MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. A logic bomb is best defined as which of the following?
   a. A self-replicating virus that spreads through email.
   b. Malicious code that activates under specific conditions.
   c. A hardware device used for network attacks.
   d. A browser-based script used for phishing.
   Answer: bbeyondtrust+1​
2. What condition typically triggers a logic bomb?
   a. Random system crash.
   b. Specific date or event.
   c. Installation of antivirus software.
   d. Opening a phishing email.
   Answer: bwikipedia+1​
3. Which of the following characteristics describes a logic bomb?
   a. Self-replicating malware.
   b. Dormant until a condition is met.
   c. Requires user permission to execute.
   d. Designed to spread across networks automatically.
   Answer: bezexplanation+1​
4. Logic bombs are most often inserted by:
   a. Automated systems.
   b. Disgruntled employees or insiders.
   c. Random bots on the internet.
   d. Government regulatory agencies.
   Answer: bzenarmor+1​
5. What distinguishes a logic bomb from a computer virus?
   a. Logic bombs self-replicate.
   b. Logic bombs are non-replicating and condition-based.
   c. Logic bombs spread via removable drives.
   d. Logic bombs require active user input.
   Answer: bgeeksforgeeks+1​
6. Which historic case involved a logic bomb in UBS PaineWebber?
   a. A disgruntled trader deleting critical files in 2002.
   b. A ransomware attack on UBS in 2010.
   c. A phishing operation in 2015.
   d. An insider data theft case from 2018.
   Answer: aavast+1​
7. What is the main purpose of a logic bomb’s payload?
   a. To monitor employee activities.
   b. To cause damage or disruption.
   c. To speed up computer performance.
   d. To remove malware automatically.
   Answer: b1kosmos+1​
8. Which famous incident is associated with the Trans-Siberian Pipeline?
   a. A Stuxnet attack.
   b. A logic bomb planted during the Cold War.
   c. A ransomware incident.
   d. A phishing campaign.
   Answer: bzenarmor+1​
9. The trigger event for a logic bomb can include:
   a. Disconnecting from a VPN.
   b. A user login or file deletion.
   c. Rebooting after update.
   d. Uploading a backup.
   Answer: bbarracuda+1​
10. What is a key challenge in detecting logic bombs?
    a. They encrypt communications.
    b. They remain dormant and blend into legitimate code.
    c. They use hardware-level encryption.
    d. They act as network proxies.
    Answer: bstartupdefense+1​
11. One of the earliest known logic bomb incidents was:
    a. The Michelangelo virus.
    b. The Trans-Siberian Pipeline sabotage.
    c. The ILOVEYOU worm.
    d. The Code Red outbreak.
    Answer: bzenarmor​
12. Employees commonly plant logic bombs for:
    a. Automating processes.
    b. Revenge or sabotage.
    c. Updating system drivers.
    d. Debugging software.
    Answer: bbinaryit+1​
13. The activation mechanism of logic bombs is also known as the:
    a. Payload.
    b. Trigger condition.
    c. Worm propagation.
    d. Injection vector.
    Answer: bezexplanation+1​
14. Which of the following is not an example of a trigger event?
    a. Specific date.
    b. File modification.
    c. Random CPU spike.
    d. User login.
    Answer: cwikipedia+1​
15. What differentiates a logic bomb from ransomware?
    a. Ransomware spreads automatically.
    b. Logic bombs activate based on hidden conditions.
    c. Both are always externally delivered.
    d. Ransomware cannot encrypt data.
    Answer: bmalwarebytes+1​
16. Which preventive measure helps detect logic bombs early?
    a. Disabling firewalls.
    b. System baseline monitoring.
    c. Avoiding backups.
    d. Using open Wi-Fi networks.
    Answer: bstartupdefense+1​
17. Logic bombs commonly result in which type of damage?
    a. Bandwidth throttling.
    b. File deletion and data loss.
    c. Hardware overheating.
    d. Email blacklisting.
    Answer: bgeeksforgeeks+1​
18. A time bomb is a logic bomb that triggers based on:
    a. A specific time or date.
    b. A user’s location.
    c. Memory usage level.
    d. File download activity.
    Answer: anorton+1​
19. Why are logic bombs hard to trace back to attackers?
    a. They execute immediately upon insertion.
    b. Delay between setup and activation allows hiding tracks.
    c. They require usernames.
    d. They only work on open networks.
    Answer: bnorton​
20. What is the best defense against insider logic bomb threats?
    a. Role-based access control.
    b. Open software permissions.
    c. Disabling logs.
    d. Removing all password policies.
    Answer: abinaryit+1​
21. Who primarily uses logic bombs for cyber-espionage?
    a. Students.
    b. State actors and insiders.
    c. Social engineers.
    d. Software testers.
    Answer: bzenarmor​
22. What is the immediate effect of a logic bomb’s activation?
    a. Triggered execution of malicious code.
    b. Sending an email alert.
    c. Creation of firewall rules.
    d. User authentication reset.
    Answer: amalwarebytes+1​
23. How can regular code audits mitigate logic bomb risks?
    a. By detecting hidden malicious instructions early.
    b. By updating antivirus signatures only.
    c. By monitoring network routers.
    d. By bypassing authentication checks.
    Answer: astartupdefense+1​
24. Which 2008 case involved an insider planting a logic bomb at Fannie Mae?
    a. Contractor embedding code to wipe company data.
    b. CEO leaving passwords in plaintext.
    c. Phishing campaign targeting investors.
    d. Virus spreading via email.
    Answer: atwingate​
25. Which outcome is least likely after a logic bomb attack?
    a. Financial loss.
    b. Reputational damage.
    c. Enhanced system speed.
    d. Downtime.
    Answer: cnorton​
26. Logic bombs are often categorized under which type of threat?
    a. Malware.
    b. Rootkits.
    c. Botnets.
    d. Adware.
    Answer: akaspersky+1​
27. What is the primary purpose of heuristic scanning in logic bomb prevention?
    a. Detecting suspicious behaviors or patterns.
    b. Encrypting system backups.
    c. Installing patches automatically.
    d. Logging user sessions.
    Answer: astartupdefense​
28. What happens if a logic bomb fails to trigger?
    a. It remains dormant indefinitely.
    b. It executes harmless code.
    c. It deletes itself immediately.
    d. It alerts system admins.
    Answer: a1kosmos+1​
29. Which malware type does NOT replicate itself?
    a. Worm.
    b. Trojan.
    c. Virus.
    d. Logic bomb.
    Answer: dgeeksforgeeks​
30. The UBS case caused approximately how much financial damage?
    a. $300,000.
    b. $3 million.
    c. $30 million.
    d. $100 million.
    Answer: b1kosmos​
31. What human factor increases logic bomb risk most?
    a. Phishing emails.
    b. Insider threats.
    c. Lost USB drives.
    d. Public Wi-Fi use.
    Answer: bbinaryit+1​
32. Which tool helps identify deviations in system behavior to detect logic bombs?
    a. Baseline monitoring.
    b. Port scanning.
    c. Packet inspection.
    d. Keyloggers.
    Answer: astartupdefense​
33. Logic bombs remain inactive until:
    a. A defined logical condition is met.
    b. The antivirus system updates.
    c. The user restarts the system.
    d. Internet connectivity is lost.
    Answer: aezexplanation+1​
34. One major challenge with logic bombs is that they:
    a. Are easily removed by antivirus.
    b. Mimic legitimate code until triggered.
    c. Always operate in visible mode.
    d. Infect only mobile devices.
    Answer: bgeeksforgeeks+1​
35. Which software practice minimizes insider logic bomb risks?
    a. Change management documentation.
    b. Ignoring system logs.
    c. Sharing admin credentials.
    d. Disabling antivirus alerts.
    Answer: astartupdefense​
36. What is the main operational phase before a logic bomb triggers called?
    a. Dormant phase.
    b. Payload phase.
    c. Propagation phase.
    d. Decryption phase.
    Answer: aezexplanation+1​
37. Which malware shares time-delayed activation like a logic bomb?
    a. Trojan downloader.
    b. Time bomb.
    c. Spyware.
    d. Rootkit.
    Answer: bpurplesec+1​
38. What can be a result of poorly monitored access logs?
    a. Undetected insertion of logic bombs.
    b. Slower processing speeds.
    c. Increased update frequency.
    d. Enhanced backup efficiency.
    Answer: astartupdefense​
39. Why do logic bombs often escape antivirus detection?
    a. They replicate too fast.
    b. They appear as legitimate code until activation.
    c. They encrypt their own logic.
    d. They use social media networks.
    Answer: bgeeksforgeeks+1​
40. What should organizations enforce to reduce logic bomb incidents?
    a. Security policies and training.
    b. Free software installations.
    c. Weak password guidelines.
    d. Removal of logging tools.
    Answer: abinaryit+1​
41. Logic bombs can cause:
    a. Minor inconvenience only.
    b. Data wipes or system crashes.
    c. Improved resource management.
    d. Hardware resilience.
    Answer: bgeeksforgeeks+1​
42. In cybersecurity, logic bombs belong to which malware category?
    a. Non-self-propagating malware.
    b. Ad-supported software.
    c. Investigative software.
    d. Performance optimizers.
    Answer: ageeksforgeeks​
43. Which step helps verify changes preventing logic bomb infection?
    a. Using change management systems.
    b. Installing unverified software.
    c. Disabling patch updates.
    d. Avoiding system logs.
    Answer: astartupdefense​
44. A logic bomb designed to trigger after an employee’s departure is an example of:
    a. Date-based trigger.
    b. Insider revenge condition.
    c. Hardware dependency.
    d. External intrusion.
    Answer: bezexplanation​
45. Logic bombs usually affect systems by:
    a. Modifying or deleting files.
    b. Improving firewall performance.
    c. Cleaning up obsolete data.
    d. Upgrading firmware.
    Answer: amalwarebytes+1​
46. What is typically the hardest part of investigating logic bomb attacks?
    a. Identifying the activation time.
    b. Attributing the perpetrator.
    c. Locating infected hardware.
    d. Restoring authentication methods.
    Answer: bnorton​
47. The dormant state of logic bombs refers to:
    a. The phase before their trigger conditions occur.
    b. The phase after data recovery.
    c. The scanning pattern of antivirus software.
    d. The user interaction log reading.
    Answer: aezexplanation​
48. Which 2000 case involved a German chemical plant logic bomb?
    a. Slag code incident.
    b. Morris Worm.
    c. Zeus Trojan.
    d. Melissa macro.
    Answer: a1kosmos​
49. What lesson do logic bomb incidents emphasize for companies?
    a. Importance of continuous monitoring and policy enforcement.
    b. Using open-source unverified software.
    c. Disabling internal controls.
    d. Limiting employee training.
    Answer: abinaryit+1​
50. The primary motivation behind logic bomb creation is usually:
    a. Revenge or financial sabotage.
    b. Academic research.
    c. System improvement.
    d. Patch management testing.
    Answer: ageeksforgeeks+1​

1. https://www.beyondtrust.com/resources/glossary/logic-bomb
2. https://www.malwarebytes.com/logic-bomb
3. https://en.wikipedia.org/wiki/Logic_bomb
4. https://ezexplanation.com/course/information-security-and-audit/logic-bombs
5. https://www.1kosmos.com/security-glossary/logic-bomb/
6. https://www.zenarmor.com/docs/network-security-tutorials/what-is-logic-bomb
7. https://www.geeksforgeeks.org/computer-networks/difference-between-zombie-and-logic-bomb-in-cyber-security/
8. https://www.avast.com/c-what-is-a-logic-bomb
9. https://blog.barracuda.com/2023/11/22/malware-101-logic-bombs
10. https://www.startupdefense.io/cyberattacks/logic-bomb
11. https://binaryit.com.au/what-is-logic-bomb/
12. https://www.geeksforgeeks.org/ethical-hacking/what-is-a-logic-bomb/
13. https://us.norton.com/blog/malware/logic-bomb
14. https://purplesec.us/learn/common-malware-types/
15. https://www.twingate.com/blog/glossary/logic-bomb
16. https://www.kaspersky.com/resource-center/threats/types-of-malware
17. https://www.uscybersecurity.net/logic-bombs/
18. https://heimdalsecurity.com/blog/find-out-what-is-a-logic-bomb-definition-characteristics-and-protection-measures/
19. https://www.copado.com/resources/blog/what-is-a-logic-bomb-most-asked-questions-regarding-these-kinds-of-attacks
20. https://www.sciencedirect.com/topics/computer-science/logic-bomb