Which of the following is a type of cyber attack that involves tricking users into revealing sensitive information?
- A.Phishing attack
- B.SQL injection attack
- C.DoS attack
- D.None of the above
Correct answer
Explanation
The correct answer is A, phishing attack. Phishing sends a message that looks as if it came from a bank, an employer or a government office, and asks the reader to confirm a password, a card number or a one-time password on a page that belongs to the attacker; the target of the attack is the person, not the machine, which is why it is classed as social engineering. Option B is wrong because SQL injection puts database commands into a web form to make the server reveal stored data; the user is not tricked at all. Option C is wrong because a denial of service attack floods a server with requests so that genuine users cannot reach it, which harms availability and steals nothing. Option D is wrong because option A is correct. Remember the family: spear phishing on one person, whaling on an executive, vishing by call, smishing by message.
Read the full article: Cyber Security and Threats: Malware, Attacks and PYQs
Practice Questions
View allWhat is the purpose of a firewall in cyber security?
- A.To allow unrestricted access to a network
- B.To block unauthorised access to a network
- C.To create a backup of a network's data
- D.None of the above
Show answer
A firewall sits between a trusted internal network and the untrusted world outside, inspects the traffic crossing it and permits only what its rules allow, dropping the rest; it may be a hardware appliance, a software program or both together.
Read the full explanation →What is the term for a cyber security attack that targets multiple interconnected devices simultaneously to create a large-scale attack network?
- A.DDoS attack
- B.Botnet attack
- C.Zero-day attack
- D.Spear phishing attack
Show answer
A botnet is built by infecting many connected devices, each of which becomes a zombie obeying a single controller; the network so assembled is then rented out or used for spam, fraud or a flood of traffic.
Read the full explanation →The feature(s) of cyber security is/are:
- A.Compliance
- B.Defence against internal threats
- C.Threat prevention
- D.All of the above
Show answer
The correct answer is D, all of the above, because cyber security is not one activity but a programme that covers all three.
Read the full explanation →In the CIA triad of information security, the letter I stands for:
- A.Identification
- B.Integrity
- C.Internet
- D.Isolation
Show answer
The triad names the three goals of information security: confidentiality, that only authorised people can read the data; integrity, that the data is complete and unaltered from the moment it was created or sent; and availability, that the system works when an authorised user needs it.
Read the full explanation →Which type of malware is a stand-alone program that replicates itself across a network without attaching to a host file?
- A.Virus
- B.Worm
- C.Trojan horse
- D.Adware
Show answer
A worm carries its own code, finds other machines through the network and copies itself to them without any help from the user, which is why worms can spread across the world in hours.
Read the full explanation →