MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is a honeyfile in cybersecurity?
   a. A real user’s file containing sensitive data
   b. A type of malware used to steal data
   c. A fake file created to lure attackers
   d. A backup file stored offsite
   Answer: c. A fake file created to lure attackersfaculty.nps+1
2. What is the primary purpose of a honeyfile?
   a. Store actual passwords for users
   b. Attract and detect unauthorized access
   c. Provide backup during a disaster
   d. Encrypt files on the server
   Answer: b. Attract and detect unauthorized accessstellastra+1
3. What typically happens when a honeyfile is accessed?
   a. The attacker gains admin rights
   b. An alert is triggered for security teams
   c. The file deletes itself automatically
   d. User passwords are reset
   Answer: b. An alert is triggered for security teamsrapid7+1
4. Which of these most closely describes a honeyfile?
   a. A type of firewall
   b. A decoy or trap file
   c. A user profile
   d. An antivirus signature
   Answer: b. A decoy or trap filefaculty.nps+1
5. Where are honeyfiles usually placed?
   a. In unrelated websites
   b. On network file shares or servers
   c. On backup tapes only
   d. In cloud email accounts
   Answer: b. On network file shares or serversrapid7+1
6. What is one key difference between a honeypot and a honeyfile?
   a. Honeyfile is a fake system; honeypot is a decoy file
   b. Both are identical
   c. Honeypot is a fake system; honeyfile is a fake file
   d. Honeyfile is a type of malware; honeypot is not
   Answer: c. Honeypot is a fake system; honeyfile is a fake fileyoutubestellastra
7. What is a common filename that might be used for a honeyfile?
   a. weather_data.csv
   b. passwords.txt
   c. notes_on_vacation.doc
   d. readme.pdf
   Answer: b. passwords.txtfaculty.nps
8. Who is usually notified when a honeyfile is accessed?
   a. The attacker
   b. The file server manufacturer
   c. The system administrator or file owner
   d. The public internet
   Answer: c. The system administrator or file ownerfaculty.nps
9. In an organization, who should create and maintain honeyfiles?
   a. Every external visitor
   b. End users with security knowledge or IT/security teams
   c. Hackers themselves
   d. Backup service vendors
   Answer: b. End users with security knowledge or IT/security teamsfaculty.nps
10. What kind of attacker activity do honeyfiles primarily help to detect?
    a. Physical theft of equipment
    b. Unauthorized network access to files
    c. Software installation
    d. Valid user login
    Answer: b. Unauthorized network access to filesrapid7+1
11. What do honeyfiles help reduce, compared to traditional network intrusion-detection systems (NIDS)?
    a. The number of employees
    b. False alarms for unknown attacks
    c. The need for any logging
    d. Legitimate software alerts
    Answer: b. False alarms for unknown attacksfaculty.nps
12. Which type of file is LEAST likely to be effective as a honeyfile?
    a. credit-card-info.doc
    b. user-manual.pdf
    c. grocery-list.txt
    d. vpn-instructions.doc
    Answer: c. grocery-list.txtfaculty.nps
13. In relation to ransomware, what value do honeyfiles provide?
    a. They slow down the encryption process
    b. Act as early warning against unauthorized access or exfiltration
    c. Encrypt the entire server
    d. Clean infected files automatically
    Answer: b. Act as early warning against unauthorized access or exfiltrationstellastra
14. What is a synonym for a honeyfile?
    a. Trap file
    b. Firewall rule
    c. User file
    d. Backup file
    Answer: a. Trap filestellastra
15. What should a well-named honeyfile do?
    a. Blend into normal files and attract attackers
    b. Stand out as fake to everyone
    c. Point to security cameras
    d. Use random symbols only
    Answer: a. Blend into normal files and attract attackersarxiv
16. What is a tactical benefit of deploying honeyfiles?
    a. Users cannot detect attacks
    b. Network monitoring is disabled
    c. End-users can create effective alarms in their domains
    d. Files become invisible to attackers
    Answer: c. End-users can create effective alarms in their domainsfaculty.nps
17. Which type of device can benefit from honeyfiles?
    a. Only personal laptops
    b. Any device connected to a file server
    c. Only smartphones
    d. Only cloud servers
    Answer: b. Any device connected to a file serverfaculty.nps
18. What kind of content might a honeyfile contain?
    a. Real sensitive company data
    b. Fake login information
    c. Malware code
    d. Audio files only
    Answer: b. Fake login informationfaculty.nps
19. What is critical to avoid with honeyfiles?
    a. Placing them inside backups
    b. Accidentally alerting authorized users
    c. Using complicated names
    d. Keeping file size below 1 MB
    Answer: b. Accidentally alerting authorized usersfaculty.nps
20. When a honeyfile is triggered, what artifact is commonly logged?
    a. File’s metadata
    b. IP address of access
    c. MAC address of printer
    d. File’s thumbnail image
    Answer: b. IP address of accessfaculty.nps
21. Which term is NOT a synonym for honeyfile?
    a. Trap file
    b. Decoy file
    c. Antivirus
    d. Honey file
    Answer: c. Antivirusstellastra
22. Why must honeyfiles be periodically updated?
    a. To keep their timestamps realistic
    b. To increase their file size
    c. To install software
    d. To encrypt other files
    Answer: a. To keep their timestamps realisticfaculty.nps
23. What is one limitation of honeyfiles in large group-used file spaces?
    a. They require a license
    b. False alarms become frequent and hard to manage
    c. They are automatically deleted
    d. They generate backup failures
    Answer: b. False alarms become frequent and hard to managefaculty.nps
24. Which describes a desirable characteristic of honeyfile deployment?
    a. Requires complex infrastructure changes
    b. Simple, easily integrated into existing file systems
    c. Accessible via a public website
    d. Only works on encrypted files
    Answer: b. Simple, easily integrated into existing file systemsfaculty.nps
25. What is NOT a primary capability of honeyfiles?
    a. Detect unauthorized access
    b. Directly block hackers
    c. Support incident response
    d. Deter attackers
    Answer: b. Directly block hackersfaculty.nps
26. Who pioneered the bait file approach used in honeyfiles?
    a. Cliff Stoll
    b. Alan Turing
    c. Linus Torvalds
    d. Steve Jobs
    Answer: a. Cliff Stollfaculty.nps
27. What makes honeyfiles especially useful in high-value environments?
    a. They increase network speed
    b. They are undetectable by attackers before being accessed
    c. They replace firewalls
    d. They store actual secrets
    Answer: b. They are undetectable by attackers before being accessedfaculty.nps
28. What should a honeyfile’s content usually NOT do?
    a. Look real
    b. Contain actual sensitive data
    c. Appear useful to an attacker
    d. Match anticipated attacker searches
    Answer: b. Contain actual sensitive datafaculty.nps
29. Which process can trigger false positives with honeyfiles?
    a. File server backups
    b. Browsing the internet
    c. Sending email
    d. Printing documents
    Answer: a. File server backupsfaculty.nps
30. What is a key element in making honeyfiles believable?
    a. Using realistic filenames and directory locations
    b. Publicly posting their location
    c. Making them password protected only
    d. Using only small file sizes
    Answer: a. Using realistic filenames and directory locationsarxiv
31. What role can honeyfiles play in incident response?
    a. Provide forensic data on unauthorized access
    b. Encrypt all data after access
    c. Delete attacked files
    d. Restore files from backup
    Answer: a. Provide forensic data on unauthorized accessfaculty.nps
32. How does a honeyfile support defense-in-depth?
    a. Provides hardware-layer security
    b. Adds another detection layer beyond conventional systems
    c. Disables user authentication
    d. Limits server bandwidth
    Answer: b. Adds another detection layer beyond conventional systemsfaculty.nps
33. On what platform has a prototype honeyfile system been implemented?
    a. Linux file server using NFS
    b. Internet of Things (IoT) devices only
    c. Only cloud storage
    d. Smartphone operating system
    Answer: a. Linux file server using NFSfaculty.nps
34. What can be an enhancement to honeyfiles for increased effectiveness?
    a. Auto-update content from hidden source files
    b. Add malware into files
    c. Remove all alerts
    d. Ignore attempts at access
    Answer: a. Auto-update content from hidden source filesfaculty.nps
35. What risk do overused honeyfiles pose?
    a. Overloading alert mechanisms
    b. Increasing network speed
    c. Promoting user compliance
    d. Reducing alert fatigue
    Answer: a. Overloading alert mechanismsfaculty.nps
36. What does a honeyfile system commonly require from users?
    a. Some understanding of security and file systems
    b. Programming skills
    c. A mobile app download
    d. Encryption knowledge
    Answer: a. Some understanding of security and file systemsfaculty.nps
37. What analogy is often used for honeyfile deterrence?
    a. Landmines
    b. Fire extinguishers
    c. Speed bumps
    d. Traffic cones
    Answer: a. Landminesfaculty.nps
38. Why might attackers be “fooled” by honeyfiles?
    a. They look identical to real files
    b. They emit a loud noise
    c. They are listed first in directories
    d. They contain large images
    Answer: a. They look identical to real filesarxiv
39. What can honeyfiles NOT prevent?
    a. Unauthorized access
    b. Detection of attacks
    c. Ransomware from encrypting files
    d. False alarms
    Answer: c. Ransomware from encrypting filesstellastra+1
40. What essential information is often captured in a honeyfile incident log?
    a. File accessed, user ID, timestamp, IP address
    b. Browser version
    c. Phone IMEI number
    d. Social media accounts
    Answer: a. File accessed, user ID, timestamp, IP addressfaculty.nps
41. Which of these is NOT a benefit of honeyfiles?
    a. Enhance internal security
    b. Require minimal falsehood
    c. Are difficult to create
    d. Can be integrated on most file servers
    Answer: c. Are difficult to createfaculty.nps
42. What is the effect of revealing honeyfile use within an organization?
    a. Deters some insider attacks
    b. Makes the files invisible
    c. Weakens overall security
    d. Slows down file backups
    Answer: a. Deters some insider attacksfaculty.nps
43. What might a company place in a honeyfile to attract attackers?
    a. Fake confidential business plans
    b. Unrelated images
    c. Large video files
    d. Empty folders
    Answer: a. Fake confidential business plansfaculty.nps
44. What is a practical application of honeyfiles for everyday business?
    a. Detecting unauthorized internal or external file access
    b. Generating invoices
    c. Sending automatic emails
    d. Encrypting all documents
    Answer: a. Detecting unauthorized internal or external file accessrapid7+1
45. What is a potential “cost” of honeyfiles?
    a. Users must track and manage decoy files
    b. They always prevent all attacks
    c. They eliminate the need for passwords
    d. They slow down the network
    Answer: a. Users must track and manage decoy filesfaculty.nps
46. What feature makes honeyfiles particularly realistic to attackers?
    a. Periodically updating their timestamps and metadata
    b. Encrypting other files
    c. Acting as a real login point
    d. Containing software updates
    Answer: a. Periodically updating their timestamps and metadatafaculty.nps
47. What is a practical limitation of honeyfiles?
    a. They are ineffective in file spaces with frequent automated searches
    b. They are too expensive for most companies
    c. They can only be used on local computers
    d. They must be made public
    Answer: a. They are ineffective in file spaces with frequent automated searchesfaculty.nps
48. Why is end-user training important for honeyfile deployment?
    a. Wrong placements can cause unwanted alerts
    b. Only professionals can open files
    c. Files will never be detected
    d. Training is not important
    Answer: a. Wrong placements can cause unwanted alertsfaculty.nps
49. How can honeyfiles improve incident investigation?
    a. By providing concrete evidence of file access
    b. By automatically restoring files
    c. By updating backup status
    d. By deleting hacker accounts
    Answer: a. By providing concrete evidence of file accessfaculty.nps
50. When should honeyfile alerts be temporarily suspended?
    a. During planned maintenance or search operations
    b. When users forget passwords
    c. When upgrading the firewall
    d. During system shutdown
    Answer: a. During planned maintenance or search operationsfaculty.nps

1. https://faculty.nps.edu/dedennin/publications/honeyfiles.pdf
2. https://stellastra.com/honeyfile-definition
3. https://docs.rapid7.com/insightidr/honey-files/
4. https://www.youtube.com/watch?v=nNssPu0zFaY
5. https://arxiv.org/html/2405.04758v2
6. https://ransomware.org/how-to-prevent-ransomware/threat-hunting/honeypots-and-honeyfiles/
7. https://www.linkedin.com/posts/diyarsaadi_cybersecurity-malwareanalysis-threathunting-activity-7358106332886900737-7c7h
8. https://ransomware.org/blog/how-honeyfiles-and-honeypots-protect-you-from-ransomware/
9. https://www.youtube.com/watch?v=9qbeHpRUoUA
10. https://notes.kodekloud.com/docs/CompTIA-Security-Certification/Controls-and-Security-Concepts/Honey-Pots
11. https://www.linkedin.com/pulse/honey-pots-files-accounts-uses-cybersecurity-thomas-coffey
12. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
13. https://examradar.com/question/12947/What-is-the-primary-purpose-of-a-honeypot-in-cybersecurity/
14. https://www.igmguru.com/blog/cyber-security-mcqs
15. https://www.interviewbit.com/cyber-security-mcq/
16. https://www.scribd.com/document/514967423/MCQ-Question-Bank-IS-1
17. https://wayground.com/admin/quiz/6139a8801ca431001d762af2/honeypots
18. https://www.slideshare.net/slideshow/cyber-security-mcq-questions-and-answers/273164705
19. https://examradar.com/cyber-security-mcq-set-28/
20. https://www.watercoolertrivia.com/trivia-questions/cybersecurity-trivia-questions
21. https://www.placementpreparation.io/mcq/cyber-security/
22. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
23. https://trustedinstitute.com/concept/cissp/communication-and-network-security/honeypots-and-honeynets/
24. https://examradar.com/phishing-and-social-engineering-mcqs-multiple-choice-questions-with-answers/
25. https://forensicmcq.com/digital-forensics-mcqs-part-1-with-answer-and-explanation/
26. https://priyadogra.com/fcf-technical-introduction-to-cybersecurity-exam-quiz-answers-fortinet/
27. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
28. https://machinelearning.org.in/fcf-introduction-to-the-threat-landscape-2-0-self-paced-quiz-exam-answers/
29. https://interviewkickstart.com/blogs/articles/cyber-security-mcqs-answers
30. https://www.scribd.com/document/310264757/Information-Security-Questions-and-Answers