FBLA Cyber Security Practice Quiz

Phishing is a deceptive method used by cyber attackers to steal sensitive information by posing as a trustworthy entity. It primarily relies on social engineering tactics to lure victims.

Malware is malicious software intended to damage, disrupt, or gain unauthorized access to computer systems. It includes various types such as viruses, worms, and trojans that pose significant threats.

A firewall acts as a barrier between trusted and untrusted networks by filtering traffic and blocking malicious activity. It is a critical component for protecting systems from unauthorized access.

A strong password includes a variety of characters that makes it difficult to guess or crack. This complexity significantly reduces the risk of unauthorized access to accounts.

Two-factor authentication enhances security by requiring two distinct forms of verification before granting access. This method significantly reduces the risk of account compromise even if one factor is breached.

Symmetric encryption uses a single key for both encryption and decryption, making it efficient for processing large amounts of data. Its simplicity, however, demands secure key management practices.

An IDS is designed to continuously monitor network traffic for anomalies and potential threats, alerting administrators if suspicious activity is detected. This proactive approach is critical for early breach detection.

A DDoS attack floods a target with excessive traffic, thereby overwhelming its resources and rendering it inoperable. This type of attack often leverages multiple compromised systems to execute a coordinated assault.

The CIA Triad represents the foundational principles of cybersecurity: confidentiality, integrity, and availability. These concepts ensure that data remains secret, accurate, and accessible only to authorized individuals.

Risk management consists of identifying vulnerabilities and then taking appropriate steps to mitigate those risks. Implementing countermeasures based on this analysis is essential for protecting systems.

A buffer overflow occurs when a program writes more data to a memory buffer than it is designed to hold. This can lead to unexpected behavior, including the execution of malicious code.

Social engineering exploits human psychology rather than technical vulnerabilities. Attackers manipulate individuals into revealing sensitive information, often by masquerading as a trusted source.

Encryption converts data into a format that is unreadable without the corresponding decryption key. This process is vital for ensuring that data remains confidential even if intercepted during transmission.

Regular software updates often include patches for known security vulnerabilities along with performance improvements. Keeping software up-to-date is crucial for maintaining a secure system.

A VPN creates a secure, encrypted tunnel for all data passing between the user and the internet. This not only protects sensitive information but also masks the user's IP address.

RSA is a widely-used cryptographic algorithm that bases its security on the difficulty of factoring large prime numbers. This inherent complexity makes it a reliable method for secure data transmission.

A zero-day exploit is one that takes advantage of a vulnerability before a patch is available, leaving systems exposed. This makes zero-day attacks particularly dangerous as there is no immediate defense.

A MitM attack involves an attacker intercepting the communication between two parties and possibly altering the information exchanged. This interception can lead to data theft or manipulation without the parties knowing.

Worms are capable of self-replication and can spread autonomously across networks without any user involvement. In contrast, viruses typically need some form of human action to propagate.

A robust network security architecture incorporates multiple defense layers to mitigate various threats. This layered approach ensures that if one security measure fails, others continue to provide protection.