5.3 Cyber Security (ATTACKS)

Question 1

What is a brute-force attack?

Answer 1

A hacking method that uses trial-and-error to crack passwords, login credentials, or encryption keys.

Question 2

How does a brute-force attack work?

Answer 2

By systematically trying every possible combination of letters, numbers, and symbols until the correct one is found

Question 3

Why is brute-force still effective on weak passwords?

Answer 3

Because common or short passwords are tried first.

Question 4

Name five commonly used passwords attackers try first.

Answer 4

123456, password, qwerty, 111111, abc123.

Question 5

What is a word list in brute-force attacks?

Answer 5

A text file containing common words used to reduce the number of attempts.

Question 6

Why is a word-list attack faster than full trial-and-error?

Answer 6

Because common passwords are more likely to be found earlier

Question 7

What is data interception?

Answer 7

Stealing data by tapping into a wired or wireless communication link without authorisation.

Question 8

How is data intercepted in wired networks?

Answer 8

Using a packet sniffer.

Question 9

What does a packet sniffer do?

Answer 9

Examines data packets sent over a network and sends them to the hacker

Question 10

How is data intercepted in wireless networks?

Answer 10

Using wardriving (access point mapping).

Question 11

What equipment is used in wardriving?

Answer 11

Laptop/smartphone, antenna, GPS device, and software

Question 12

Why is wardriving dangerous?

Answer 12

It allows hackers to steal personal data without the user’s knowledge

Question 13

How can data interception be prevented?

Answer 13

Using WEP encryption, firewalls, and complex router passwords.

Question 14

What is a Denial of Service (DoS) attack?

Answer 14

Sending many requests from one computer to overload a server

Question 15

What is the effect of a DoS attack?

Answer 15

The server crashes, slows down, or fails to respond.

Question 16

What is a Distributed Denial of Service (DDoS) attack?

Answer 16

Multiple computers (bots) flood a server with requests simultaneously.

Question 17

Why is a DDoS attack more dangerous than a DoS attack?

Answer 17

It comes from multiple locations and is harder to block.

Question 18

What services can a DoS/DDoS attack prevent access to?

Answer 18

Emails, websites, and online services such as banking.

Question 19

What is the purpose of DoS/DDoS attacks?

Answer 19

To disrupt the operation of a web server or network.

Question 20

Why does a DDoS attack prevent website access?

Answer 20

The server is flooded with traffic and crashes or halts

Question 21

How can a DDoS attack target email accounts?

Answer 21

By sending大量 spam emails until the mailbox quota is full.

Question 22

State three signs of a DoS/DDoS attack

Answer 22

Slow network, inaccessible websites, large amounts of spam emails.

Question 23

What devices help prevent DoS/DDoS attacks?

Answer 23

Firewall or proxy server.

Question 24

State four prevention methods for DoS/DDoS attacks.

Answer 24

Firewall, proxy server, up-to-date malware checker, email filters

Question 25

What is hacking?

Answer 25

Gaining unauthorised access to a computer system or data

Question 26

State four effects of hacking.

Answer 26

Identity theft, data deletion, data corruption, data alteration

Question 27

Q: Name five methods to prevent hacking.

Answer 27

A: Firewalls, strong passwords, biometrics, two-step verification, anti-hacking software.

Question 28

Q: Why does encryption not stop hacking?

Answer 28

A: Hackers can still access and modify data, but cannot understand it without a key.

Question 29

Q: What is ethical hacking?

Answer 29

A: Legal hacking done with permission to test system security.

Question 30

Q: How is ethical hacking different from malicious hacking?

Answer 30

A: Ethical hacking is authorised and legal; malicious hacking is illegal.

Question 31

Q: What is malware?

Answer 31

A: Software designed to damage data or disrupt a computer system.

Question 32

Q: How can malware enter a system?

Answer 32

A: USB devices, suspicious websites, outdated OS, downloaded files, buffer overflow.

Question 33

Q: How can malware effects be restricted?

Answer 33

A: Strong passwords, logging off, not sharing passwords, anti-malware software.

Question 34

Q: What is a virus?

Answer 34

A: Malicious software that replicates itself and damages or deletes data.

Question 35

Q: Why does a virus need a host program?

Answer 35

A: It must attach to an active program or infected OS to run.

Question 36

Q: State three effects of a virus.

Answer 36

A: Crashes system, deletes data, corrupts files.

Question 37

Q: How can viruses be prevented?

Answer 37

A: Anti-virus software, firewall/proxy server, restricted access.

Question 38

Q: What is a worm?

Answer 38

A: Malware that replicates itself automatically using a network.

Question 39

Q: How is a worm different from a virus?

Answer 39

A: A worm does not need a host program.

Question 40

Q: State four effects of worms.

Answer 40

A: Corrupt data, delete files, consume bandwidth, overload servers.

Question 41

Q: What is a Trojan horse?

Answer 41

A: Malware disguised as legitimate software.

Question 42

Q: State three effects of a Trojan horse.

Answer 42

A: Data theft, file deletion, identity theft.

Question 43

Q: What is adware?

Answer 43

A: Malware that displays unwanted advertisements.

Question 44

Q: State two effects of adware.

Answer 44

A: Slows system, installs spyware or viruses.

Question 45

Q: What is ransomware?

Answer 45

A: Malware that encrypts files and demands payment to unlock them.

Question 46

Q: State two effects of ransomware.

Answer 46

A: Financial loss, damage to reputation.

Question 47

Q: What is spyware?

Answer 47

A: Malware that records user activity, including key presses.

Question 48

Q: How does keylogging spyware work?

Answer 48

A: Records keystrokes and sends data to a third party.

Question 49

Q: How can spyware be prevented?

Answer 49

A: Biometrics, firewall/proxy server, anti-spyware software.

Question 50

Q: Why do on-screen keyboards defeat spyware?

Answer 50

A: No physical keys are pressed.

Question 51

Q: What is pharming?

Answer 51

A: Redirecting users from a real website to a fake one.

Question 52

Q: One key difference between phishing and pharming?

Answer 52

A: Phishing uses emails; pharming uses malicious code.

Question 53

Q: What is social engineering?

Answer 53

A: Manipulating people into revealing information by exploiting emotions.

Question 54

Q: Name three emotions exploited in social engineering.

Answer 54

A: Fear, curiosity, trust.