MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Python script execution attacks exploit which language feature most commonly?
a. Static typing
b. Dynamic execution
c. Strict syntax enforcement
d. Compiled modules
Answer: b. Dynamic executioncryptika+1
Which Python functions are often abused for malicious code execution?
a. print() and len()
b. exec() and eval()
c. split() and join()
d. open() and close()
Answer: b. exec() and eval()cryptika
What is the primary purpose of the Python exec() function?
a. Executes shell commands directly
b. Dynamically executes Python code as a string
c. Reads user input securely
d. Encrypts data
Answer: b. Dynamically executes Python code as a stringaquasec+1
Why are eval() and exec() dangerous in Python applications?
a. They force syntax errors
b. They run arbitrary code if untrusted input is passed
c. They disable modules
d. They restrict imports
Answer: b. They run arbitrary code if untrusted input is passedcryptika
Which technique allows attackers to conceal malicious code in Python scripts?
a. Compression
b. Homoglyph obfuscation
c. Deep learning encoding
d. Hashing
Answer: b. Homoglyph obfuscationcryptika
An injection flaw allows attackers to perform what type of action in Python?
a. Insert unauthorized commands into program flow
b. Encrypt data dynamically
c. Limit system memory usage
d. Block network access
Answer: a. Insert unauthorized commands into program flowsnyk+1
Command injection in Python occurs when user input is passed to what?
a. sys.exit()
b. os.system()
c. int()
d. json.dumps()
Answer: b. os.system()aquasec
Which Python module, if misused, can lead to remote code execution?
a. re
b. subprocess
c. random
d. json
Answer: b. subprocessaquasec+1
A Python script that downloads commands from a remote source typifies what attack?
a. Local denial
b. Remote command execution
c. Directory traversal
d. Buffer overflow
Answer: b. Remote command executionfortinet+1
Attackers exploit insecure deserialization in Python primarily through:
a. pickle module
b. hashlib module
c. sys module
d. math module
Answer: a. pickle modulefortinet+1
Which of the following prevents Python script execution attacks best?
a. Using assert statements
b. Validating and sanitizing user input
c. Disabling debugging logs only
d. Storing plaintext passwords
Answer: b. Validating and sanitizing user inputsnyk+1
A supply chain attack through Python package repositories such as PyPI involves:
a. Legitimate package downloads only
b. Uploading trojanized versions of trusted libraries
c. File compression
d. Safe cryptographic operations
Answer: b. Uploading trojanized versions of trusted librariesfortinet+1
Why are obfuscated Python scripts dangerous?
a. They run slower
b. They conceal malicious payloads from detection systems
c. They reduce memory footprint
d. They improve maintainability
Answer: b. They conceal malicious payloads from detection systemsfortinet+1
Which command can execute arbitrary system commands from Python?
a. os.system()
b. sys.argv()
c. os.listdir()
d. re.search()
Answer: a. os.system()infosecinstitute+1
An attacker abuses Python’s dynamic typing to:
a. Increase security
b. Evade static detection tools
c. Lower privileges
d. Enable sandboxing
Answer: b. Evade static detection toolscryptika+1
The best defense against malicious Python package usage is:
a. Downloading from trusted sources only
b. Ignoring dependency versions
c. Using outdated pip versions
d. Disabling HTTPS
Answer: a. Downloading from trusted sources onlyfortinet
What is a sandbox environment used for in Python script testing?
a. To isolate code execution for security
b. To enhance memory usage
c. To encrypt output
d. To disable packages
Answer: a. To isolate code execution for securitysnyk+1
What library helps in assessing Python package vulnerabilities?
a. NumPy
b. Snyk
c. Flask
d. TensorFlow
Answer: b. Snyksnyk
A malicious Python script collecting keystrokes likely uses:
a. sockets
b. pynput library
c. random
d. requests
Answer: b. pynput libraryfortinet
Directory traversal in Python enables attackers to:
a. Execute random memory access patterns
b. Access files beyond intended directories
c. Delete compilation outputs
d. Mask extensions
Answer: b. Access files beyond intended directoriesaquasec
The combination of eval() and input() is insecure because:
a. It restricts scripting
b. It can directly execute user-provided data
c. It logs arguments
d. It disables exceptions
Answer: b. It can directly execute user-provided datasnyk+1
Which mitigation reduces Python code injection risk?
a. Use of literal_eval() from ast module
b. Replacing vars()
c. Use of globals()
d. Hardcoding data
Answer: a. Use of literal_eval() from ast modulesnyk
What main factor increases Python code attack surfaces?
a. Simplicity of syntax
b. Dynamic and reflective features
c. File size
d. Memory safety
Answer: b. Dynamic and reflective featurescryptika
Python-based malware often uses what to persist on systems?
a. Registry edits or startup tasks
b. Random seeding
c. Logging libraries
d. List comprehensions
Answer: a. Registry edits or startup tasksfortinet
What technique helps evade regex-based detection in Python malware?
a. Unicode homoglyph usage
b. Syntax error injection
c. Code indentation exploits
d. Variable shortening
Answer: a. Unicode homoglyph usagecryptika
Why is subprocess.Popen() risky?
a. It spawns child processes that may execute injected commands
b. It encrypts files
c. It parses JSON automatically
d. It writes to registry
Answer: a. It spawns child processes that may execute injected commandsaquasec
What is the role of static analysis tools in defending Python systems?
a. Detect obfuscated or malicious code patterns before execution
b. Compile scripts
c. Measure performance
d. Manage dependencies
Answer: a. Detect obfuscated or malicious code patterns before executioncryptika
A malicious Python script that communicates with a remote server over HTTP is performing:
a. Command-and-control activity
b. Log file reporting
c. Debug mode analysis
d. Safe API interaction
Answer: a. Command-and-control activityfortinet
What makes Python dangerous in malware development?
a. Preinstalled libraries, cross-platform nature, and dynamic code execution
b. Static linking
c. Automatic compilation
d. High CPU usage
Answer: a. Preinstalled libraries, cross-platform nature, and dynamic code executionsoftteco+1
Remote code execution in Python occurs when:
a. Untrusted input reaches system-level APIs
b. Code is encrypted securely
c. Python virtual environments are used
d. Modules are print-only
Answer: a. Untrusted input reaches system-level APIsaquasec
Why should you avoid pickle.load() with untrusted data?
a. It disables JSON
b. It can execute arbitrary code during deserialization
c. It blocks string I/O
d. It fails to compile
Answer: b. It can execute arbitrary code during deserializationaquasec
In cybersecurity, sandbox escape means:
a. Executing code beyond intended isolated boundaries
b. Disabling print statements
c. Encrypting all directories
d. Resetting permissions
Answer: a. Executing code beyond intended isolated boundariescryptika
Python’s flexibility in executing strings contributes to:
a. Increased susceptibility to injection attacks
b. Faster debug cycle
c. Reduced CPU load
d. Safer I/O
Answer: a. Increased susceptibility to injection attacksaquasec+1
A defensive coding approach in Python includes:
a. Strict type checking and limited eval usage
b. Increased recursion limits
c. Comment removal
d. Ignoring exceptions
Answer: a. Strict type checking and limited eval usagesnyk
Unauthorized Python code execution usually aims to:
a. Steal data, gain remote control, or exfiltrate credentials
b. Increase network latency
c. Enhance CPU cycles
d. Perform static linking
Answer: a. Steal data, gain remote control, or exfiltrate credentialsfortinet
What Python module can attackers use to encrypt stolen data?
a. cryptography
b. math
c. sys
d. itertools
Answer: a. cryptographysoftteco
Detecting eval misuse can be automated through:
a. Code scanning tools
b. Manual syntax testing
c. File compression
d. Token sorting
Answer: a. Code scanning toolssnyk+1
Which vulnerability arises from error messages revealing debug data?
a. Verbose error exposure
b. Replay attack
c. Injection of logs
d. Type confusion
Answer: a. Verbose error exposureaquasec
The function os.popen() may be exploited to:
a. Execute system commands
b. Open secure sockets
c. Manage memory
d. Escape sandboxing
Answer: a. Execute system commandsaquasec
Which defense limits malicious subprocess calls?
a. Whitelisting allowed commands
b. Disabling exception handling
c. Using random imports
d. Hardcoding credentials
Answer: a. Whitelisting allowed commandssnyk+1
Obfuscated payloads often use what to evade detection?
a. Encodings and compression layering
b. Minimal whitespace
c. Random capitalization
d. Modular arithmetic
Answer: a. Encodings and compression layeringcryptika
An insecure Python environment typically lacks:
a. Access control and code review
b. Logging system
c. Networking
d. Loop handlers
Answer: a. Access control and code reviewfortinet+1
Python malware developers often weaponize:
a. Legitimate scripting libraries like requests and socket
b. Hardware interrupts
c. Mathematical constants
d. Static typing
Answer: a. Legitimate scripting libraries like requests and socketsoftteco+1
Using a virtual environment improves safety by:
a. Isolating dependencies from system-level Python
b. Accelerating imports
c. Debugging automatically
d. Encrypting scripts
Answer: a. Isolating dependencies from system-level Pythonsnyk
A Python reverse shell typically uses which networking feature?
a. Socket connections
b. Local JSON files
c. Pandas dataframes
d. mc libraries
Answer: a. Socket connectionssoftteco
What symptom indicates Python malware activity?
a. Unexpected outbound network connections from Python processes
b. Faster execution
c. GUI responsiveness
d. Frequent syntax warnings
Answer: a. Unexpected outbound network connections from Python processesfortinet
Python “exec” attacks are a subset of which larger category?
a. Code injection attacks
b. Man-in-the-middle attacks
c. Replay attacks
d. SQL injection
Answer: a. Code injection attacksaquasec+1
The Python logging module should avoid storing:
a. Sensitive credentials and personal data
b. Normal exceptions
c. Stack traces
d. Log rotation settings
Answer: a. Sensitive credentials and personal datasnyk
Attackers commonly deploy Python for which initial step in cyber operations?
a. Reconnaissance
b. Hardware upgrades
c. User training
d. System reboot
Answer: a. Reconnaissancepanther+1
Which cybersecurity principle minimizes risks from Python script execution attacks?
a. Least privilege
b. Full administrative access
c. Infinite recursion
d. Disabling antivirus
Answer: a. Least privilegefortinet+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info