MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which component of the CIA triad is directly affected by a Denial of Service (DoS) attack?
   a. Confidentiality
   b. Integrity
   c. Availability
   d. Non-repudiation
   Answer: c. Availabilitysciencedirect+1
2. What is the primary goal of a ransomware attack in the context of the CIA triad?
   a. Breach confidentiality
   b. Disrupt system availability
   c. Tamper with data integrity
   d. Achieve data redundancy
   Answer: b. Disrupt system availabilitytwingate+1
3. Which technology is most commonly implemented to ensure high availability in IT systems?
   a. VPN tunneling
   b. RAID
   c. Steganography
   d. Phishing
   Answer: b. RAIDtwingate
4. What is a common cause of unintentional availability loss in cybersecurity?
   a. Data theft
   b. Power outage
   c. Malware infection
   d. Social engineering
   Answer: b. Power outagesciencedirect+1
5. Which attack often leverages a network of compromised systems to exhaust resources and impair availability?
   a. SQL Injection
   b. DDoS
   c. Brute-force
   d. Spear phishing
   Answer: b. DDoSa10networks+1
6. A breach of availability typically involves:
   a. Unauthorized destruction of data
   b. Data exfiltration
   c. Data tampering
   d. Unauthorized viewing
   Answer: a. Unauthorized destruction of datatestbook
7. What is the main impact of a logic bomb in a computing environment?
   a. Alters database values
   b. Releases malware externally
   c. Disables or destroys resources, causing unavailability
   d. Steals user credentials
   Answer: c. Disables or destroys resources, causing unavailabilitysciencedirect
8. Which measure is NOT directly related to maintaining availability?
   a. Regular backups
   b. Strong encryption
   c. Redundant systems
   d. Disaster recovery plans
   Answer: b. Strong encryptionkobalt+1
9. In the event of hardware failure, what is the immediate risk in terms of cybersecurity?
   a. Loss of availability
   b. Loss of confidentiality
   c. Code injection
   d. Phishing attack
   Answer: a. Loss of availabilitytwingate
10. Which attack is designed primarily to disrupt communications in smart grids or critical infrastructures?
    a. Phishing
    b. Availability attack
    c. Man-in-the-middle
    d. Directory traversal
    Answer: b. Availability attacksciencedirect
11. Which of the following is NOT considered a threat to availability?
    a. Physical damage
    b. Insider sabotage
    c. Traffic encryption
    d. Natural disaster
    Answer: c. Traffic encryptiontwingate+1
12. Redundant power supplies in data centers are typically used to prevent:
    a. Malware infections
    b. Unauthorized access
    c. System unavailability
    d. Data modification
    Answer: c. System unavailabilitytwingate
13. What phenomenon describes when an attack on one system leads to subsequent failures in related systems?
    a. Lateral movement
    b. Vertical escalation
    c. Cascading failure
    d. Spoofing
    Answer: c. Cascading failuresciencedirect
14. The best definition of “availability” in cybersecurity is:
    a. Ensuring only authorized users can access information
    b. Preventing modification of data
    c. Timely and reliable access to authorized users
    d. Blocking attackers from all network traffic
    Answer: c. Timely and reliable access to authorized userstwingate
15. A DDoS attack impacts an organization’s operations by:
    a. Deleting large volumes of files
    b. Encrypting files for ransom
    c. Making services inaccessible to legitimate users
    d. Diverting email messages
    Answer: c. Making services inaccessible to legitimate userskobalt+1
16. Which backup strategy is most effective for ensuring quick restoration of availability during a cyber incident?
    a. Annual backups
    b. Incremental backups
    c. Full backups without redundancy
    d. No backup plan
    Answer: b. Incremental backupstwingate
17. Physical tampering with a server could directly cause what type of security loss?
    a. Confidentiality
    b. Integrity
    c. Availability
    d. Authentication
    Answer: c. Availabilitysciencedirect+1
18. Which method is used in high availability architecture to automatically switch operations when a failure is detected?
    a. Honeypot deployment
    b. Failover
    c. Dynamic routing
    d. Access control
    Answer: b. Failovertwingate
19. Virtual machine (VM) escape is a threat to which security attribute in cloud environments?
    a. Confidentiality
    b. Non-repudiation
    c. Availability
    d. Version control
    Answer: c. Availabilitysciencedirect
20. Which type of malicious code activates under certain conditions to disrupt availability?
    a. Spyware
    b. Logic bomb
    c. Keylogger
    d. Worm
    Answer: b. Logic bombsciencedirect
21. The primary effect of a ransomware attack on a hospital’s IT infrastructure is:
    a. Unauthorized data access
    b. System downtime and loss of availability
    c. Packet sniffing
    d. IP spoofing
    Answer: b. System downtime and loss of availabilitykobalt+1
22. Which of the following helps mitigate the risk of availability loss due to natural disasters?
    a. Password policies
    b. Distributed backups
    c. Cookie encryption
    d. URL filtering
    Answer: b. Distributed backupstwingate
23. Which of the following threats is most likely to cause immediate unavailability of network resources?
    a. Data exfiltration
    b. DDoS attack
    c. Social engineering
    d. Insider threat
    Answer: b. DDoS attacka10networks+1
24. When an organization’s main website goes offline due to sustained attacks, this is a loss of:
    a. Confidentiality
    b. Integrity
    c. Availability
    d. Authentication
    Answer: c. Availabilitysciencedirect+1
25. Why is availability especially critical in sectors like healthcare or energy?
    a. Data must remain confidential
    b. System downtime impacts critical services and lives
    c. Only authorized users are allowed
    d. Digital forensics is easier
    Answer: b. System downtime impacts critical services and livessciencedirect
26. Which threat does NOT directly impact availability?
    a. Ransomware
    b. Brute-force password attack
    c. Physical server failure
    d. Network flooding
    Answer: b. Brute-force password attacktwingate
27. Which scenario best illustrates an availability breach?
    a. Unauthorized data access
    b. Tampered medical records
    c. Web server inaccessible after a cyber-attack
    d. Leaked login credentials
    Answer: c. Web server inaccessible after a cyber-attacktestbook+1
28. A robust disaster recovery plan primarily aims to preserve:
    a. Data confidentiality
    b. System availability
    c. User authentication
    d. File encryption
    Answer: b. System availabilitysciencedirect+1
29. Which characteristic must a backup system have to best support availability?
    a. Frequent testing for restorability
    b. Minimal encryption
    c. Network segmentation
    d. Manual documentation
    Answer: a. Frequent testing for restorabilitytwingate
30. Email bomb attacks are considered what type of security threat?
    a. Social engineering
    b. Denial of service
    c. Data breach
    d. Man-in-the-middle
    Answer: b. Denial of servicesciencedirect
31. Which risk arises if there are unpatched software vulnerabilities on servers?
    a. Increased chance of phishing
    b. Greater likelihood of availability loss via exploits
    c. Stronger authentication
    d. Shorter session durations
    Answer: b. Greater likelihood of availability loss via exploitssecureframe+1
32. Availability attacks may frequently overlap with which other CIA triad principle?
    a. Confidentiality
    b. Integrity
    c. Authentication
    d. Non-repudiation
    Answer: b. Integritysciencedirect
33. Which is an example of an unintentional cause of availability loss?
    a. DDoS attack
    b. Software bug causing system crash
    c. Insider theft
    d. Data exfiltration
    Answer: b. Software bug causing system crashtwingate
34. What is the typical direct business impact of service unavailability?
    a. Enhanced public trust
    b. Disrupted operational performance
    c. Higher data integrity
    d. Increased confidentiality
    Answer: b. Disrupted operational performancetwingate
35. What is a cost-effective method to reduce risk of availability loss due to hardware failure?
    a. Single disk storage
    b. Redundant hardware components
    c. Single sign-on
    d. Password rotation
    Answer: b. Redundant hardware componentstwingate
36. Which of these is NOT a feature of a system designed for high availability?
    a. RAID configuration
    b. Single point of failure
    c. Clustering
    d. Load balancing
    Answer: b. Single point of failuretwingate
37. A successful DDoS attack can cause what in a cloud environment?
    a. Multiple organizations’ resources become unavailable
    b. Password credentials are exposed
    c. Firewalls are bypassed
    d. Updates are installed
    Answer: a. Multiple organizations’ resources become unavailablesciencedirect
38. Which of the following does NOT help improve system availability?
    a. Regular patching
    b. Geographic redundancy
    c. Complex passwords
    d. Load balancing
    Answer: c. Complex passwordstwingate
39. Which scenario best describes a cascading failure caused by availability loss?
    a. Single service failure remaining isolated
    b. Failure in one system causing others to fail in sequence
    c. User error causing a data breach
    d. Slow system performance after update
    Answer: b. Failure in one system causing others to fail in sequencesciencedirect
40. The CIA triad stands for:
    a. Computer Integrity Analysis
    b. Confidentiality, Integrity, Availability
    c. Controlled Internet Access
    d. Certified Information Accountant
    Answer: b. Confidentiality, Integrity, Availabilityigmguru+1
41. Which attack targets the reliability and accessibility of computing resources?
    a. Man-in-the-middle attack
    b. Availability attack
    c. Cross-site scripting
    d. SQL injection
    Answer: b. Availability attacksciencedirect
42. What is a best practice for ensuring availability of critical data?
    a. Single-copy storage
    b. Frequent, offsite backups
    c. Minimal network monitoring
    d. Occasional system upgrades
    Answer: b. Frequent, offsite backupstwingate
43. What distinguishes a DDoS attack from a DoS attack?
    a. DDoS targets single user
    b. DDoS uses multiple sources to attack
    c. DDoS encrypts data
    d. DDoS is always internal
    Answer: b. DDoS uses multiple sources to attacka10networks+1
44. Which physical factor is a threat to availability?
    a. Data masking
    b. Fire in a data center
    c. Phishing campaign
    d. Email spoofing
    Answer: b. Fire in a data centersciencedirect+1
45. An insider could impact availability by:
    a. Stealing credentials
    b. Sabotaging equipment
    c. Updating antivirus
    d. Restricting external access
    Answer: b. Sabotaging equipmenttwingate
46. Which solution helps recover from ransomware-induced availability loss?
    a. Reinstalling from unpatched images
    b. Isolated, tested backups
    c. Ignoring ransom demands
    d. Single-factor authentication
    Answer: b. Isolated, tested backupskobalt+1
47. How does regular system maintenance support availability?
    a. Reduces need for backups
    b. Ensures systems operate at optimal performance
    c. Increases risk of malware
    d. Promotes single point of failure
    Answer: b. Ensures systems operate at optimal performancetwingate
48. Which network attack specifically impairs the ability of users to connect to online services?
    a. Brute-forcing
    b. ARP poisoning
    c. DDoS
    d. Keylogger
    Answer: c. DDoSa10networks+1
49. Unplanned system downtime most directly results in loss of:
    a. Data confidentiality
    b. Service availability
    c. Encryption keys
    d. SIEM alerts
    Answer: b. Service availabilitytwingate
50. To best address loss of availability in IT, organizations should:
    a. Enforce strong password policies
    b. Implement a disaster recovery and redundancy plan
    c. Focus only on data encryption
    d. Ignore physical threats
    Answer: b. Implement a disaster recovery and redundancy plansciencedirect+1

1. https://www.sciencedirect.com/topics/computer-science/availability-attack
2. https://kobalt.io/confidentiality-integrity-and-availability-in-cyber-security/
3. https://www.twingate.com/blog/glossary/availability
4. https://www.a10networks.com/blog/5-most-famous-ddos-attacks/
5. https://testbook.com/question-answer/what-is-breach-of-availability–628fa92f44f4e9863ec9cbb9
6. https://secureframe.com/blog/recent-cyber-attacks
7. https://www.igmguru.com/blog/cyber-security-mcqs
8. https://copamcq.com/cyber-security/
9. https://www.sanfoundry.com/cyber-security-questions-answers-elements-security/
10. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
11. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
12. https://www.fortinet.com/resources/cyberglossary/types-of-cyber-attacks
13. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
14. https://www.imperva.com/learn/application-security/cyber-security-threats/
15. https://safe.security/resources/blog/the-six-types-of-loss-in-cyber-incidents/
16. https://www.scribd.com/document/862261556/Unit-5-Cyber-Security-MCQs
17. https://www.dataguard.com/cyber-security/threats/
18. https://www.stamus-networks.com/blog/what-are-the-4-types-of-attacks-in-network-security
19. https://letsfindcourse.com/cyber-security-mcq/cyber-attacks-mcq-questions-and-answers
20. https://www.splunk.com/en_us/blog/learn/vulnerability-vs-threat-vs-risk.html