CS627 Final Term MCQs File 2 by DL

Course Code: CS627 Cyber Security Finalterm File # 2 (Week No. 7-15)

Q1. Which command would you use to perform a basic Nmap scan against a host?

1. nmap -sV
2. nmap -Pn 192.168.1.1
3. nmap -sn 192.168.1.1

Q2. What does the -A flag in Nmap do?

1. Performs a stealth scan
2. Activates several popular options
3. Scans for open ports only
4. Disables DNS resolution

Correct answer: Activates several popular options

Q3. Which of the following is NOT a benefit of using Nmap?

1. Open source
2. Paid software
3. Available on multiple platforms
4. Large community support

Correct answer: Paid software

Q4. What type of scan does the -sn flag perform in Nmap?

1. Port scan
2. only Host discovery
3. OS detection
4. Service version detection

Correct answer: only Host discovery

Q5. Which of the following tools is used for comparing results of two Nmap scans?

1. Ncat
2. Ndiff
3. Zenmap
4. Nessus

Correct answer: Ndiff

Q6. Which organization provides the DISA STIGs?

1. National Institute of Standards and Technology
2. Defense Information Systems Agency
3. Center for Internet Security
4. Federal Trade Commission

Correct answer: Defense Information Systems Agency

Q7. What is the main goal of implementing CIS benchmarks?

1. To increase software performance
2. To limit configuration-based security vulnerabilities
3. To enhance user experience
4. To reduce operational costs

Correct answer: To limit configuration-based security vulnerabilities

Q8. Which of the following is a characteristic of CAT 1 controls in DISA STIGs?

1. Low risk vulnerabilities
2. Mandatory for compliance
3. Optional recommendations
4. Non-critical vulnerabilities

Correct answer: Mandatory for compliance

Q9. What does the acronym STIG stand for?

1. Security Technical Implementation Guide
2. Security Technology Integration Guide
3. System Technical Implementation Guide
4. Security Tool Integration Guide

Correct answer: Security Technical Implementation Guide

Q10. Which of the following is a benefit of using CIS-CAT Pro Assessor?

1. Manual configuration checks
2. Automated evaluation against CIS benchmarks
3. Only available for Windows systems
4. Requires extensive programming knowledge

Correct answer: Automated evaluation against CIS benchmarks

Q11. Which of the following is a characteristic of a Trojan horse?

1. It self-replicates
2. It disguises itself as legitimate software
3. It only affects mobile devices
4. It is a type of antivirus

Correct answer: It disguises itself as legitimate software

Q12. What is the primary function of spyware?

1. To encrypt files
2. To monitor user activity and collect information
3. To spread to other computers
4. To manage network traffic

Correct answer: To monitor user activity and collect information

Q13. Which malware type is known for displaying fake security alerts?

1. Ransomware
2. Adware
3. Scareware
4. Spyware

Correct answer: Scareware

Q14. How does a biological virus compare to a computer virus?

1. Both inject genetic material into a living cell
2. Both replicate themselves once inside the host
3. Both rely on human interaction to spread
4. Both are harmless and do not perform any tasks

Correct answer: Both replicate themselves once inside the host

Q15. What is the primary purpose of a backdoor in malware?

1. To encrypt files
2. To provide unauthorized access to a system
3. To monitor user activity
4. To manage network traffic

Correct answer: To provide unauthorized access to a system

Q16. Which of the following is a feature of WPA3?

1. Uses TKIP for encryption
2. Requires specialized hardware
3. Provides improved security for open networks
4. Is not backward compatible

Correct answer: Provides improved security for open networks

Q17. What is the role of the Wi-Fi Alliance?

1. To develop new wireless standards
2. To certify products for Wi-Fi interoperability
3. To manage network traffic
4. To provide technical support

Correct answer: To certify products for Wi-Fi interoperability

Q18. What does the term "SSID" stand for?

1. Secure Service Identifier
2. Service Set Identifier
3. Standard Service Identifier
4. Secure Set Identifier

Correct answer: Service Set Identifier

Q19. Which of the following is a recommended practice for securing wireless networks?

1. Disable SSID broadcast
2. Use default passwords
3. Place access points near windows
4. Allow all MAC addresses

Correct answer: Disable SSID broadcast

Q20. What is the primary function of the 802.11i standard?

1. To define physical layer specifications
2. To enhance wireless security mechanisms
3. To manage network traffic
4. To provide basic network access

Correct answer: To enhance wireless security mechanisms

Q21. What is one of the primary defenses against buffer overflow attacks?

1. Using older programming languages
2. Implementing executable address space protection
3. Ignoring input validation
4. Using unencrypted data

Correct answer: Implementing executable address space protection

Q22. What does SQL Slammer primarily cause?

1. Data theft
2. Denial of service
3. Data encryption
4. Data corruption

Correct answer: Denial of service

Q23. What is the main consequence of a buffer overflow attack?

1. Increased system performance
2. Corruption of program data

Correct answer: Corruption of program data