Cybersecurity Quiz & Flashcards

A firewall is designed to filter traffic based on security rules; it does not encrypt data or manage user accounts.

Phishing involves deception to steal information by impersonating legitimate entities; it is not about encrypting data or disrupting services.

Zero-day vulnerabilities are exploited before the vendor has issued a patch; it is not about universal flaws or frequent updates.

Two-factor authentication enhances security by requiring two verification forms, not by encrypting messages or blocking traffic.

Black hats engage in illegal hacking, while white hats ethically find and fix vulnerabilities.

An IDS monitors network traffic for threats, not for encryption, permission management, or backups.

Load balancing and anti-DDoS tools help manage traffic during attacks; encryption and user policies do not directly address DDoS.

Ransomware encrypts files and demands payment; it is distinct from theft, disruption, or monitoring.

A honeypot is a decoy system for studying attacker behavior, not for data storage, traffic management, or monitoring usage.

Spear phishing targets specific individuals using personal details, unlike random attacks or software exploits.

Backups enable data restoration without ransom, unlike encryption, monitoring, or permission management.

Digital certificates verify identity and secure data, not for antivirus updates, encryption, or access management.

APTs are long-term, undetected attacks, unlike short-term thefts or outdated software exploits.

Complex passwords are harder to crack, enhancing security, not simplifying management or reducing memory.

Patch management applies updates to fix security vulnerabilities, not for backups, monitoring, or encryption.

Botnets control compromised systems for attacks, unlike encryption, monitoring, or password management.

Symmetric encryption uses one key for both processes; asymmetric uses two keys, unlike speed or security assumptions.

CIA triad refers to Confidentiality, Integrity, and Availability, not the other combinations.

Cyber resilience is about recovering from attacks, not just encryption, threat prevention, or monitoring.

Security tokens authenticate users, not for data encryption, traffic management, or system monitoring.

SQL injection involves malicious code in queries, not encryption, performance monitoring, or user management.

Viruses need host files to spread, unlike worms, which operate independently.

Cyber forensics focuses on evidence collection and analysis, not encryption, access management, or traffic monitoring.

Network monitoring detects access attempts, not for encryption, password policy management, or backups.

ACLs define user access rights, unlike encryption, traffic management, or performance monitoring.

CISOs focus on security strategy, not encryption, IT management, or backups.

MFA requires multiple verifications, not just encryption, monitoring, or password enforcement.

A security audit evaluates vulnerabilities, not for encryption, credential management, or performance optimization.

Spyware collects information without consent, unlike encryption, traffic monitoring, or access management.

Risk management focuses on controlling risks, not just encryption, monitoring, or updates.

DoS attacks aim to disrupt service availability, not for theft, encryption, or performance monitoring.

Network segmentation limits attack spread, not for encryption, monitoring, or simplifying configuration.

Least privilege limits access rights, not about encryption, monitoring, or frequent backups.

Threat intelligence informs about attacks, not for encryption, permission management, or traffic optimization.

Brute force attacks try all password combinations, unlike targeted attacks, encryption, or monitoring.

Cyber hygiene focuses on system health, not just encryption, monitoring, or updates.

Cybersecurity analysts monitor and protect networks, not just encrypt data, manage access, or back up systems.

Antivirus is often mistakenly viewed as a complete solution, but it should be part of a layered strategy.

Updating patches vulnerabilities, not for encryption, access management, or performance monitoring.

Cyber forensics focuses on evidence collection and analysis, unlike data encryption, credential management, or traffic monitoring.

Encryption secures data by coding it, not by monitoring, managing permissions, or backing up data.

Educated users are less vulnerable to attacks like social engineering; education doesn't directly encrypt or manage data.

A data breach involves unauthorized data access or disclosure; it is not about encryption, monitoring, or updates.

Ethical hacking finds and fixes vulnerabilities, not for encryption, performance management, or compliance monitoring.

Incident response teams manage and mitigate incidents, not for encryption, permission management, or maintenance.

Malware is harmful software, not for resource management, encryption, or monitoring.

VPNs encrypt connections for privacy, not for access management, traffic monitoring, or speed optimization.

Security policies offer guidelines for security, not for encryption, monitoring, or updates.

Threat intelligence aids in decision-making, not for encryption, credential management, or performance monitoring.

Social engineering manipulates individuals, not for encryption, resource management, or performance monitoring.

DoS attacks disrupt service availability, not for theft, ransom, or performance monitoring.

Viruses need host files to spread, unlike worms which operate independently.

Botnets control systems for attacks, not for encryption, permission management, or traffic monitoring.

ACLs define resource access rights, not for encryption, activity monitoring, or managing updates.

Digital certificates verify identity, not for encryption, access management, or performance monitoring.

Security tokens authenticate identities, not for data encryption, traffic management, or performance monitoring.