MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Unsecure root accounts pose a risk because they allow attackers to access critical system functions without restrictions.
   a. Limited access
   b. Restricted network communication
   c. Unlimited system control
   d. No access at all
   Answer: chuntress​
2. The root account in Unix systems represents which kind of access level?
   a. Guest-level access
   b. Administrator-level access
   c. Temporary user access
   d. Application-level access
   Answer: bhuntress​
3. What is the main equivalent of the root account in Windows systems?
   a. Administrator account
   b. Regular user account
   c. Domain guest
   d. Service account
   Answer: ahuntress​
4. Why is using the root account directly a cybersecurity concern?
   a. Logs too much information
   b. Encourages shared credentials
   c. Bypasses basic access controls
   d. Slows down performance
   Answer: cproofpoint​
5. Which best practice reduces risks associated with root accounts?
   a. Using sudo commands instead of logging in as root
   b. Allowing open remote root access
   c. Sharing root passwords among admins
   d. Disabling MFA
   Answer: aproofpoint​
6. Root accounts are highly targeted because they can modify:
   a. Only user files
   b. Only temporary files
   c. System configurations and logs
   d. Application caches
   Answer: chuntress​
7. Which system component connects most directly with root privileges?
   a. Network card
   b. Kernel
   c. user-mode apps
   d. BIOS
   Answer: bhuntress​
8. A compromised root account can lead to what major outcome?
   a. Guest session logout
   b. Full system compromise
   c. Delayed startup
   d. Data compression failures
   Answer: bproofpoint​
9. What common attack type aims to exploit root-level privileges?
   a. Privilege escalation
   b. Data obfuscation
   c. Port scanning
   d. Packet sniffing
   Answer: aastrill​
10. Root access is often abused through which exploit type?
    a. Buffer overflow
    b. SQL injection
    c. Password spraying
    d. Spam phishing
    Answer: ahuntress​
11. What principle advises giving users the least privilege possible?
    a. Trust-by-default principle
    b. Principle of least privilege
    c. Role merging
    d. Cross-account linking
    Answer: bhuntress​
12. Sudo in Linux helps minimize what risk?
    a. Password reset
    b. Credential theft
    c. Continuous root exposure
    d. Network hijacking
    Answer: cproofpoint​
13. Unauthorized root access allows attackers to install:
    a. Certificates
    b. Backdoors
    c. Secure wrappers
    d. Task schedulers
    Answer: bhuntress​
14. Poor root account management often results in:
    a. Reduced file indexing
    b. Increased attack surface
    c. Slower updates
    d. Backup failure
    Answer: bproofpoint​
15. Which mobile activity is similar to gaining root access?
    a. Jailbreaking
    b. Spoofing
    c. Tethering
    d. Caching
    Answer: ahuntress​
16. In Linux, root access permissions are controlled in which file?
    a. /bin/config
    b. /etc/sudoers
    c. /usr/local/bin
    d. /proc/permissions
    Answer: bhuntress​
17. The greatest danger of unsecure root accounts is that attackers can:
    a. Disable firewall temporarily
    b. Achieve persistent control
    c. View network metadata only
    d. Modify DNS records only
    Answer: bastrill​
18. Root account misuse by insiders is considered what type of threat?
    a. Insider threat
    b. External attack
    c. Man-in-the-middle
    d. Denial-of-service
    Answer: ahuntress​
19. What command allows temporary root execution privileges in Linux?
    a. sudo
    b. adminctl
    c. authroot
    d. elevate
    Answer: ahuntress​
20. Unsecure root accounts directly violate which security control?
    a. MFA
    b. Privilege separation
    c. Firewall rules
    d. Encryption standards
    Answer: bproofpoint​
21. Which term refers to exploiting programming flaws for root access?
    a. Buffer overflow
    b. DNS poisoning
    c. Man-in-the-middle attack
    d. Cross-site scripting
    Answer: ahuntress​
22. Privilege escalation commonly begins with what access level?
    a. Root
    b. Guest
    c. Low-privilege
    d. Encrypted
    Answer: castrill​
23. Which log should track root user commands in Linux?
    a. /var/log/audit.log
    b. /tmp/root.txt
    c. /usr/root.log
    d. /etc/syslog
    Answer: ahuntress​
24. Windows mitigates root-level misuse using what tool?
    a. BitLocker
    b. User Account Control (UAC)
    c. DNS resolver
    d. System Restore
    Answer: bhuntress​
25. Which of the following contains root account permissions?
    a. Role-based access table
    b. /etc/passwd
    c. Private SSH key
    d. Log rotation file
    Answer: bastrill​
26. What is the effect of enabling MFA on root accounts?
    a. Reduced privilege use
    b. Stronger access verification
    c. Faster authentication
    d. Automatic password change
    Answer: bhuntress​
27. Which vector often leads to unauthorized root access?
    a. Misconfigured sudoers
    b. Encrypted traffic leaks
    c. Broken TCP sessions
    d. DNS queries
    Answer: aproofpoint​
28. Which attack involves modifying scripts executed by root tasks?
    a. Cron job abuse
    b. SQL injection
    c. Phishing
    d. Shadow attack
    Answer: aastrill​
29. What file change could let a user become root?
    a. /etc/shadow password edit
    b. /tmp/log clear
    c. /var/cache deletion
    d. /root/README update
    Answer: aastrill​
30. Which is the safest practice for privileged administration?
    a. Just-in-time access
    b. Always-on root login
    c. Hardcoded password storage
    d. Shared credentials
    Answer: ahuntress​
31. What is a key detection method for root misuse?
    a. Behavioral log analysis
    b. Packet filtering
    c. URL blocking
    d. Email scanning
    Answer: ahuntress​
32. Root access should always be:
    a. Logged and monitored
    b. Shared between admins
    c. Publicly accessible
    d. Disabled permanently
    Answer: ahuntress​
33. The “Dirty COW” exploit allowed modification of which file type?
    a. /etc/passwd
    b. /usr/local/bin
    c. /tmp/logs
    d. /etc/shadow.cfg
    Answer: aastrill​
34. Root account credentials stolen via phishing indicate a:
    a. Credential theft attack
    b. Brute-force failure
    c. Physical compromise
    d. DoS incident
    Answer: ahuntress​
35. InmacOS, how is root login typically handled?
    a. Disabled by default
    b. Enabled permanently
    c. Shared via sudo-less access
    d. Automated login
    Answer: ahuntress​
36. Why are containerized environments risky when root is enabled?
    a. Containers inherit host root privileges
    b. Root limits logging
    c. Container root accounts expire
    d. Each container denies execution
    Answer: ahuntress​
37. Which malicious modification can persist post-reboot?
    a. Rootkit installation
    b. DHCP flush
    c. Port temporary open
    d. SSH session cache
    Answer: ahuntress​
38. What tool can centralize root activity logs?
    a. SIEM
    b. VPN
    c. IDS
    d. Proxy
    Answer: ahuntress​
39. The main cybersecurity principle violated by using one root password across admins is:
    a. Accountability
    b. Elasticity
    c. Discretionary access
    d. Backup security
    Answer: aproofpoint​
40. Unquoted service path vulnerabilities can lead to:
    a. SYSTEM privilege escalation
    b. Performance degradation
    c. Registry locking
    d. Service denial
    Answer: aastrill​
41. What is the safest alternative to direct root login for administrators?
    a. Privileged access management solutions
    b. Manual password sharing
    c. Public SSH use
    d. Global admin groups
    Answer: acybersecurityventures​
42. Default root passwords in firmware represent what security flaw?
    a. Hardcoded credentials
    b. Cryptographic bypass
    c. Link hijacking
    d. Protocol failure
    Answer: acybersecurityventures​
43. Overprovisioning privileges violates which core principle?
    a. Least privilege
    b. Access parity
    c. Layered defense
    d. Cryptographic strength
    Answer: ahuntress​
44. What Linux mechanism restricts which users may use sudo?
    a. /etc/sudoers
    b. /root/allow
    c. /home/admins.txt
    d. /system/priv.conf
    Answer: ahuntress​
45. Privileged Access Management (PAM) reduces risk by:
    a. Controlling, auditing, and rotating credentials
    b. Disabling MFA
    c. Sharing all admin passwords
    d. Erasing user logs
    Answer: acybersecurityventures​
46. The kernel exploit Dirty Pipe (CVE-2022-0847) allowed:
    a. Unauthorized file writes
    b. Browser hijacking
    c. Ransomware injection
    d. DNS poisoning
    Answer: asuridata​
47. Multi-factor authentication primarily protects against:
    a. Password theft
    b. DNS spoofing
    c. File deletion
    d. Software crashes
    Answer: ahuntress​
48. SSH brute-forcing commonly targets which user?
    a. Root
    b. Guest
    c. Admin2
    d. ServiceDesk
    Answer: asecurity.gatech​
49. Proper root access review schedules should occur:
    a. Regularly and after role changes
    b. Only during audits
    c. Annually
    d. On software installation
    Answer: ahuntress​
50. Nearly all severe breaches involve:
    a. Privileged account compromise
    b. Low-priority malware
    c. DNS tunneling
    d. Forgotten servers
    Answer: acybersecurityventures​

1. https://www.huntress.com/cybersecurity-101/topic/root-access
2. https://www.proofpoint.com/us/blog/insider-threat-management/unmasking-root-user-privileged-access-risk
3. https://www.astrill.com/blog/privilege-escalation/
4. https://cybersecurityventures.com/reduce-risks-with-a-privileged-access-security-hygiene-check/
5. https://www.suridata.ai/blog/the-essential-guide-to-privilege-escalation-attacks/
6. https://security.gatech.edu/ssh-security-guidelines/
7. https://www.igmguru.com/blog/cyber-security-mcqs
8. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
9. https://www.interviewbit.com/cyber-security-mcq/
10. https://rmmoretwo.s3.us-east-2.amazonaws.com/CyberSecurity/23_MCQ’s%20with%20Solutions.pdf
11. https://www.sanfoundry.com/operating-system-mcqs-security-user-authentication/
12. https://examradar.com/user-management-and-access-control-mcqs-multiple-choice-questions-with-answer/
13. https://www.beyondtrust.com/blog/entry/privilege-escalation-attack-defense-explained
14. https://www.scribd.com/document/841781391/100-Multiple-Choice-Questions
15. https://www.reddit.com/r/cybersecurity/comments/1kojlxi/advice_on_security_implications_of_vendor_mobile/
16. https://linuxsecurity.com/features/what-is-a-privilege-escalation-vulnerability
17. https://itexamanswers.net/endpoint-security-my-knowledge-check-answers.html
18. https://www.reddit.com/r/AskNetsec/comments/1cdnh8n/if_a_vulnerability_is_contingent_on_an_attacker/
19. https://labs.snyk.io/resources/abusing-ubuntu-root-privilege-escalation/
20. https://en.wikipedia.org/wiki/Privilege_escalation