Quiz
1.5 - System Security & Malware Quiz
This quiz has a time limit, so it opens in the usual player.
Questions in this quiz (16)
1Fill in the Blanks: The definition for a type of Malware is below.
A [blank_start]worm[blank_end] is similar to a virus as they [blank_start]copy[blank_end] themselves, but the user doesn't have to do anything for them to multiply. It often sends [blank_start]emails[blank_end] to all addresses saved to spread itself.- Aworm
- Btrojan
- Ccopy
- Ddelete
- Eedit
- Finfected emails
- Gdata
- Hharmless emails
- Ispyware
2Select all the characteristics of Trojan Viruses.
- AIt pretends to be a legitimate program.
- BIt is a form of malware.
- CIt is a form of spyware.
- DIt sends infected emails to all email addresses saved.
- EIt is a way of encrypting data to stop viruses.
3True or False: Spyware is usually considered conspicuous / easy to discover.
- ATrue
- BFalse
4Fill in the Blanks: The definition for a Virus is below.
Attach themselves to [blank_start]files[blank_end] and copy themselves when the user copies or opens a file. It can [blank_start]delete[blank_end] your files or slow your device down.- Afiles
- Bdelete
5Complete the definitions of some types of attacks below.
Passive - Network traffic is monitored, [blank_start]then data is intercepted[blank_end].
Active - Someone [blank_start]deliberately[blank_end] attacks a network with malware.
Insider - Someone with [blank_start]network access[blank_end] abuses this to steal data.- Athen data is intercepted
- Bthen data is modified
- Cdeliberately
- Daccidentally
- Epassively
- Fnetwork access
- Ga fake identity
6Select all the types of attacks that have correct definitions.
- AInsider: When a person manipulates someone else into handing over personal data.
- BDoS: Network is flooded with useless data to slow the network down to an unusable level.
- CBrute Force: Trial and error until a password is attack.
- DPhishing: Emails with links that trick people into entering their personal data.
- ESocial Engineering: Someone with network access abuses this to steal data.
7Fill in the Blanks: The definition of SQL Injection is below.
SQL [blank_start]commands[blank_end] are typed into the input boxes on [blank_start]websites[blank_end] to access data / [blank_start]alter the database[blank_end].- Acommands
- Binjections
- Cedit the database
- Ddelete the database
- Erun SQL commands
- Fdatabases
- Gwebsites
- Hdatabases
- Idevices
8Select the method of countering Brute Force attacks.
- AMaking passwords difficult to guess & locking accounts after X failed attempts.
- BMaking passwords easy to guess & opening accounts after X failed attempts.
- CMaking passwords easy to guess & locking accounts after X failed attempts.
- DMaking passwords difficult to guess & opening accounts after X failed attempts.
9Fill in the Blanks: Match the types of attack to the methods to counter them.
[blank_start]Active[blank_end] - A firewall & antivirus software.
[blank_start]DoS[blank_end] - Difficult to defend, but a firewall can help.
[blank_start]Phishing[blank_end] - Looking for signs that an email isn't from a real person / company.- AActive
- BPassive
- CDoS
- DSQL Injection
- EPhishing
10Fill in the Blanks: The counters of 2 types of attacks are detailed below.
Social Engineering: Policies and rules for [blank_start]staff[blank_end] about handing over data & [blank_start]training[blank_end] staff.
Insider: [blank_start]User access levels[blank_end] to control how much data people can access.- Astaff
- Btraining
- CUser access levels
11True or False: A way to defend against SQL Injections are having strong validation on all input boxes so that only expected data can be entered.
- ATrue
- BFalse
12What is the important difference between defending against Passive and Active attacks?
- APassive requires encryption, which doesn't help defend well against Active attacks.
- BPassive attacks use viruses to defend, while active attacks are viruses.
- CActive attacks don't need an antivirus software, as opposed to Passive attacks.
- DActive requires encryption, whereas passive attacks need a firewall.
13True or False: Malware is malicious software intended to cause harm.
- ATrue
- BFalse
14Fill in the Blanks: The definition of Penetration Testing is below.
Organisations employ professionals to try and hack [blank_start]their[blank_end] network so that they can find areas of [blank_start]weakness[blank_end].- Atheir
- Bweakness
15Which of the following statements accurately describe the definition for Encryption?
- AData is scrambled so that it cannot be understood if intercepted. It can only
be decrypted with the correct key. - BData is edited so that if its intercepted, it spreads a virus.
- CData is repeatedly copied and pasted into the same database to overclock the server.
- AData is scrambled so that it cannot be understood if intercepted. It can only
16Fill in the Blanks: The definitions for Network Forensics and User Access Levels are below.
[blank_start]Network Forensics[blank_end] - Data packets are captured as they enter the [blank_start]network[blank_end] and [blank_start]analysed[blank_end] to find out the cause of a network attack.
[blank_start]User Access Levels[blank_end] - Different employees have [blank_start]different[blank_end] levels of access to programs, [blank_start]websites[blank_end] and data.- ANetwork Forensics
- BUser Access Levels
- Cdifferent
- Dthe same
- Ewebsites
- Flevels
- Gnetwork
- Hdatabase
- Ianalysed
- Jdeleted
Information
- Description
- 18 minutes to complete the 36 mark quiz. All information is in my mind-map named the same thing (just minus the 'Quiz'). Good luck!
- Author
- Josh Burnett
- Language
- English
- Views
- 1
- History
- Created on 23 Mar 2025 · updated on 24 Mar 2025
- Tags
- Rating
- No ratings yet Rate this quiz