MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Malicious flash drives are primarily used to:
   a. Store large files
   b. Deliver malware to systems
   c. Improve data transfer speeds
   d. Encrypt sensitive data
   Answer: b. Deliver malware to systemsgriffith+1​
2. The act of leaving infected USBs in public places to trick users is called:
   a. Phishing attack
   b. Brute force attack
   c. USB drop attack
   d. DDoS attack
   Answer: c. USB drop attackosibeyond+1​
3. The main goal of a USB drop attack is to:
   a. Trick users into deleting data
   b. Cause power surges
   c. Infect systems using human curiosity
   d. Update antivirus software
   Answer: c. Infect systems using human curiositymanageengine+1​
4. USB devices posing as keyboards to inject keystrokes are known as:
   a. Ransomware drives
   b. HID spoofing devices
   c. Trojan sticks
   d. Network sniffers
   Answer: b. HID spoofing devicesplurilock+1​
5. A USB Rubber Ducky attack emulates which type of hardware?
   a. Network adapter
   b. Mouse
   c. Keyboard
   d. Webcam
   Answer: c. Keyboardivanti+1​
6. BadUSB attacks exploit the trust computers have in:
   a. Network traffic
   b. USB firmware
   c. Cloud drives
   d. Storage capacity
   Answer: b. USB firmwareplurilock+1​
7. The SOGU malware spread via USB mainly uses which technique?
   a. DLL hijacking
   b. SSH tunneling
   c. ARP poisoning
   d. Keylogging
   Answer: a. DLL hijackingcloud.google​
8. A Rubber Ducky device injects keystrokes through:
   a. Cloud synchronization
   b. Firmware patches
   c. Emulated keyboard input
   d. Data compression
   Answer: c. Emulated keyboard inputivanti+1​
9. Social engineering in USB drop attacks exploits:
   a. Curiosity and trust
   b. File encryption
   c. Power regulation
   d. Hardware malfunction
   Answer: a. Curiosity and trustconnect.panasonic+1​
10. Network adapter spoofing in BadUSB can lead to:
    a. Hardware overheating
    b. Traffic redirection
    c. Password reset
    d. VPN disconnection
    Answer: b. Traffic redirectionivanti​
11. Malware propagation via USB primarily targets:
    a. Air-gapped systems
    b. Cloud storage
    c. Mobile apps
    d. IoT wearables
    Answer: a. Air-gapped systemsattack.mitre+1​
12. The most effective prevention measure against USB malware is:
    a. Using public networks safely
    b. Avoiding unknown USBs
    c. Sharing devices frequently
    d. Installing browser extensions
    Answer: b. Avoiding unknown USBstracesecurity+1​
13. CERT-In identifies malware propagation through USB drives as a key threat because it:
    a. Securely isolates data
    b. Transfers power safely
    c. Acts as a carrier for infection
    d. Prevents data exfiltration
    Answer: c. Acts as a carrier for infectioncert-in​
14. Zero-day attacks in malicious USBs exploit:
    a. Patched vulnerabilities
    b. Unpatched software flaws
    c. Hardware limits
    d. Inefficient file systems
    Answer: b. Unpatched software flawsmanageengine​
15. HID spoofing in flash drives misleads systems into:
    a. Identifying them as serial ports
    b. Treating them as keyboards
    c. Upgrading firmware
    d. Blocking ports
    Answer: b. Treating them as keyboardsmanageengine+1​
16. The primary human factor leading to USB drop attack success is:
    a. Curiosity
    b. Fear
    c. Confusion
    d. Laziness
    Answer: a. Curiosityconnect.panasonic​
17. Malicious USB drives used in espionage can exfiltrate:
    a. Output voltages
    b. Network credentials
    c. Hardware IDs
    d. Screen brightness information
    Answer: b. Network credentialssciencedirect+1​
18. A USB drive executing commands automatically exploits:
    a. System prompts
    b. AutoRun or auto-execution
    c. Device manager settings
    d. Power save mode
    Answer: b. AutoRun or auto-executioncloud.google+1​
19. The best method to limit USB-based threats in enterprises is:
    a. USB access control policies
    b. Data caching
    c. Cloud sharing
    d. Frequent formatting
    Answer: a. USB access control policiesivanti​
20. BadUSB attacks often evade:
    a. Firewalls
    b. Hardware upgrades
    c. Antivirus detection
    d. Backup software
    Answer: c. Antivirus detectionivanti​
21. Infected USBs can carry both executable files and:
    a. Malicious DLLs
    b. Text notes
    c. Disk partitions
    d. Sound files
    Answer: a. Malicious DLLscloud.google​
22. A common prevention method for USB attacks is:
    a. Disabling unused ports
    b. Defragmenting disks
    c. Running maintenance tasks
    d. Replacing drives monthly
    Answer: a. Disabling unused portsivanti​
23. Data exfiltration via USB can target air-gapped systems because:
    a. They use cloud sync
    b. It bypasses network connections
    c. Firewalls allow it
    d. Systems auto-configure drives
    Answer: b. It bypasses network connectionsattack.mitre​
24. Many USB malware campaigns aim to install:
    a. Storage recovery software
    b. Backdoors
    c. File compressors
    d. Device drivers
    Answer: b. Backdoorscloud.google+1​
25. The Rubber Ducky attack begins immediately after:
    a. User approval
    b. Plug-in
    c. Booting OS
    d. Antivirus update
    Answer: b. Plug-inplurilock+1​
26. Infected USBs often masquerade as:
    a. Data cables or accessories
    b. Network cables
    c. Wi-Fi dongles
    d. Power adapters
    Answer: a. Data cables or accessoriesivanti​
27. The SNOWYDRIVE malware campaign primarily targeted:
    a. Oil and gas industry
    b. Banking sector
    c. Educational institutions
    d. E-commerce platforms
    Answer: a. Oil and gas industrycloud.google​
28. Attackers label dropped USBs with terms like:
    a. Personal use
    b. Payroll or Confidential
    c. Warning sign
    d. Test drive
    Answer: b. Payroll or Confidentialtracesecurity+1​
29. USB drop success relies on victims doing what?
    a. Reporting it
    b. Plugging it in
    c. Formatting it
    d. Deleting hidden files
    Answer: b. Plugging it inosibeyond+1​
30. A malicious USB that steals network traffic acts as:
    a. Malware scanner
    b. Network adapter
    c. DNS server
    d. System logger
    Answer: b. Network adaptersciencedirect+1​
31. An organization’s USB policy should include:
    a. Endpoint management
    b. Biometric access
    c. Power saving
    d. Virtualization control
    Answer: a. Endpoint managementsciencedirect+1​
32. SOGU malware reconnaissance collects which data?
    a. System info and processes
    b. Audio files
    c. Mobile app logs
    d. Printer status
    Answer: a. System info and processescloud.google​
33. Infected flash drives often contain:
    a. Malicious executables
    b. Graphics drivers
    c. Device firmware
    d. Anti-virus apps
    Answer: a. Malicious executablescloud.google​
34. USB-based malware infections are considered:
    a. Airborne attacks
    b. Physical vector attacks
    c. Social-only attacks
    d. Virtual-only attacks
    Answer: b. Physical vector attacksconnect.panasonic+1​
35. Proper USB usage policy emphasizes:
    a. Using only authorized devices
    b. Open file sharing
    c. Automatic scanning
    d. File compression
    Answer: a. Using only authorized devicessciencedirect+1​
36. USBIPS is a framework designed to:
    a. Block malicious USB activity
    b. Encrypt user data
    c. Optimize transfer speed
    d. Reduce power use
    Answer: a. Block malicious USB activitysciencedirect​
37. Attackers use keyboard emulation for:
    a. Executing preloaded scripts
    b. Generating random inputs
    c. Logging manual keystrokes
    d. Encrypting command prompts
    Answer: a. Executing preloaded scriptsplurilock​
38. Organizations must treat USBs as potential:
    a. Backup devices
    b. Threat vectors
    c. Firewalls
    d. Patches
    Answer: b. Threat vectorscoro+1​
39. The Mandiant report identified USB malware used for:
    a. DLL hijacking
    b. DNS spoofing
    c. ARP broadcasting
    d. RAM compression
    Answer: a. DLL hijackingcloud.google​
40. Regular system patching helps stop:
    a. Zero-day USB exploits
    b. Hardware failures
    c. Software upgrades
    d. Power surges
    Answer: a. Zero-day USB exploitsmanageengine+1​
41. A USB appearing as a network interface can:
    a. Bridge internal traffic to malicious servers
    b. Clean cached data
    c. Format drives
    d. Encrypt logs
    Answer: a. Bridge internal traffic to malicious serversivanti​
42. Human Interface Device spoofing is part of:
    a. Rubber Ducky and BadUSB attacks
    b. Firmware upgrades
    c. Secure backups
    d. Port scanning
    Answer: a. Rubber Ducky and BadUSB attacksplurilock+1​
43. USB drop experiments show success rates above:
    a. 20%
    b. 45%
    c. 60%
    d. 98%
    Answer: d. 98%connect.panasonic​
44. Rubber Ducky payloads execute faster than:
    a. Human typing
    b. Network latency
    c. File compression
    d. Antivirus scanning
    Answer: a. Human typingplurilock​
45. USB exfiltration techniques can bypass:
    a. Firewalls and air-gap security
    b. BIOS locking
    c. Password hashing
    d. USB formatting
    Answer: a. Firewalls and air-gap securitycheckpoint+1​
46. The psychological aspect of USB attacks relies on:
    a. Curiosity and empathy
    b. Ignorance
    c. Fear
    d. Greed
    Answer: a. Curiosity and empathytracesecurity+1​
47. USB drive malware may execute hidden payloads via:
    a. AutoRun files
    b. System restore points
    c. Scheduled tasks
    d. BIOS triggers
    Answer: a. AutoRun filescloud.google​
48. SPYUSB framework aims to:
    a. Detect and mitigate USB malware
    b. Encrypt USB partitions
    c. Increase transfer rate
    d. Cloud sync removable drives
    Answer: a. Detect and mitigate USB malwareijset​
49. To protect against USB attacks, organizations should:
    a. Use physical port blockers
    b. Reuse public USBs
    c. Allow all devices
    d. Disable antivirus
    Answer: a. Use physical port blockersivanti​
50. The most essential defense against malicious USBs is:
    a. User awareness training
    b. Increasing storage
    c. Using multiple USBs
    d. Defragmentation
    Answer: a. User awareness trainingtracesecurity+1​

1. https://www.griffith.edu.au/about-griffith/cybersecurity/cyber-safety-with-usb-drives
2. https://blog.avast.com/malicious-usb-devices
3. https://www.osibeyond.com/blog/usb-drop-attacks-cause-cybersecurity-incidents/
4. https://eu.connect.panasonic.com/gb/en/blog/usb-drop-attacks-low-tech-cybersecurity-threat-businesses-still-ignore
5. https://www.manageengine.com/data-security/security-threats/usb-drop-attack.html
6. https://plurilock.com/deep-dive/rubber-ducky-attack/
7. https://www.ivanti.com/blog/what-is-badusb
8. https://cloud.google.com/blog/topics/threat-intelligence/infected-usb-steal-secrets/
9. https://attack.mitre.org/techniques/T1052/001/
10. https://blog.checkpoint.com/security/stealthy-usb-new-versions-of-chinese-espionage-malware-propagating-through-usb-devices-found-by-check-point-research/
11. https://www.tracesecurity.com/blog/articles/what-is-a-usb-drop
12. https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2016-0085
13. https://www.sciencedirect.com/science/article/abs/pii/S0167404817301578
14. https://www.sciencedirect.com/science/article/abs/pii/S0920548925000698
15. https://www.coro.net/blog/why-usb-attacks-are-back-and-how-to-prevent-them
16. https://www.ijset.in/wp-content/uploads/IJSET_V13_issue3_141.pdf
17. https://www.cmu.edu/iso/aware/be-aware/usb.html
18. https://www.webasha.com/blog/what-is-rubber-ducky-usb-in-ethical-hacking-uses-payloads-real-time-attacks-and-defense-techniques-explained
19. https://www.fortect.com/windows-optimization-tips/usb-drive-malware/
20. https://docs.hak5.org/hak5-usb-rubber-ducky/attack-modes-constants-and-variables/attack-modes/