferring one place to another place.

158 .

The term "CHAP" stands for _______

A)

Circuit Handshake Authentication Protocols

B)

Challenge Handshake Authentication Protocols

C)

Circuit Hardware Authentication Protocols

D)

Challenge Hardware Authentication Protocols

Correct Answer : Option (B) : Challenge Handshake Authentication Protocols

Explanation : The term "CHAP" stands for the Challenge Handshake Authentication Protocols. In computer networks, it can be defined as an authentication scheme that avoids the transfer of unencrypted passwords over the network. The "CHAP" is one of the many authentication schemes used by the Point To Point Protocol (PPP), which is a serial transmission protocol for Wide Networks Connections (WAN).

159 .

Which of the following malware's type allows the attacker to access the administrative controls and enables his/or her to do almost anything he wants to do with the infected computers.

A)

RATs

B)

Worms

C)

Botnets

D)

Rootkits

Correct Answer : Option (A) : RATs

Explanation : The RAT is an abbreviation of Remote Access Trojans or Remote Administration Tools, which gives the total control of a Device, which means it, can control anything or do anything in the target device remotely. It allows the attacker administrative control just as if they have physical access to your device.

160 .

Which of the following statements is true about the Trojans?

A)

Trojans do nothing harmful to the user's computer systems

B)

Trojans replicates them self's or clone them self's through an infections

C)

Trojans perform tasks for which they are designed or programmed

D)

None of the Above

Correct Answer : Option (C) : Trojans perform tasks for which they are designed or programmed

Explanation : Trojans are a type of malware that will perform any types of actions for those they are design or programmed. Another important thing about Trojans is that the user may not know that the malware enters their system until the Trojan starts doing its job for which they are programmed.

161 .

Which of the following is just opposite to the Open Design principle?

A)

Work factor

B)

Least privileges

C)

Least common mechanism

D)

Security through obscurity

Correct Answer : Option (D) : Security through obscurity

Explanation : The "Security through obscurity" is an approach which just opposite to the Open Design principle.

162 .

Which of the following usually considered as the default port number of apache and several other web servers?

A)

40

B)

80

C)

100

D)

160

Correct Answer : Option (B) : 80

Explanation : The default port number used by the apache and several other web servers is 80.

163 .

DNS translates a Domain name into _______

A)

IP

B)

Hex

C)

URL

D)

Binary

Correct Answer : Option (C) : URL

Explanation : DNS stands for the Domain name system; the main work of a DNS is to translate the Domain name into an IP address that is understandable to the computers.

164 .

Which type following UNIX account provides all types of privileges and rights which one can perform administrative functions?

A)

Root

B)

Guest

C)

Client

D)

Administrative

Correct Answer : Option (D) : Administrative

Explanation : If a user uses the Root account of the UNIX operating system, he can carry out all types of administrative functions because it provides all necessary privileges and rights to a user.

165 .

Name of the Hacker who breaks the SIPRNET system?

A)

Kevin Poulsen

B)

Kevin Mitnick

C)

John Draper

D)

John von Neumann

Correct Answer : Option (A) : Kevin Poulsen

Explanation : The SIPRNET (or Advanced Research Project Agency Network) system was first hacked by Kevin Poulsen as he breaks into the Pentagon network.

166 .

Which of the following known as the oldest phone hacking techniques used by hackers to make free calls?

A)

Cracking

B)

Phreaking

C)

Spraining

D)

Phishing

Correct Answer : Option (B) : Phreaking

Explanation : Phreaking is considered as one of the oldest phone hacking techniques used by hackers to make free calls.

167 .

Which of the following is considered as the first hacker's conference?

A)

DEFCON

B)

DEVON

C)

OSCON

D)

SECTION

Correct Answer : Option (A) : DEFCON

Explanation : DEFCON is one of the most popular and largest Hacker's as well as the security consultant's conference. It is always held once a year in Las Vegas, Nevada, where hackers of all types (such as black hats, gray hats, and white hat hackers), government agents as well as security professionals from around the world attend the conference attends this meeting.

168 .

Which of the following is not an appropriate way to compromise web servers?

A)

Misconfiguration in OS

B)

Misconfiguration in networks

C)

Using network vulnerabilities

D)

Correct Answer : Option (C) : Using network vulnerabilities

Explanation : Websites get hosted on web servers. Web servers are actually computers running that makes us available & accessible files (web pages) through the internet. Various ways that can help compromise a web server are a misconfiguration of network or OS, bugs in web server’s OS etc.

169 .

Which of the following is not an appropriate method of defacing web server?

A)

Brute-forcing Admin Password

B)

Fetching credentials through MiTM

C)

DNS Attack through cache poisoning

D)

IP address spoofing

Correct Answer : Option (D) : IP address spoofing

Explanation : Various ways which can help a hacker deface the web server. These are by fetching credentials through MiTM, brute-forcing administrator password, DNS attack through cache poisoning, FTP server intrusion and many more.

170 .

IIS stands for ________

A)

Internet Information Server

B)

Interconnected Information Server

C)

Internet Information Services

D)

Interconnected Information Services

Correct Answer : Option (C) : Internet Information Services

Explanation : Web servers are actually computers running that makes us available & accessible files (web pages) through the internet. The most widely used web server platform is the IIS (Internet Information Services).

171 .

_________ is a tiny script that if uploaded to a web server can give hacker complete control of a remote PC.

A)

ASP Trojan

B)

Spyware

C)

Stuxnet

D)

Web Ransomware

Correct Answer : Option (A) : ASP Trojan

Explanation : ASP Trojan is a tiny script that if uploaded to a web server can give hacker complete control of remote PC. ASP Trojan can be easily attached to Web Applications creating a backdoor in web server hacking.

172 .

Which of the following is not a web server attack type?

A)

DOS Attack

B)

Password Guessing

C)

Directory Traversal

D)

Website Defacement using SQLi

Correct Answer : Option (B) : Password Guessing

Explanation : The web servers are actually computers running that makes us available & accessible files (web pages) through the internet. Different web server attack types are through DOS attack, website defacement using SQLi and directory traversal.

173 .

Which of the following is not an appropriate countermeasure for web server hacking?

A)

Use low-speed internet

B)

Not to use default configurations

C)

Patch updates need to be done regularly

D)

Use IDS and firewalls with signature updates

Correct Answer : Option (A) : Use low-speed internet

Explanation : To protect against web server hacking, one need to patch updates regularly, not to use default configurations, use IDS and firewalls with signature updates.

174 .

____________ is the anticipation of unauthorized access or break to computers or data by means of wireless networks.

A)

Wired Security

B)

Wireless Access

C)

Wired Device Apps

D)

Wireless Security

Correct Answer : Option (D) : Wireless security

Explanation : Wireless security is the anticipation of unauthorized access or breaks to computers or data by means of wireless networks. The most widespread types of wireless securities are Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA), WPA2 and recently released WPA3.

175 .

Which among them has the strongest wireless security?

A)

WEP

B)

WPA

C)

WPA2

D)

WPA3

Correct Answer : Option (D) : WPA3

Explanation : The most extensive types of wireless securities are Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA), WPA2 and WPA3. WPA3 is the strongest and recently released.

176 .

_______ is an old IEEE 802.11 standard from the year 1999.

A)

WPA

B)

WPA2

C)

WEP

D)

WPA3

Correct Answer : Option (C) : WEP

Explanation : The most widespread types of wireless securities are Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA), WPA2 and WPA3. WEP is an old IEEE 802.11 standard from the year 1999.

177 .

____________ is alike as that of Access Point (AP) from 802.11, & the mobile operators uses it for offering signal coverage.

A)

Transceiver Station

B)

Base Transceiver Station

C)

Base Signal Station

D)

Base Transmitter Station

Correct Answer : Option (B) : Base Transceiver Station

Explanation : Base Transceiver Station (BTS) which is also known as a base station (BS) or radio base station (RBS) is alike as that of Access Point (AP) from 802.11, & the mobile operators use it for offering signal coverage.

178 .

BTS stands for ___________

A)

Base Transceiver Station

B)

Base Transceiver Server

C)

Base Transmitter Station

D)

Basement Transceiver Server

Correct Answer : Option (A) : Base Transceiver Station

Explanation : Base Transceiver Station is a section of equipment which facilitates wireless communication from 802.11 & the mobile operators use it for offering signal coverage. Examples are GSM, 3G, 4G etc.

179 .

__________ is a process of wireless traffic analysis that may be helpful for forensic investigations or during troubleshooting any wireless issue.

A)

WiFi Traffic Sniffing

B)

Wireless Traffic Sniffing

C)

Wireless Traffic Checking

D)

Wireless Transmission Sniffing

Correct Answer : Option (B) : Wireless Traffic Sniffing

Explanation : Wireless Traffic Sniffing is a process of analyzing wireless traffic that may be helpful for forensic investigations or during troubleshooting any wireless issue.

180 .

BIOS Stands For____

A)

Basic Input Output Server

B)

Basic Internet Output Systems

C)

Battery-based Input Output System

D)

Basic Input Output System

Correct Answer : Option (D) : Basic Input Output System

Explanation : BIOS (Basic Input Output System) passwords are next level of security. BIOS is an essential part of your system & comes with it as you bring the computer home where the password gets stored in CMOS which keeps on running even after the PC gets shut down.

181 .

Find out, select & uninstall all ________________ programs from your computer.

A)

utility

B)

useful

C)

unwanted

D)

pre-installed

Correct Answer : Option (C) : unwanted

Explanation : Find out, select & uninstall all unwanted programs from your computer to maintain security. At times, there are some programs that get installed with useful applications as separate programs or as complementary programs. If you’re not using those programs or don’t know about their usage and from where they came, it can be a malware also.

182 .

The ______ is a security app by Microsoft which is a built-in one into Windows OS that is designed to filter network data from your Windows system & block harmful communications or the programs which are initiating them.

A)

Windows app blocker

B)

Windows Security Essentials

C)

Windows Firewall

D)

None of the Above

Correct Answer : Option (C) : Windows Firewall

Explanation : The Windows Firewall is a security app by Microsoft which is a built-in one into Windows OS that is designed to filter network data from your Windows system & block harmful communications or the programs which are initiating them.

183 .

Mobile Phone OS contains open APIs that may be _____ attack.

A)

vulnerable to

B)

easy to

C)

meant for

D)

useful for

Correct Answer : Option (A) : vulnerable to

Explanation : Mobile phone operating systems contain open APIs that or may be vulnerable to different attacks. OS has a number of connectivity mechanisms through which attackers can spread malware.

184 .

___________ is an anti-malware tool found in newer OS which is designed for protecting computers from viruses, spyware & other malware.

A)

Anti-malware

B)

Windows Defender

C)

Norton Antivirus

D)

Microsoft Security Essentials

Correct Answer : Option (B) : Windows Defender

Explanation : Windows Defender is an anti-malware tool found in newer OS which is designed for protecting computers from viruses, spyware & other malware. It comes built-in with Windows 8 & Windows 10.

185 .

___________ is an application which now comes built-in Windows OS & it allows Windows users to encrypt all drive for security purpose.

A)

BitLocker

B)

MSE

C)

MS Office

D)

MS Windows Defender

Correct Answer : Option (A) : BitLocker

Explanation : BitLocker is an application which now comes as built-in Windows OS and it allows Windows users to encrypt all drives for |security purpose. It checks for TPM status whether activated or not.

186 .

_________ is the protection of smart-phones, phablets, tablets, and other portable tech-devices, & the networks to which they connect to, from threats & bugs.

A)

OS Security

B)

Cloud Security

C)

Database Security

D)

Mobile security

Correct Answer : Option (D) : Mobile security

Explanation : Mobile security is the protection of smart-phones, phablets, tablets, and other portable tech-devices, & the networks to which they connect to, from threats & bugs.

187 .

Which of the following is not a security issue for PDAs?

A)

Data theft

B)

Password theft

C)

Reverse engineering

D)

Wireless vulnerability

Correct Answer : Option (C) : Reverse engineering

Explanation : Reverse engineering is not an issue of PDA (Personal Digital Assistant). Password theft, data theft, wireless vulnerability exploitation, data corruption using virus are some of them.

188 .

Which of the following tool is used for Blackjacking?

A)

BBJacking

B)

BBAttacker

C)

BBProxy

D)

Blackburried

Correct Answer : Option (C) : BBProxy

Explanation : BBProxy (installed on blackberry phones) is the name of the tool used to conduct blackjacking. What attackers do is they install BBProxy on user’s blackberry and once the tool is activated it opens a covert channel between the hacker and the compromised host.

189 .

BBProxy tool is used in which mobile OS?

A)

Android

B)

Blackberry

C)

Symbian

D)

Raspberry

Correct Answer : Option (B) : Blackberry

Explanation : BBProxy (installed on blackberry phones) is the name of the tool used to conduct blackjacking. What attackers do is they install BBProxy on user’s blackberry and once the tool is activated it opens a covert channel between the hacker and the compromised host.

190 .

Try not to keep ________________ passwords, especially fingerprint for your smart-phone, because it can lead to physical hacking if youâ€™re not aware or asleep.

A)

Biometric

B)

Short

C)

PIN-based

D)

Alphanumeric

Correct Answer : Option (A) : Biometric

Explanation : Try not to keep biometric passwords, especially fingerprint for your smart-phone containing very confidential data, because anyone can do physical hacking if you’re not aware or asleep.

191 .

Activate _____________ when youâ€™re required it to use, otherwise turn it off for security purpose.

A)

Rotation

B)

Flash Light

C)

App Updates

D)

Bluetooth

Correct Answer : Option (D) : Bluetooth

Explanation : Activate Bluetooth when you’re required it to use, otherwise turn it off for security purpose. This is because; there are various tools and vulnerabilities that may gain access to your smart-phone using Bluetooth.

192 .

Hackers cannot do which of the following after compromising your phone?

A)

Shoulder surfing

B)

Steal your information

C)

Use your app credentials

D)

Accessing your voice mail

Correct Answer : Option (A) : Shoulder surfing

Explanation : Shoulder surfing is done before compromising the mobile. So, hackers can steal your information; accessing your voice mail or use your app credentials after compromising your smart-phone.

193 .

A __________ is a dedicatedly designed chip on an endpoint device which stores RSA encryption keys particular to the host system for the purpose of hardware authentication.

A)

Trusted Platform Mode

B)

Trusted Privacy Module

C)

Trusted Platform Module

D)

Trusted Protocol Module

Correct Answer : Option (C) : Trusted Platform Module

Explanation : A Trusted Platform Module is a dedicatedly designed chip on an endpoint device which stores RSA encryption keys particular to the host system for the purpose of hardware authentication.

194 .

TPM is abbreviated as _________

A)

True Platform Module

B)

Trusted Platform Module

C)

Trusted Privacy Module

D)

Trusted Platform Mode

Correct Answer : Option (B) : Trusted Platform Module

Explanation : Port knocking is quite an esoteric process for preventing session creation through a particular port. Port knocking is not presently used by default in any stack, but soon patches will come to allow the use of knocking protocols.

195 .

___________ are essential because they frequently comprises of critical patches to security holes.

A)

Utility Software

B)

Software updates

C)

System software

D)

Software executables

Correct Answer : Option (B) : Software updates

Explanation : Software updates are essential because they frequently comprise critical patches to security holes. In fact, a lot of harmful malware attacks can be stopped with official updates from vendors.

196 .

The ______________ account and the __________ account have the same file privileges, but their working and functionalities have difference.

A)

group, user

B)

system, user

C)

user, administrator

D)

system, administrator

Correct Answer : Option (D) : system, administrator

Explanation : The system account and the administrator account have the same file privileges, but their working and functionalities have a difference. Actually, the system account is used by the OS & by services which run under Windows. And, administrator account gives the user full control to their files, directories, services.

197 .

Mobile security is also known as __________

A)

Wireless security

B)

OS Security

C)

Cloud security

D)

Database security

Correct Answer : Option (A) : Wireless security

Explanation : Mobile security also known as wireless security is the protection of smart-phones, phablets, tablets, and other portable tech-devices, & the networks to which they connect to, from threats & bugs.

198 .

__________ gets propagated through networks and technologies like SMS, Bluetooth, wireless medium, USBs and infrared to affect mobile phones.

A)

Malware

B)

Worms

C)

Antivirus

D)

Multimedia Files

Correct Answer : Option (A) : Malware

Explanation : Malware gets propagated through networks and technologies like SMS, Bluetooth, wireless medium, USBs and infrared to affect mobile phones.

199 .

__________ is a violent act done using the Internet, which either threatens any technology user or leads to loss of life or otherwise harms anyone in order to accomplish political gain.

A)

Cyber attack

B)

Cyber-warfare

C)

Cyber-terrorism

D)

Cyber campaign

Correct Answer : Option (C) : Cyber-terrorism

Explanation : Cyber- terrorism is the term used to describe internet terrorism, where individuals and groups are anonymously misusing ethnicities, religions as well as threaten any technology user, which may lead to even loss of life.

200 .

These are a collective term for malicious spying programs used for secretly monitoring someoneâ€™s activity and actions over a digital medium.

A)

Malware

B)

Spyware

C)

Keyloggers

D)

Remote Access Trojans

Correct Answer : Option (B) : Spyware

Explanation : Spyware is professional malicious spying software that is hard to detect by anti-malware or anti-virus programs because they are programmed in such a skillful way. These types of software keep on collecting personal information, surfing habits, surfing history as well as credit card details.