MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Malicious flash drives are primarily used to:
a. Store large files
b. Deliver malware to systems
c. Improve data transfer speeds
d. Encrypt sensitive data
Answer: b. Deliver malware to systemsgriffith+1
The act of leaving infected USBs in public places to trick users is called:
a. Phishing attack
b. Brute force attack
c. USB drop attack
d. DDoS attack
Answer: c. USB drop attackosibeyond+1
The main goal of a USB drop attack is to:
a. Trick users into deleting data
b. Cause power surges
c. Infect systems using human curiosity
d. Update antivirus software
Answer: c. Infect systems using human curiositymanageengine+1
USB devices posing as keyboards to inject keystrokes are known as:
a. Ransomware drives
b. HID spoofing devices
c. Trojan sticks
d. Network sniffers
Answer: b. HID spoofing devicesplurilock+1
A USB Rubber Ducky attack emulates which type of hardware?
a. Network adapter
b. Mouse
c. Keyboard
d. Webcam
Answer: c. Keyboardivanti+1
BadUSB attacks exploit the trust computers have in:
a. Network traffic
b. USB firmware
c. Cloud drives
d. Storage capacity
Answer: b. USB firmwareplurilock+1
The SOGU malware spread via USB mainly uses which technique?
a. DLL hijacking
b. SSH tunneling
c. ARP poisoning
d. Keylogging
Answer: a. DLL hijackingcloud.google
A Rubber Ducky device injects keystrokes through:
a. Cloud synchronization
b. Firmware patches
c. Emulated keyboard input
d. Data compression
Answer: c. Emulated keyboard inputivanti+1
Social engineering in USB drop attacks exploits:
a. Curiosity and trust
b. File encryption
c. Power regulation
d. Hardware malfunction
Answer: a. Curiosity and trustconnect.panasonic+1
Network adapter spoofing in BadUSB can lead to:
a. Hardware overheating
b. Traffic redirection
c. Password reset
d. VPN disconnection
Answer: b. Traffic redirectionivanti
Malware propagation via USB primarily targets:
a. Air-gapped systems
b. Cloud storage
c. Mobile apps
d. IoT wearables
Answer: a. Air-gapped systemsattack.mitre+1
The most effective prevention measure against USB malware is:
a. Using public networks safely
b. Avoiding unknown USBs
c. Sharing devices frequently
d. Installing browser extensions
Answer: b. Avoiding unknown USBstracesecurity+1
CERT-In identifies malware propagation through USB drives as a key threat because it:
a. Securely isolates data
b. Transfers power safely
c. Acts as a carrier for infection
d. Prevents data exfiltration
Answer: c. Acts as a carrier for infectioncert-in
Zero-day attacks in malicious USBs exploit:
a. Patched vulnerabilities
b. Unpatched software flaws
c. Hardware limits
d. Inefficient file systems
Answer: b. Unpatched software flawsmanageengine
HID spoofing in flash drives misleads systems into:
a. Identifying them as serial ports
b. Treating them as keyboards
c. Upgrading firmware
d. Blocking ports
Answer: b. Treating them as keyboardsmanageengine+1
The primary human factor leading to USB drop attack success is:
a. Curiosity
b. Fear
c. Confusion
d. Laziness
Answer: a. Curiosityconnect.panasonic
Malicious USB drives used in espionage can exfiltrate:
a. Output voltages
b. Network credentials
c. Hardware IDs
d. Screen brightness information
Answer: b. Network credentialssciencedirect+1
A USB drive executing commands automatically exploits:
a. System prompts
b. AutoRun or auto-execution
c. Device manager settings
d. Power save mode
Answer: b. AutoRun or auto-executioncloud.google+1
The best method to limit USB-based threats in enterprises is:
a. USB access control policies
b. Data caching
c. Cloud sharing
d. Frequent formatting
Answer: a. USB access control policiesivanti
BadUSB attacks often evade:
a. Firewalls
b. Hardware upgrades
c. Antivirus detection
d. Backup software
Answer: c. Antivirus detectionivanti
Infected USBs can carry both executable files and:
a. Malicious DLLs
b. Text notes
c. Disk partitions
d. Sound files
Answer: a. Malicious DLLscloud.google
A common prevention method for USB attacks is:
a. Disabling unused ports
b. Defragmenting disks
c. Running maintenance tasks
d. Replacing drives monthly
Answer: a. Disabling unused portsivanti
Data exfiltration via USB can target air-gapped systems because:
a. They use cloud sync
b. It bypasses network connections
c. Firewalls allow it
d. Systems auto-configure drives
Answer: b. It bypasses network connectionsattack.mitre
Many USB malware campaigns aim to install:
a. Storage recovery software
b. Backdoors
c. File compressors
d. Device drivers
Answer: b. Backdoorscloud.google+1
The Rubber Ducky attack begins immediately after:
a. User approval
b. Plug-in
c. Booting OS
d. Antivirus update
Answer: b. Plug-inplurilock+1
Infected USBs often masquerade as:
a. Data cables or accessories
b. Network cables
c. Wi-Fi dongles
d. Power adapters
Answer: a. Data cables or accessoriesivanti
The SNOWYDRIVE malware campaign primarily targeted:
a. Oil and gas industry
b. Banking sector
c. Educational institutions
d. E-commerce platforms
Answer: a. Oil and gas industrycloud.google
Attackers label dropped USBs with terms like:
a. Personal use
b. Payroll or Confidential
c. Warning sign
d. Test drive
Answer: b. Payroll or Confidentialtracesecurity+1
USB drop success relies on victims doing what?
a. Reporting it
b. Plugging it in
c. Formatting it
d. Deleting hidden files
Answer: b. Plugging it inosibeyond+1
A malicious USB that steals network traffic acts as:
a. Malware scanner
b. Network adapter
c. DNS server
d. System logger
Answer: b. Network adaptersciencedirect+1
An organization’s USB policy should include:
a. Endpoint management
b. Biometric access
c. Power saving
d. Virtualization control
Answer: a. Endpoint managementsciencedirect+1
SOGU malware reconnaissance collects which data?
a. System info and processes
b. Audio files
c. Mobile app logs
d. Printer status
Answer: a. System info and processescloud.google
Infected flash drives often contain:
a. Malicious executables
b. Graphics drivers
c. Device firmware
d. Anti-virus apps
Answer: a. Malicious executablescloud.google
USB-based malware infections are considered:
a. Airborne attacks
b. Physical vector attacks
c. Social-only attacks
d. Virtual-only attacks
Answer: b. Physical vector attacksconnect.panasonic+1
Proper USB usage policy emphasizes:
a. Using only authorized devices
b. Open file sharing
c. Automatic scanning
d. File compression
Answer: a. Using only authorized devicessciencedirect+1
USBIPS is a framework designed to:
a. Block malicious USB activity
b. Encrypt user data
c. Optimize transfer speed
d. Reduce power use
Answer: a. Block malicious USB activitysciencedirect
Attackers use keyboard emulation for:
a. Executing preloaded scripts
b. Generating random inputs
c. Logging manual keystrokes
d. Encrypting command prompts
Answer: a. Executing preloaded scriptsplurilock
Organizations must treat USBs as potential:
a. Backup devices
b. Threat vectors
c. Firewalls
d. Patches
Answer: b. Threat vectorscoro+1
The Mandiant report identified USB malware used for:
a. DLL hijacking
b. DNS spoofing
c. ARP broadcasting
d. RAM compression
Answer: a. DLL hijackingcloud.google
Regular system patching helps stop:
a. Zero-day USB exploits
b. Hardware failures
c. Software upgrades
d. Power surges
Answer: a. Zero-day USB exploitsmanageengine+1
A USB appearing as a network interface can:
a. Bridge internal traffic to malicious servers
b. Clean cached data
c. Format drives
d. Encrypt logs
Answer: a. Bridge internal traffic to malicious serversivanti
Human Interface Device spoofing is part of:
a. Rubber Ducky and BadUSB attacks
b. Firmware upgrades
c. Secure backups
d. Port scanning
Answer: a. Rubber Ducky and BadUSB attacksplurilock+1
USB drop experiments show success rates above:
a. 20%
b. 45%
c. 60%
d. 98%
Answer: d. 98%connect.panasonic
Rubber Ducky payloads execute faster than:
a. Human typing
b. Network latency
c. File compression
d. Antivirus scanning
Answer: a. Human typingplurilock
USB exfiltration techniques can bypass:
a. Firewalls and air-gap security
b. BIOS locking
c. Password hashing
d. USB formatting
Answer: a. Firewalls and air-gap securitycheckpoint+1
The psychological aspect of USB attacks relies on:
a. Curiosity and empathy
b. Ignorance
c. Fear
d. Greed
Answer: a. Curiosity and empathytracesecurity+1
USB drive malware may execute hidden payloads via:
a. AutoRun files
b. System restore points
c. Scheduled tasks
d. BIOS triggers
Answer: a. AutoRun filescloud.google
SPYUSB framework aims to:
a. Detect and mitigate USB malware
b. Encrypt USB partitions
c. Increase transfer rate
d. Cloud sync removable drives
Answer: a. Detect and mitigate USB malwareijset
To protect against USB attacks, organizations should:
a. Use physical port blockers
b. Reuse public USBs
c. Allow all devices
d. Disable antivirus
Answer: a. Use physical port blockersivanti
The most essential defense against malicious USBs is:
a. User awareness training
b. Increasing storage
c. Using multiple USBs
d. Defragmentation
Answer: a. User awareness trainingtracesecurity+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info