Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Multiple Choice Questions
Q351: What distinguishes an attack from a threat?
- A: An attack is an actual event that compromises security, while a threat is a potential danger
- B: A threat is a deliberate act, while an attack is a potential danger
- C: A threat is a security mechanism, while an attack is a vulnerability
- D: A threat and an attack are synonymous
View Answer
A
Q352: What is a characteristic of active attacks?
- A: They involve modifying data or creating false data streams
- B: They involve monitoring transmissions
- C: They involve preventing access to data
- D: They involve capturing data without altering it
View Answer
A
Q353: Which of the following is not a category of active attacks?
- A: Replay
- B: Modification of messages
- C: Denial of service
- D: Traffic analysis
View Answer
D
Q354: What does a masquerade attack involve?
- A: Monitoring transmissions
- B: Modifying legitimate messages
- C: Pretending to be a different entity
- D: Creating false data streams
View Answer
C
Q355: In a replay attack, what is the attacker’s goal?
- A: To modify messages
- B: To capture and retransmit data to produce an unauthorized effect
- C: To prevent access to data
- D: To eavesdrop on communications
View Answer
B
Q356: Which of the following best describes modification of messages?
- A: Altering a legitimate message or delaying/reordering it
- B: Preventing the use of communications facilities
- C: Monitoring data transmissions
- D: Attempting to bypass security controls
View Answer
A
Q357: What is the aim of a denial of service attack?
- A: To monitor and capture data transmissions
- B: To alter the content of messages
- C: To prevent or inhibit the normal use of communications facilities
- D:
View Answer
D
Q358: What is a passive attack primarily concerned with?
- A: Modifying data streams
- B: Monitoring transmissions without altering them
- C: Preventing access to data
- D: Creating false data streams
View Answer
B
Q359: Which technique can be used to prevent passive attacks?
- A: Encryption
- B: Replay
- C: Modification of messages
- D: Denial of service
View Answer
A
Q360: What is a common prevention method against active attacks?
- A: Encryption
- B: Detection and recovery
- C: Blocking data streams
- D: Monitoring traffic
View Answer
B