MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is a replay attack in cybersecurity?
   a. Modifying data transmissions
   b. Replaying captured valid data to deceive the recipient
   c. Denying service by overloading a system
   d. Injecting malicious code into software
   Answer: b. Replaying captured valid data to deceive the recipientwallarm+1​
2. Which layer is often targeted during replay attacks?
   a. Physical layer
   b. Data link layer
   c. Application layer
   d. Presentation layer
   Answer: c. Application layerwallarm​
3. What is a common method attackers use to capture data for replay attacks?
   a. Denial of service
   b. Packet sniffing
   c. Phishing
   d. Spoofing
   Answer: b. Packet sniffingwallarm​
4. Replay attacks are classified under which type of attack?
   a. Passive attack
   b. Active attack
   c. Insider attack
   d. Social engineering attack
   Answer: a. Passive attackscribd​
5. What is the primary consequence of a successful replay attack?
   a. Data destruction
   b. Unauthorized actions and impersonation
   c. System shutdown
   d. Data encryption
   Answer: b. Unauthorized actions and impersonationwallarm​
6. Which of the following can help prevent replay attacks?
   a. One-time session keys
   b. Static passwords
   c. Open networks
   d. Unencrypted communication
   Answer: a. One-time session keyskaspersky​
7. Which cryptographic technique is useful to prevent replay attacks?
   a. Symmetric encryption without nonce
   b. Use of timestamps and nonces
   c. Hash functions only
   d. Plain text communication
   Answer: b. Use of timestamps and nonceskaspersky​
8. Replay attacks can be used to exploit which system component?
   a. Network routing tables
   b. Authentication and authorization mechanisms
   c. Hardware firewalls
   d. Physical security
   Answer: b. Authentication and authorization mechanismswallarm​
9. What makes replay attacks particularly dangerous?
   a. They require complex decryption skills
   b. The attacker only needs to resend previously captured data
   c. They use malware to infect systems
   d. They crash servers
   Answer: b. The attacker only needs to resend previously captured datakaspersky​
10. How is a replay attack different from a man-in-the-middle attack?
    a. Replay attacks modify the data
    b. Replay attacks resend data without alteration
    c. Man-in-the-middle attacks only listen
    d. Man-in-the-middle attacks are passive only
    Answer: b. Replay attacks resend data without alterationyoutube​
11. Which protocol is vulnerable to replay attacks due to lack of protection against old messages?
    a. HTTPS
    b. Kerberos
    c. NTLM
    d. SSH
    Answer: c. NTLMpacketlabs​
12. What is a nonce in replay attack prevention?
    a. A reusable encryption key
    b. A random number used once in a communication session
    c. A password
    d. A network address
    Answer: b. A random number used once in a communication sessionkaspersky​
13. Why is timestamping helpful in preventing replay attacks?
    a. It encrypts the message
    b. It limits validity of messages to a specific time window
    c. It authenticates the sender only
    d. It delays message transmission
    Answer: b. It limits validity of messages to a specific time windowkaspersky​
14. How does using a one-time password (OTP) mitigate replay attacks?
    a. OTPs are longer than regular passwords
    b. Each password is only valid once for one session
    c. OTPs encrypt the entire message
    d. OTPs require no network connectivity
    Answer: b. Each password is only valid once for one sessionpacketlabs​
15. What role do session keys play in defending against replay attacks?
    a. They provide a persistent key for all sessions
    b. They provide a unique key for each session that expires after use
    c. They store user identities
    d. They prevent physical access
    Answer: b. They provide a unique key for each session that expires after usekaspersky​
16. Replay attacks mainly exploit weaknesses in:
    a. Data confidentiality
    b. Data integrity
    c. Data authentication mechanisms
    d. Physical security
    Answer: c. Data authentication mechanismswallarm​
17. Which is NOT an effective defense against replay attacks?
    a. Implementing encryption only
    b. Using timestamps
    c. Using nonces
    d. Employing session keys
    Answer: a. Implementing encryption onlykaspersky​
18. In a replay attack, attackers usually:
    a. Build a new connection with altered data
    b. Resend intercepted transmissions unchanged
    c. Interrupt service availability
    d. Infect systems with ransomware
    Answer: b. Resend intercepted transmissions unchangedwallarm​
19. Replay attacks are most commonly used against:
    a. Email servers
    b. Financial transactions and authentication protocols
    c. Physical security devices
    d. Antivirus software
    Answer: b. Financial transactions and authentication protocolswallarm​
20. What is often the first step in a replay attack?
    a. Modifying the data packets
    b. Capturing data packets during transit
    c. Locking out users
    d. Sending phishing emails
    Answer: b. Capturing data packets during transitwallarm​
21. Which of the following is an example of a replay attack?
    a. Resending a valid payment authorization to duplicate a transaction
    b. Stealing credentials via keylogger
    c. Denying service by flooding traffic
    d. Sending phishing links
    Answer: a. Resending a valid payment authorization to duplicate a transactionyoutube​wallarm​
22. How does a secure communication protocol help prevent replay attacks?
    a. By encrypting messages with permanent keys
    b. By ensuring each message is unique with session keys and timestamps
    c. By blocking all incoming traffic
    d. By ignoring network traffic
    Answer: b. By ensuring each message is unique with session keys and timestampskaspersky​
23. Which term describes a replay attack that modifies the original message before resending?
    a. Altered replay attack
    b. Masquerade attack
    c. Denial-of-service attack
    d. Injection attack
    Answer: a. Altered replay attackwallarm​
24. Replay attacks fall under which cybersecurity attack category?
    a. Cryptanalysis attacks
    b. Network attacks
    c. Social engineering attacks
    d. Malware-based attacks
    Answer: b. Network attackswikipedia​
25. What is an effective protocol design feature to resist replay attacks?
    a. Stateless communication
    b. Use of sequence numbers and timestamps
    c. Use of fixed encryption keys
    d. Limiting message lengths
    Answer: b. Use of sequence numbers and timestampswikipedia​
26. Replay attacks may cause:
    a. System crashes only
    b. Unauthorized access and transaction duplication
    c. Only data leakage
    d. Physical destruction of hardware
    Answer: b. Unauthorized access and transaction duplicationwallarm​
27. Which authentication protocol is inherently resistant to replay attacks?
    a. Basic HTTP authentication
    b. Kerberos with timestamp and ticketing
    c. NTLM without timestamps
    d. Unencrypted Telnet
    Answer: b. Kerberos with timestamp and ticketingpacketlabs​
28. Replay attacks can be launched using:
    a. Physical theft only
    b. Packet capture and retransmission tools
    c. SQL injection
    d. Ransomware
    Answer: b. Packet capture and retransmission toolswallarm​
29. What characteristic of wireless networks can increase vulnerability to replay attacks?
    a. Wired connectivity
    b. Broadcast medium openness
    c. Encrypted communication always
    d. Closed system architecture
    Answer: b. Broadcast medium opennesswallarm​
30. Which of the following is a limitation of timestamp-based prevention methods?
    a. They do not depend on clock synchronization
    b. Susceptible if clocks between sender and receiver are not synchronized
    c. They encrypt messages end-to-end
    d. They prevent eavesdropping completely
    Answer: b. Susceptible if clocks between sender and receiver are not synchronizedkaspersky​
31. What is the role of sequence numbers in replay attack prevention?
    a. Encrypt messages
    b. Identify the ordering of messages to detect duplicates
    c. Authenticate users
    d. Compress data
    Answer: b. Identify the ordering of messages to detect duplicateswikipedia​
32. In which scenario is a replay attack most difficult?
    a. When nonces or timestamps are not used
    b. When every message is unique and session-specific
    c. When all messages are logged
    d. When passwords are reused
    Answer: b. When every message is unique and session-specifickaspersky​
33. Replay attacks help criminals to:
    a. Send fake emails
    b. Gain unauthorized access by mimicking legitimate data transmissions
    c. Modify encrypted messages
    d. Spread viruses
    Answer: b. Gain unauthorized access by mimicking legitimate data transmissionswallarm​
34. What is an example of a session key usage?
    a. Reusing the same key indefinitely
    b. Keys valid only for one communication session
    c. Using keys without encryption
    d. Hard-coding keys in software
    Answer: b. Keys valid only for one communication sessionkaspersky​
35. Replay attacks are:
    a. Simple but effective in bypassing authentication
    b. Complex and rarely attempted
    c. Limited to physical attacks
    d. Not dangerous with encrypted traffic
    Answer: a. Simple but effective in bypassing authenticationkaspersky​
36. Which of the following is NOT a component of a replay attack?
    a. Capturing valid data transmissions
    b. Altering the captured data before replay
    c. Resending the captured data to a receiver
    d. Deleting original communications
    Answer: d. Deleting original communicationswallarm​
37. What security principle does replay attack mainly violate?
    a. Confidentiality
    b. Integrity
    c. Authentication
    d. Availability
    Answer: c. Authenticationwallarm​
38. OTP tokens are vulnerable to replay attacks if:
    a. The same OTP is reused
    b. The tokens are encrypted
    c. The tokens have expiration time
    d. The tokens are unique for each session
    Answer: a. The same OTP is reusedpacketlabs​
39. Replay attacks often require an attacker to have:
    a. Physical possession of the target server
    b. Access to communication data in transit
    c. User password knowledge
    d. Authorization rights
    Answer: b. Access to communication data in transitwallarm​
40. Replay attacks can be prevented by which of these access control mechanisms?
    a. Role-based access control only
    b. Mutual authentication with unique session identifiers
    c. Open access policies
    d. Single-factor authentication
    Answer: b. Mutual authentication with unique session identifierswikipedia​
41. Which one is a method to detect a replayed message?
    a. Verifying message source IP only
    b. Checking timestamps and sequence numbers for validity
    c. Ignoring message timing
    d. Using static passwords
    Answer: b. Checking timestamps and sequence numbers for validitykaspersky​
42. Replay attacks exploit what kind of weakness?
    a. Inadequate encryption algorithms
    b. Inability to verify message freshness
    c. Lack of firewalls
    d. Unpatched software
    Answer: b. Inability to verify message freshnesswallarm​
43. A replay attack can be classified as:
    a. An insider threat
    b. An external attack leveraging captured data
    c. A phishing attack
    d. A hardware failure
    Answer: b. An external attack leveraging captured datawallarm​
44. Replay attacks have the potential to bypass:
    a. Network firewalls only
    b. Static authentication protocols without session validation
    c. Encryption
    d. Password complexity rules
    Answer: b. Static authentication protocols without session validationwallarm​
45. What effect can replay attacks have on company reputation?
    a. None, they are purely technical
    b. Damage trust in security leading to loss of clients
    c. Improve brand image
    d. Increase system uptime
    Answer: b. Damage trust in security leading to loss of clientswallarm​
46. What can help secure IoT devices from replay attacks?
    a. Disabling encryption
    b. Use of cryptographic nonces and secure key management
    c. Ignoring network traffic
    d. Open access to all devices
    Answer: b. Use of cryptographic nonces and secure key managementsciencedirect​
47. How does physical surveillance assist in replay attacks?
    a. It allows capturing data transmissions through visual monitoring
    b. It encrypts messages
    c. It blocks unauthorized users
    d. It prevents packet sniffing
    Answer: a. It allows capturing data transmissions through visual monitoringwallarm​
48. Replay attacks can cause what kind of network security risk?
    a. Data manipulation only
    b. Identity hijacking and unauthorized transactions
    c. Hardware failure only
    d. Malware infection only
    Answer: b. Identity hijacking and unauthorized transactionswallarm​
49. Which of these is NOT a typical tool used in replay attacks?
    a. Packet capture utilities
    b. Sniffers
    c. Firewalls
    d. Replay scripts
    Answer: c. Firewallswallarm​
50. What is a simple way to reduce replay attack risks in mobile communications?
    a. Use static passwords
    b. Implement time-sensitive tokens and session keys
    c. Disable encryption
    d. Use open Wi-Fi networks
    Answer: b. Implement time-sensitive tokens and session keyspacketlabs+1​

1. https://www.wallarm.com/what/replay-attacks
2. https://www.kaspersky.com/resource-center/definitions/replay-attack
3. https://www.scribd.com/document/808245613/Fundamentals-of-Cyber-Security-MCQ-with-Answers
4. https://www.youtube.com/watch?v=FZ1P1Mt_eog
5. https://www.packetlabs.net/posts/a-guide-to-replay-attacks-and-how-to-defend-against-them/
6. https://en.wikipedia.org/wiki/Replay_attack
7. https://www.sciencedirect.com/science/article/abs/pii/S1389128624008284
8. https://study.com/academy/practice/quiz-worksheet-replay-attack.html
9. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
10. https://examradar.com/man-in-the-middle-mitm-attacks-mcqs-multiple-choice-questions-with-answers/
11. https://www.scribd.com/document/553820157/Security-MCQ-1
12. https://www.yeahhub.com/certified-ethical-hacker-v10-multiple-choice-questions-answers-part-13/
13. https://askfilo.com/user-question-answers-smart-solutions/7-which-of-the-following-statements-are-true-about-dynamic-3430313232323735
14. https://www.igmguru.com/blog/cyber-security-mcqs
15. https://examradar.com/authentication-tokens-and-access-controls-in-web-security-mcqs/
16. https://www.studocu.com/in/document/rashtrasant-tukadoji-maharaj-nagpur-university/cyber-security/information-cyber-security-question-bankmcq/28819147
17. https://www.examtopics.com/discussions/comptia/view/12160-exam-fc0-u61-topic-1-question-34-discussion/
18. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
19. https://www.okta.com/identity-101/replay-attack/
20. https://www.professormesser.com/security-plus/sy0-701/sy0-701-video/replay-attacks-sy0-701/