Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 18
Q361:
What is the primary goal of traffic analysis in passive attacks?
A. To modify message contents
B. To observe patterns in message traffic and infer information
C. To alter data streams
D. To prevent data capture
Correct Answer:
B
Chapter: 18
Q362:
What does a bot do in a malicious code attack?
A. Collects information about users without their knowledge
B. Executes commands based on specific inputs
C. Delivers advertising banners to users
D. Provides encryption for data protection
Correct Answer:
B
Chapter: 18
Q363:
What is an example of a covert software application?
A. Bot
B. Spyware
C. Adware
D. All of the above
Correct Answer:
D
Chapter: 18
Q364:
Which of the following is not a vector used by the polymorphic worm Nimda?
A. Web browsing
B. IP scan and attack
C. Unprotected shares
D. Dictionary attack
Correct Answer:
D
Chapter: 18
Q365:
What is the purpose of a back door in a system?
A. To gain unauthorized access through a hidden mechanism
B. To prevent access by legitimate users
C. To monitor user activities
D. To encrypt sensitive data
Correct Answer:
A
Chapter: 18
Q366:
What is a password cracking attack?
A. An attempt to reverse-calculate a password using known data
B. A method to create strong passwords
C. An attempt to block unauthorized access
D. An attack using encryption techniques
Correct Answer:
A
Chapter: 18
Q367:
What distinguishes a brute force attack from other types of attacks?
A. It involves trying every possible password combination
B. Using a dictionary of common passwords
C. Exploiting known vulnerabilities
D. Monitoring network traffic
Correct Answer:
A
Chapter: 18
Q368:
What type of attack uses a list of commonly used passwords?
A. Brute force attack
B. Dictionary attack
C. Replay attack
D. Malicious code attack
Correct Answer:
B
Chapter: 18
Q369:
How can organizations protect against brute force attacks?
A. By limiting the number of unsuccessful access attempts
B. By monitoring traffic patterns
C. By encrypting data transmissions
D. By altering message contents
Correct Answer:
A
Chapter: 18
Q370:
What is the focus of a dictionary attack?
A. Using random password combinations
B. Utilizing a list of commonly used passwords
C. Modifying system configurations
D. Blocking unauthorized access
Correct Answer:
B
Chapter: 19
Q371:
What is the main goal of a denial-of-service (DoS) attack?
A. To steal sensitive information
B. To overload a system with requests
C. To intercept network packets
D. To modify data transmissions
Correct Answer:
B
Chapter: 19
Q372:
In a distributed denial-of-service (DDoS) attack, what is used to launch the attack?
A. A single compromised system
B. A coordinated stream of requests from many locations
C. A single large packet
D. An encrypted communication stream
Correct Answer:
B
Chapter: 19
Q373:
What is the primary difference between DoS and DDoS attacks?
A. DoS attacks use many systems, while DDoS attacks use only one
B. DoS attacks involve a single source of attack, while DDoS involves multiple sources
C. DDoS attacks are less harmful than DoS attacks
D. DoS attacks use encryption, while DDoS does not
Correct Answer:
B
Chapter: 19
Q374:
What technique does spoofing use to gain unauthorized access?
A. Using forged source IP addresses
B. Intercepting encryption keys
C. Overloading a network with requests
D. Monitoring network traffic
Correct Answer:
A
Chapter: 19
Q375:
In a man-in-the-middle attack, what does the attacker do?
A. Monitors, modifies, and inserts packets into the network
B. Forwards packets without alteration
C. Overloads the target system with requests
D. Intercepts encryption keys to decrypt communications
Correct Answer:
A
Chapter: 19
Q376:
What is spam primarily used for?
A. Overloading a system with requests
B. Collecting sensitive information
C. Enhancing malicious code attacks
D. Modifying data transmissions
Correct Answer:
C
Chapter: 19
Q377:
What does mail bombing achieve?
A. Overloading an email system with large quantities of mail
B. Intercepting sensitive data from email communications
C. Modifying email contents
D. Preventing unauthorized access to email accounts
Correct Answer:
A
Chapter: 19
Q378:
What is a common method for dealing with spam?
A. Using email filtering technologies
B. Modifying email headers
C. Encrypting email contents
D. Blocking unauthorized IP addresses
Correct Answer:
A
Chapter: 19
Q379:
What is a sniffer used for?
A. Monitoring network data transmissions
B. Modifying network packets
C. Overloading a network with requests
D. Encrypting network communications
Correct Answer:
A
Chapter: 19
Q380:
What does social engineering typically involve?
A. Using social skills to obtain access credentials or information
B. Intercepting network packets
C. Overloading a system with requests
D. Encrypting sensitive data
Correct Answer:
A