MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What programming language is commonly used to write macros in Microsoft Office documents?
   a. Python
   b. JavaScript
   c. Visual Basic for Applications (VBA)
   d. PowerShell
   Answer: c. Visual Basic for Applications (VBA)wisdify+1​
2. What type of cyber threat commonly leverages macro scripts to execute malicious actions?
   a. Worms
   b. Macro malware
   c. Adware
   d. Spyware
   Answer: b. Macro malwaresasa-software+1​
3. How do malicious macros typically gain execution on a system?
   a. User enables macros in a document
   b. Automatic system update
   c. Registry modification by antivirus
   d. Command prompt execution only
   Answer: a. User enables macros in a documentcyfirma+1​
4. Which office application format is most often exploited in macro-based attacks?
   a. PDF
   b. Excel
   c. PowerPoint
   d. Notepad
   Answer: b. Excelzvelo+1​
5. What is the primary purpose of malicious macro scripts?
   a. Automate document design
   b. Execute arbitrary commands or payloads
   c. Compress large data files
   d. Increase processing speed
   Answer: b. Execute arbitrary commands or payloadshalcyon+1​
6. Which attack phase often begins with a macro execution?
   a. Privilege escalation
   b. Reconnaissance
   c. Post-exploitation cleanup
   d. Backup restoration
   Answer: a. Privilege escalationhalcyon​
7. Macro execution attacks commonly deliver which type of payload?
   a. Ransomware
   b. Ad blockers
   c. Browser extensions
   d. Screensavers
   Answer: a. Ransomwarecynet+1​
8. What popular ransomware campaigns have leveraged macro-based delivery methods?
   a. WannaCry and Zeus
   b. Emotet and Locky
   c. Mirai and Sasser
   d. CryptoLocker and Slammer
   Answer: b. Emotet and Lockywisdify+1​
9. Malicious macros often evade analysis through which technique?
   a. Code obfuscation
   b. Binary compression
   c. Hash enumeration
   d. File fragmentation
   Answer: a. Code obfuscationsasa-software​
10. What command-line tool is frequently invoked by malicious macros to execute payloads?
    a. Telnet
    b. PowerShell
    c. Netcat
    d. Ping
    Answer: b. PowerShellcynet+1​
11. What is one reason document-based attacks are so effective?
    a. They bypass antivirus whitelisting
    b. Users trust familiar document formats
    c. They modify hardware drivers
    d. They affect only web servers
    Answer: b. Users trust familiar document formatswisdify+1​
12. Which component of social engineering is crucial in macro attacks?
    a. Urgency creation
    b. Code optimization
    c. File encryption
    d. Network segmentation
    Answer: a. Urgency creationsasa-software​
13. Which macro-based malware downloaded additional payloads using VBA?
    a. ILOVEYOU
    b. Emotet
    c. Melissa
    d. MyDoom
    Answer: b. Emotethalcyon+1​
14. What is a key indicator of a malicious macro document?
    a. Requests to enable macros
    b. Random font changes
    c. Missing author information
    d. Hidden formulas
    Answer: a. Requests to enable macroscynet+1​
15. Malicious macros primarily spread through what method?
    a. Phishing emails
    b. Drive-by downloads
    c. USB autoruns
    d. DNS hijacking
    Answer: a. Phishing emailswisdify+1​
16. Which Microsoft technology do macros depend on for execution?
    a. VBA runtime engine
    b. Terminal services
    c. Active Directory
    d. Windows Defender ATP
    Answer: a. VBA runtime enginesentinelone+1​
17. When a macro runs, it can perform which action?
    a. Disable antivirus software
    b. Edit the system BIOS
    c. Reset user passwords automatically
    d. Execute malware scans
    Answer: a. Disable antivirus softwaresasa-software+1​
18. What type of file extension typically contains macros?
    a. .docm
    b. .exe
    c. .txt
    d. .log
    Answer: a. .docmsentinelone+1​
19. Which macro feature is designed for automation but often misused in cyberattacks?
    a. AutoOpen
    b. AutoSave
    c. AutoUpdate
    d. AutoFill
    Answer: a. AutoOpenzvelo+1​
20. What does enabling “Protected View” in Office applications help prevent?
    a. Macro execution without consent
    b. Font styling
    c. Automatic file compression
    d. Data copying
    Answer: a. Macro execution without consentwisdify​
21. What scripting type may macros use for persistent backdoors?
    a. VBScript
    b. Shell script
    c. Batch files
    d. JSON
    Answer: a. VBScriptcyfirma​
22. What is the greatest risk posed by macro-enabled ransomware?
    a. Privilege escalation
    b. File encryption
    c. Data compression
    d. CPU overload
    Answer: b. File encryptionhalcyon​
23. How does Excel 4.0 macro malware differ from VBA macros?
    a. It uses legacy macro execution layers
    b. It runs on newer APIs
    c. It requires admin rights
    d. It only executes in CSV files
    Answer: a. It uses legacy macro execution layerszvelo​
24. Why do adversaries prefer Office macro attacks?
    a. They evade traditional application whitelisting
    b. They are detectable by default
    c. They require admin installation
    d. They do not work on modern systems
    Answer: a. They evade traditional application whitelistingcynet+1​
25. What initial file behavior might signal a malicious macro?
    a. Background network connection attempts
    b. Text formatting
    c. Table recalculations
    d. Document printing
    Answer: a. Background network connection attemptshalcyon+1​
26. What tool can administrators use to disable macros organization-wide?
    a. Group Policy Editor
    b. Task Scheduler
    c. Network Monitor
    d. Event Viewer
    Answer: a. Group Policy Editorgeeksforgeeks+1​
27. What security setting should be default in Office to mitigate macro-based risk?
    a. Disable all macros without notification
    b. Allow signed macros only
    c. Disable macros with warning
    d. Enable macros by default
    Answer: a. Disable all macros without notificationthalestct+1​
28. What type of analysis detects obfuscated macro code?
    a. Static analysis
    b. Dynamic routing
    c. Quantum encryption
    d. DNS analysis
    Answer: a. Static analysissasa-software​
29. Which user behavior increases macro attack success?
    a. Ignoring security warnings
    b. Updating Office regularly
    c. Disabling external links
    d. Restricting ActiveX controls
    Answer: a. Ignoring security warningssasa-software+1​
30. Which macro command can download external scripts?
    a. Shell
    b. MsgBox
    c. CommandShow
    d. EOF
    Answer: a. Shellcynet+1​
31. What does the “SIDE” cybersecurity method recommend for macro protection?
    a. Scan, Implement, Disable, Educate
    b. Stop, Inspect, Defend, Encrypt
    c. Secure, Identify, Detect, Evaluate
    d. Simplify, Inform, Disable, Evade
    Answer: a. Scan, Implement, Disable, Educatewisdify​
32. How do malicious macros achieve persistence on systems?
    a. Modify registry entries
    b. Disable mouse input
    c. Convert files to PDFs
    d. Edit firewall rules automatically
    Answer: a. Modify registry entriescynet+1​
33. Which attack type specifically relies on user interaction to enable execution?
    a. Macro script attack
    b. Zero-click exploit
    c. Buffer overflow
    d. DoS attack
    Answer: a. Macro script attackattack.mitre​
34. Which cyber framework categorizes macro execution under “User Execution”?
    a. MITRE ATT&CK
    b. NIST CSF
    c. ISO/IEC 27001
    d. CIS Controls
    Answer: a. MITRE ATT&CKattack.mitre​
35. Macros may use which batch scripting technique for further execution?
    a. Scheduled task creation
    b. GUI thread hijacking
    c. Buffer replacement
    d. DLL side-loading
    Answer: a. Scheduled task creationcyfirma​
36. Which organization provides frequent analyses of macro threats?
    a. SentinelOne
    b. NASA
    c. CDC
    d. IEEE
    Answer: a. SentinelOnesentinelone​
37. What defense can detect macro traffic trying to reach command-and-control servers?
    a. Network intrusion detection systems
    b. Local firewalls only
    c. Disk cleaners
    d. Image compression algorithms
    Answer: a. Network intrusion detection systemsgeeksforgeeks+1​
38. Which Microsoft file format does not support macros?
    a. .docx
    b. .xlsm
    c. .pptm
    d. .docm
    Answer: a. .docxsentinelone+1​
39. Which macro function allows system-level calls?
    a. ShellExecute
    b. MsgPrompt
    c. Randomize
    d. CountIf
    Answer: a. ShellExecutesasa-software+1​
40. During detection, what indicates macro-based compromise?
    a. VBA project password protection disabled
    b. Missing macros list
    c. Unreadable metadata
    d. Document preview disabled
    Answer: a. VBA project password protection disabledsentinelone+1​
41. How can macros perform lateral movement?
    a. Executing remote scripts after authentication
    b. Rebooting systems
    c. Sending email reminders
    d. Logging mouse clicks
    Answer: a. Executing remote scripts after authenticationhalcyon​
42. Which countermeasure limits macro infections across domains?
    a. Email attachment filtering
    b. Cloud data backups
    c. Domain Name Server caching
    d. Encrypted USB transfers
    Answer: a. Email attachment filteringwisdify​
43. Which year did macro malware start becoming a major cyber threat vector?
    a. 1999
    b. 2010
    c. 2015
    d. 2020
    Answer: c. 2015zvelo+1​
44. Which element of Office macros can attackers digitally sign to appear legitimate?
    a. Certificates
    b. Field codes
    c. Styles
    d. Extensions
    Answer: a. Certificatescynet​
45. Which attacker objective describes macro abuse to bypass content filters?
    a. Obfuscation of code
    b. Network flooding
    c. Data compression
    d. Memory padding
    Answer: a. Obfuscation of codesasa-software​
46. What behavior is most suspicious in Office macro activity?
    a. PowerShell process spawning from Excel
    b. Background spelling checks
    c. Clipboard access
    d. Document resizing
    Answer: a. PowerShell process spawning from Excelcynet+1​
47. What is a common mitigation approach for enterprises?
    a. Application whitelisting
    b. Default macro auto-run
    c. Network printer blocking
    d. USB drive encryption
    Answer: a. Application whitelistingthalestct+1​
48. What command might a macro use to disable antivirus temporarily?
    a. REG ADD
    b. PING
    c. CLS
    d. TREE
    Answer: a. REG ADDsasa-software​
49. Which Office version first introduced macro security warnings?
    a. Office 2007
    b. Office XP (2002)
    c. Office 2013
    d. Office 2019
    Answer: b. Office XP (2002)geeksforgeeks​
50. The main human vulnerability exploited by macro attacks is?
    a. Trust in document legitimacy
    b. Lack of hardware firewalls
    c. Use of VPNs
    d. Weak password complexity
    Answer: a. Trust in document legitimacyhalcyon+1​

1. https://wisdify.com/why-using-excel-macros-could-expose-you-to-cyber-threats/
2. https://www.sentinelone.com/cybersecurity-101/what-is-a-macro-virus/
3. https://www.sasa-software.com/learning/what-is-a-malicious-macro/
4. https://www.halcyon.ai/faqs/what-is-a-malicious-macro
5. https://www.cyfirma.com/outofband/from-macro-to-payload-decrypting-the-sidewinder-cyber-intrusion-tactics/
6. https://zvelo.com/excel-4-0-macros-another-old-school-attack-method/
7. https://www.cynet.com/attack-techniques-hands-on/office-macro-attacks/
8. https://www.geeksforgeeks.org/computer-networks/what-is-macro-virus-and-how-they-affect-computer-systems/
9. https://www.thalestct.com/wp-content/uploads/2022/09/malicious-macros-wp-2.pdf
10. https://attack.mitre.org/techniques/T1204/002/
11. https://www.sanfoundry.com/cyber-security-questions-answers-types-cyber-attacks/
12. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
13. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
14. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
15. https://letsfindcourse.com/cyber-security-mcq/cyber-attacks-mcq-questions-and-answers
16. https://www.yeahhub.com/cyber-security-mcq-35-questions-with-answers/
17. https://www.placementpreparation.io/mcq/cyber-security/page/5/
18. https://siteforinfotech.com/2013/01/mcq-of-computer-security-with-answer.html
19. https://www.scribd.com/document/524434738/mcq-questions-on-cyber-security
20. https://testbook.com/objective-questions/mcq-on-types-of-malicious-softwares–5eea6a1039140f30f369e884