Cybersecurity Quiz

Question 1

What is 'phishing' in cybersecurity?

Accepted Answer

A fraudulent attempt to obtain sensitive information by disguising as a trustworthy entity — typically via email

Answer

Searching through network traffic for passwords

Answer

Installing keylogging software on a target's computer

Answer

Intercepting WiFi signals at a public location

Question 2

What is a 'zero-day vulnerability'?

Accepted Answer

A software vulnerability that is unknown to the vendor and has no available patch — attackers can exploit it from day zero

Answer

A security flaw that takes zero days to exploit

Answer

A vulnerability only discovered on the first day a product is released

Answer

A type of vulnerability that zeroes out (deletes) all data

Question 3

The 2017 WannaCry ransomware attack affected 200,000+ computers in 150 countries. What exploited vulnerability did it use?

Accepted Answer

EternalBlue — an NSA-developed Windows exploit leaked by Shadow Brokers

Answer

An Apple iOS flaw

Answer

A Linux kernel vulnerability

Answer

A Google Chrome browser zero-day

Question 4

What is 'two-factor authentication' (2FA) and why is it important?

Accepted Answer

A security method requiring two forms of verification — something you know (password) plus something you have (phone code) or are (biometric)

Answer

Using two different passwords for the same account

Answer

Logging in from two different devices simultaneously

Answer

Having two separate email accounts for security purposes

Question 5

What does 'HTTPS' protect compared to 'HTTP'?

Accepted Answer

HTTPS encrypts data in transit using TLS, preventing eavesdropping and tampering; HTTP sends data in plain text

Answer

HTTPS is faster than HTTP

Answer

HTTPS blocks malware; HTTP allows it

Answer

HTTPS only works on mobile devices

Question 6

What is 'social engineering' in cybersecurity?

Accepted Answer

Manipulating people psychologically to reveal confidential information or take actions that compromise security — exploiting human behaviour rather than technical vulnerabilities

Answer

Building social networks for technical teams

Answer

Engineering social media platforms for maximum engagement

Answer

A branch of computer science studying social networks

Question 7

What is a 'DDoS attack'?

Accepted Answer

Distributed Denial of Service — flooding a target server with so much traffic from many sources that it becomes unavailable

Answer

A virus that deletes data from a server

Answer

Distributed Denial of Service — flooding a target server with so much traffic from many sources that it becomes overwhelmed and unavailable

Answer

A targeted intrusion into a specific user's account

Answer

Decrypting and stealing encrypted data from a server

Question 8

What is end-to-end encryption (E2EE), used by apps like Signal and WhatsApp?

Accepted Answer

Encryption where only the communicating parties can read messages — not the service provider, not anyone intercepting the data

Answer

Encryption that protects data only at the server

Answer

Encryption that prevents emails from being forwarded

Answer

A system where messages are encrypted by the sender's device only

Question 9

What is a 'VPN' and what does it protect?

Accepted Answer

A Virtual Private Network — encrypts internet traffic and routes it through a server, masking your IP address and protecting data on public networks

Answer

A Very Private Network — a firewall for home computers

Answer

A Verified Personal Network — an internet connection certified as secure by the government

Answer

A system for blocking advertisements online

Question 10

The 2013 NSA PRISM surveillance programme was revealed by which whistleblower?

Accepted Answer

Edward Snowden

Answer

Julian Assange

Answer

Chelsea Manning

Answer

Reality Winner

Question 11

What is 'ransomware' and how do most attacks demand payment?

Accepted Answer

Malware that encrypts a victim's files, then demands payment (usually cryptocurrency) to provide the decryption key

Answer

Software that makes a computer run slowly until it's repaired

Answer

A type of virus that randomly deletes files

Answer

Software that locks the screen until a subscription is paid

Question 12

What is 'SQL injection' — one of the most common web application vulnerabilities?

Accepted Answer

Inserting malicious SQL code into an input field to manipulate a database — potentially exposing, modifying, or deleting data

Answer

Injecting physical substances into SQL server hardware

Answer

A technique for speeding up database queries

Answer

A method of compressing SQL databases for storage

Question 13

What is a 'botnet' in cybersecurity?

Accepted Answer

A network of compromised computers ('bots') controlled by attackers, used for DDoS attacks, spam, cryptocurrency mining, and more

Answer

A network of robots used in manufacturing

Answer

A company's internal network of chatbots

Answer

Software robots that automatically test websites for security flaws

Question 14

What does 'GDPR' stand for and what did it establish?

Accepted Answer

General Data Protection Regulation — an EU law giving citizens rights over their personal data

Answer

Global Digital Privacy Rights — an international treaty

Answer

Government Data Privacy Regulation — a US federal law

Answer

General Digital Platform Rules — an EU competition law

Question 15

What is the 'dark web' and how is it typically accessed?

Accepted Answer

A network of websites accessible only through the Tor browser, not indexed by search engines, offering anonymity

Answer

Websites with a dark colour scheme

Answer

The internet at night when fewer users are active

Answer

Illegal content hosted on regular websites

Question 16

What is 'multi-factor authentication' and why is SMS-based 2FA considered relatively weak?

Accepted Answer

SMS codes can be intercepted via SIM-swapping attacks (convincing carriers to transfer a phone number) or SS7 network vulnerabilities

Answer

SMS 2FA is actually the most secure form

Answer

SMS 2FA is weak because it requires a data connection

Answer

SMS codes expire too quickly to be practically useful

Question 17

The Solar Winds hack (2020) is considered one of the most sophisticated cyber attacks ever. What did it target?

Accepted Answer

A widely-used IT management software that, once compromised, gave attackers backdoor access to thousands of government and corporate networks

Answer

Solar panel companies' systems

Answer

NASA's solar observation satellites

Answer

Stock market trading systems for renewable energy companies

Question 18

What is 'ethical hacking' (penetration testing)?

Accepted Answer

Authorised security testing of systems to identify vulnerabilities before malicious hackers do — also called 'pen testing'

Answer

Hacking only for educational purposes, never for financial gain

Answer

Hacking only government systems under FOIA requests

Answer

A career path where hackers are reformed and employed by cybersecurity firms

Question 19

What is 'cryptography' at its most basic level?

Accepted Answer

The science of secure communication — transforming readable data (plaintext) into an unreadable format (ciphertext) that only authorised parties can decode

Answer

The study of ancient encrypted texts

Answer

A cryptocurrency mining technique

Answer

The mathematics of computer processing speeds

Question 20

What is the 'principle of least privilege' in cybersecurity?

Accepted Answer

Users and systems should be granted only the minimum access rights needed to perform their specific tasks — nothing more

Answer

Only privileged users should use computers

Answer

The least experienced team members should handle security tasks to build their skills

Answer

Passwords should be as short and simple as possible for usability