MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What does the term “hacktivist” mean in cybersecurity?
   a. A hacker motivated by money
   b. A cybercriminal seeking revenge
   c. An activist using hacking for a social or political cause
   d. A government security official
   Answer: c. An activist using hacking for a social or political causegeeksforgeeks+2
2. What is the main difference between a hacker and a hacktivist?
   a. Hackers are always government agents
   b. Hacktivists have a political or social motive
   c. Hackers never steal data
   d. Hacktivists work for financial gain only
   Answer: b. Hacktivists have a political or social motiveinvestopedia+2
3. Which of the following is a common tactic used by hacktivists?
   a. Distributed Denial-of-Service (DDoS) attacks
   b. Setting up Wi-Fi routers
   c. Writing antivirus software
   d. Building hardware
   Answer: a. Distributed Denial-of-Service (DDoS) attacksinsights.manageengine+2
4. What might a hacktivist group target?
   a. Only small businesses
   b. Political opponents or controversial organizations
   c. Only friends and family
   d. Online gaming servers exclusively
   Answer: b. Political opponents or controversial organizationssplunk+2
5. Which motivation most accurately describes hacktivism?
   a. Earning profit
   b. Expressing political protest online
   c. Running software updates
   d. Creating entertainment apps
   Answer: b. Expressing political protest onlinecyble+2
6. What is a website defacement in the context of hacktivist attacks?
   a. Deleting photos from a website
   b. Overwriting a website’s appearance to display activist messages
   c. Adding advertisements to a website
   d. Creating new user accounts on a website
   Answer: b. Overwriting a website’s appearance to display activist messagesinvestopedia+2
7. What is “doxing”?
   a. Repairing leaked documents
   b. Publicly exposing personal or sensitive information without consent
   c. Installing updates
   d. Encrypting data for safety
   Answer: b. Publicly exposing personal or sensitive information without consentinsights.manageengine+2
8. Why might a hacktivist launch a DDoS attack?
   a. To upgrade security software
   b. To shut down a website and get attention
   c. To earn cryptocurrency rewards
   d. To fix website bugs
   Answer: b. To shut down a website and get attentionsplunk+2
9. Which is an example of an ideology that may motivate hacktivism?
   a. Technical innovation only
   b. Social, political, or religious beliefs
   c. Sports team support
   d. Product launches
   Answer: b. Social, political, or religious beliefsunodc+2
10. Which group is well-known for hacktivist activities?
    a. Chaos Computer Club
    b. Antivirus manufacturers
    c. E-commerce firms
    d. Social media influencers
    Answer: a. Chaos Computer Clubwikipedia+1
11. What type of data might hacktivists leak to the public?
    a. Weather forecasts
    b. Confidential government or company documents
    c. Music playlists
    d. Software update notes
    Answer: b. Confidential government or company documentstrendmicro+2
12. Which of the following is NOT a typical hacktivist tactic?
    a. Website defacement
    b. Phishing scams
    c. System upgrades
    d. DDoS attacks
    Answer: c. System upgradesinsights.manageengine+1
13. What is a “hack-and-leak” attack?
    a. Installing antivirus software and cleaning viruses
    b. Hacking systems, stealing data, and publishing it publicly
    c. Creating secure backups for a company
    d. Replacing hardware components
    Answer: b. Hacking systems, stealing data, and publishing it publiclycyble+2
14. What is the main goal of hacktivists exposing sensitive data?
    a. Financial reward
    b. Raising awareness or embarrassing a target
    c. Upgrading software
    d. Hardware replacement
    Answer: b. Raising awareness or embarrassing a targetskillogic+2
15. What makes hacktivist attacks unpredictable compared to other threats?
    a. They follow a fixed schedule
    b. Motivations can vary suddenly—from political statements to random targeting
    c. Always attack banks only
    d. Only occur on weekends
    Answer: b. Motivations can vary suddenly—from political statements to random targetingskillogic+2
16. Which cyberattack technique is NOT typically used by hacktivists?
    a. Ransomware-for-hire
    b. DDoS attacks
    c. Information leaks
    d. Website defacement
    Answer: a. Ransomware-for-hireinvestopedia+2
17. Which action might a hacktivist group take against their target?
    a. Provide free software
    b. Expose confidential emails to the public
    c. Offer official cybersecurity guidance
    d. Upgrade target’s security
    Answer: b. Expose confidential emails to the publictrendmicro+2
18. Which statement best describes a hacktivist’s intent?
    a. To protect user privacy for everyone
    b. To publicize an issue through digital disruption
    c. To sell personal data on dark web
    d. To invent new programming languages
    Answer: b. To publicize an issue through digital disruptioncobalt+2
19. Why do hacktivists often announce their actions on social media?
    a. They want to keep actions secret
    b. To gain publicity and rally supporters
    c. To update security records
    d. To offer bug bounties
    Answer: b. To gain publicity and rally supporterstrendmicro+1
20. What does “digital civil disobedience” mean in hacktivism?
    a. Illegal physical protests
    b. Lawful protests via signed petitions
    c. Using cyberattacks as a form of protest
    d. Filing court cases only
    Answer: c. Using cyberattacks as a form of protestcobalt+2
21. What is “whistleblowing” in the context of hacktivist threats?
    a. Blowing a whistle during meetings
    b. Leaking internal information of public interest
    c. Fixing bugs for companies
    d. Styling websites
    Answer: b. Leaking internal information of public interestcobalt+1
22. What is a “virtual sit-in” as used by hacktivists?
    a. Meetings on video calls
    b. Flooding a website to disrupt access as a digital protest
    c. Organizing hackathons
    d. Coding bootcamps
    Answer: b. Flooding a website to disrupt access as a digital protestsplunk+2
23. Hacktivists may exploit which vulnerability for attacks?
    a. Outdated software patches
    b. Strong encryption
    c. Secure passwords only
    d. Properly configured firewalls
    Answer: a. Outdated software patchesskillogic+2
24. What is “doxxing” often intended to achieve in hacktivist campaigns?
    a. To educate the public about privacy
    b. To shame or endanger victims by exposing private details
    c. To help companies recover from breaches
    d. To promote cybersecurity best practices
    Answer: b. To shame or endanger victims by exposing private detailscyble+2
25. Who can be a target of hacktivist threats?
    a. Only large corporations
    b. Anyone perceived as opposing their cause
    c. Only IT administrators
    d. Only social media accounts
    Answer: b. Anyone perceived as opposing their causeskillogic+2
26. What makes it difficult to attribute hacktivist attacks to specific individuals?
    a. Use of encrypted channels and anonymization tools
    b. Slow internet connections
    c. Frequent password changes by attackers
    d. Open Wi-Fi environments only
    Answer: a. Use of encrypted channels and anonymization toolsinsights.manageengine+1
27. How do hacktivists try to maximize their message’s reach?
    a. Posting only to private groups
    b. Publicizing attacks on websites and social media
    c. Using secret codes exclusively
    d. Limiting actions to one country
    Answer: b. Publicizing attacks on websites and social mediainvestopedia+2
28. Which attack method is more sophisticated among hacktivist techniques?
    a. Simple spam emails
    b. Hack-and-leak campaigns
    c. Routine software installation
    d. Password resets
    Answer: b. Hack-and-leak campaignssplunk+1
29. Hacktivism may overlap with which other area?
    a. Physical theft
    b. State-sponsored cyberattacks
    c. Only legal activism
    d. Video game development
    Answer: b. State-sponsored cyberattacksproofpoint+2
30. What are “drive-by attacks” as sometimes used in hacktivism?
    a. Physical theft
    b. Automatic malware downloads from compromised websites
    c. Manual server restarts
    d. Upgrading operating systems
    Answer: b. Automatic malware downloads from compromised websitescybersierra+1
31. Which organization type is a common hacktivist target?
    a. Online shopping sites only
    b. Government websites or corporations with controversial policies
    c. Music streaming services only
    d. Food delivery platforms
    Answer: b. Government websites or corporations with controversial policiescyble+2
32. What is “website mirroring” in hacktivism?
    a. Copying a website exactly to bypass censorship
    b. Destroying all website content
    c. Generating random URLs
    d. Registering many web domains
    Answer: a. Copying a website exactly to bypass censorshipwikipedia+1
33. What is an “insider threat” related to hacktivism?
    a. Attacks from a company’s own employees or contractors
    b. Only external attacks
    c. Using only strong passwords
    d. Updating software packages
    Answer: a. Attacks from a company’s own employees or contractorssophos+1
34. Why do organizations need “attack surface risk management” (ASRM) against hacktivists?
    a. To track public relations online
    b. To monitor and reduce entry points for potential attacks
    c. To collect customer feedback
    d. To improve software speed
    Answer: b. To monitor and reduce entry points for potential attackstrendmicro+1
35. Hacktivist attacks are often meant to cause what kind of damage?
    a. Only physical damage to buildings
    b. Reputational or financial damage
    c. New product launches
    d. Staff promotions
    Answer: b. Reputational or financial damageinvestopedia+2
36. What is “anonymous blogging” as a hacktivist tactic?
    a. Publishing statements under a real name
    b. Publishing messages without revealing one’s identity
    c. Selling ad space to companies
    d. Creating product tutorials
    Answer: b. Publishing messages without revealing one’s identitycobalt+1
37. What is the typical legal status of hacktivist actions like unauthorized access?
    a. Usually legal
    b. Generally illegal
    c. Sometimes registered as art
    d. Regular business activity
    Answer: b. Generally illegalgeeksforgeeks+2
38. What is one way to reduce the risk of DDoS from hacktivist attacks?
    a. Disabling all company devices
    b. Investing in DDoS protection tools
    c. Making websites unsearchable
    d. Avoiding social media
    Answer: b. Investing in DDoS protection toolsinsights.manageengine+2
39. Hacktivist campaigns are often promoted where?
    a. Print newspapers only
    b. Social media channels and activist websites
    c. Only via television advertisements
    d. Chain letters
    Answer: b. Social media channels and activist websitessplunk+2
40. What is “online sit-in” inspired by?
    a. Traditional acts of civil disobedience
    b. Online shopping habits
    c. Gaming tournaments
    d. E-commerce flash sales
    Answer: a. Traditional acts of civil disobediencecobalt+1
41. What is a “zero trust” security model when defending against hacktivists?
    a. Assuming all access requests inside and outside are trustworthy
    b. Never trusting and always verifying each access request
    c. Disabling all logins
    d. Allowing open internet traffic
    Answer: b. Never trusting and always verifying each access requestvectra+1
42. Why do hacktivists sometimes use “proxies” during attacks?
    a. To speed up their internet
    b. To hide their true location and identity
    c. To access better Wi-Fi
    d. To download software updates
    Answer: b. To hide their true location and identitycyble+1
43. “Data breaches” by hacktivists usually result in?
    a. Information being kept private
    b. Sensitive or confidential data being exposed or sold
    c. Stronger security immediately
    d. Software updated automatically
    Answer: b. Sensitive or confidential data being exposed or soldtrendmicro+2
44. What does “phishing” mean, sometimes used by hacktivists for information gathering?
    a. Sending fraudulent emails to trick recipients
    b. Using fishing boats for cybersecurity
    c. Writing secure code only
    d. Hosting game servers
    Answer: a. Sending fraudulent emails to trick recipientsvectra+1
45. What is “doxxing” while targeting executives?
    a. Providing social media training
    b. Exposing their personal contact and sensitive details online
    c. Encrypting company data
    d. Organizing fundraising events
    Answer: b. Exposing their personal contact and sensitive details onlineinvestopedia+1
46. Which statement is true regarding hacktivists and personal gain?
    a. Always pursue money above all
    b. Not usually motivated by financial gain
    c. Invest in company shares
    d. Focus on job promotions
    Answer: b. Not usually motivated by financial gainproofpoint+2
47. What makes insider hacktivist attacks especially dangerous?
    a. They involve only low-level staff
    b. Insiders have privileged access and know internal systems
    c. They use only open Wi-Fi
    d. All attacks are random
    Answer: b. Insiders have privileged access and know internal systemssophos+1
48. A hacktivist may seek to:
    a. Create secure software for companies
    b. Pressure organizations into policy changes
    c. Advise on risk reduction
    d. Train staff in security
    Answer: b. Pressure organizations into policy changesskillogic+2
49. What is a “botnet,” and how might hacktivists use it?
    a. Network of compromised devices used in mass attacks like DDoS
    b. Collection of security cameras
    c. List of passwords
    d. Inventory of company computers
    Answer: a. Network of compromised devices used in mass attacks like DDoScrowdstrike+1
50. Why is hacktivism considered a strategic risk to enterprises?
    a. It only affects IT departments
    b. Threatens reputation, operations, and compliance, not just technology
    c. Promotes online collaboration
    d. Has no real-world impact
    Answer: b. Threatens reputation, operations, and compliance, not just technologyskillogic+2

1. https://www.geeksforgeeks.org/ethical-hacking/what-is-hacktivism/
2. https://www.investopedia.com/terms/h/hacktivism.asp
3. https://www.proofpoint.com/us/threat-reference/hacktivism
4. https://skillogic.com/blog/understanding-hacktivism-in-cyber-security-types-examples/
5. https://insights.manageengine.com/it-security/hacktivist/
6. https://www.splunk.com/en_us/blog/learn/hacktivism.html
7. https://www.sciencedirect.com/topics/computer-science/hacktivist
8. https://www.unodc.org/e4j/zh/cybercrime/module-14/key-issues/hacktivism.html
9. https://cyble.com/knowledge-hub/what-is-hactivism/
10. https://www.trendmicro.com/vinfo/in/security/news/cybercrime-and-digital-threats/understanding-hacktivists-the-overlap-of-ideology-and-cybercrime
11. https://www.cobalt.io/blog/what-is-hacktivism
12. https://en.wikipedia.org/wiki/Hacktivism
13. https://www.sophos.com/en-us/cybersecurity-explained/threat-actors
14. https://cybersierra.co/blog/common-types-of-cyber-attacks/
15. https://www.vectra.ai/topics/cyberattack-techniques
16. https://www.crowdstrike.com/en-us/cybersecurity-101/cyberattacks/common-cyberattacks/
17. https://www.cyber.gc.ca/en/guidance/introduction-cyber-threat-environment
18. https://www.fortinet.com/resources/cyberglossary/what-is-hacktivism
19. https://eventussecurity.com/cybersecurity/india/cyber-attacks/
20. https://www.fortinet.com/resources/cyberglossary/recent-cyber-attacks