MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What does MitB stand for in cybersecurity?
   a. Man in the Backend
   b. Man in the Browser
   c. Malware in the Base
   d. Monitor in the Background
   Answer: b. Man in the Browserwikipedia​
2. Which of the following best describes a Man-in-the-Browser attack?
   a. A network-level eavesdropping technique
   b. A phishing email campaign targeting browser users
   c. A proxy Trojan that infects a web browser to modify transactions
   d. A denial-of-service attack on browser servers
   Answer: c. A proxy Trojan that infects a web browser to modify transactionswikipedia​
3. How does a MitB attack differ from a traditional MitM attack?
   a. MitB occurs within the user’s browser while MitM occurs in the network path
   b. MitB uses encryption while MitM does not
   c. MitB targets mobile apps while MitM targets desktop browsers
   d. MitB requires physical access while MitM does not
   Answer: a. MitB occurs within the user’s browser while MitM occurs in the network pathcdnetworks​
4. Which browser feature has been exploited by MitB malware on Internet Explorer?
   a. Private Browsing Mode
   b. Browser Helper Objects (BHOs)
   c. Incognito Windows
   d. Bookmark Manager
   Answer: b. Browser Helper Objects (BHOs)wikipedia​
5. What is a primary objective of most MitB attacks?
   a. Website defacement
   b. Financial fraud through transaction manipulation
   c. Data exfiltration via USB drives
   d. Network bandwidth consumption
   Answer: b. Financial fraud through transaction manipulationowasp​
6. Which of the following can a MitB Trojan do?
   a. Modify web page content in real-time
   b. Increase browser speed
   c. Automatically update antivirus software
   d. Block all pop-up ads
   Answer: a. Modify web page content in real-timeanomali​
7. Why are MitB attacks particularly dangerous?
   a. They bypass SSL/TLS encryption and multi-factor authentication
   b. They only affect outdated operating systems
   c. They require administrator privileges to install
   d. They are easily detected by firewalls
   Answer: a. They bypass SSL/TLS encryption and multi-factor authenticationanomali​
8. Which of the following is NOT a method used by MitB malware to infect browsers?
   a. Phishing emails
   b. Malicious downloads
   c. Exploiting browser vulnerabilities
   d. Using secure HTTPS connections
   Answer: d. Using secure HTTPS connectionsanomali​
9. What technique allows MitB malware to intercept and modify calls between the browser and its libraries?
   a. DNS Spoofing
   b. API-Hooking
   c. IP Address Rotation
   d. Cache Poisoning
   Answer: b. API-Hookingrublon​
10. Which of the following is a well-known banking Trojan associated with MitB attacks?
    a. Stuxnet
    b. Zeus
    c. WannaCry
    d. NotPetya
    Answer: b. Zeuswikipedia​
11. How can MitB malware capture sensitive information?
    a. By taking screenshots and capturing keystrokes
    b. By scanning QR codes
    c. By monitoring microphone input
    d. By accessing cloud storage directly
    Answer: a. By taking screenshots and capturing keystrokesrublon​
12. What makes MitB attacks difficult to detect?
    a. They operate covertly within the browser, invisible to both user and website
    b. They only run during business hours
    c. They require user interaction to activate
    d. They leave obvious error messages
    Answer: a. They operate covertly within the browser, invisible to both user and websitecdnetworks​
13. Which of the following is a mitigation strategy against MitB attacks?
    a. Using out-of-band transaction verification
    b. Disabling all browser extensions
    c. Avoiding online banking entirely
    d. Using only public Wi-Fi networks
    Answer: a. Using out-of-band transaction verificationwikipedia​
14. What is the purpose of out-of-band (OOB) transaction verification?
    a. To verify transaction details through a channel other than the browser
    b. To increase transaction speed
    c. To reduce bank processing fees
    d. To enable anonymous transactions
    Answer: a. To verify transaction details through a channel other than the browserwikipedia​
15. Which mobile malware can defeat SMS-based OOB verification?
    a. ZitMo (Zeus-In-The-Mobile)
    b. CryptoLocker
    c. Mirai
    d. Conficker
    Answer: a. ZitMo (Zeus-In-The-Mobile)wikipedia​
16. What does ZitMo malware do?
    a. Intercepts incoming SMS messages to defeat two-factor authentication
    b. Encrypts files for ransom
    c. Launches DDoS attacks
    d. Mines cryptocurrency
    Answer: a. Intercepts incoming SMS messages to defeat two-factor authenticationwikipedia​
17. Which of the following browsers has been targeted by MitB malware?
    a. Internet Explorer
    b. Firefox
    c. Chrome
    d. All of the above
    Answer: d. All of the abovewikipedia​
18. What operating system is most commonly targeted by MitB Trojans?
    a. Windows
    b. macOS
    c. Linux
    d. Android
    Answer: a. Windowswikipedia​
19. Which of the following is a characteristic of MitB malware?
    a. Persistence mechanisms to run at browser startup
    b. Automatic deletion after one use
    c. Visible notification to the user
    d. Limited to text-only modifications
    Answer: a. Persistence mechanisms to run at browser startupjumpcloud​
20. How can users protect against MitB attacks?
    a. By avoiding untrusted browser extensions and updating browsers regularly
    b. By using the same password for all accounts
    c. By disabling antivirus software for better performance
    d. By clicking on all email attachments
    Answer: a. By avoiding untrusted browser extensions and updating browsers regularlycdnetworks​
21. What can MitB malware do to online banking transactions?
    a. Alter the recipient account number and transaction amount
    b. Speed up transaction processing
    c. Automatically apply for loans
    d. Increase account interest rates
    Answer: a. Alter the recipient account number and transaction amountcdnetworks​
22. Why does strong authentication not prevent MitB attacks?
    a. Because authentication validates identity but not transaction integrity
    b. Because all authentication methods are inherently flawed
    c. Because banks do not implement authentication properly
    d. Because authentication only works offline
    Answer: a. Because authentication validates identity but not transaction integritywikipedia​
23. Which of the following is a sign of potential MitB infection?
    a. Unexpected browser behavior like crashes or slow performance
    b. Improved browser speed
    c. Automatic software updates
    d. Increased storage space
    Answer: a. Unexpected browser behavior like crashes or slow performancejumpcloud​
24. What is “transaction signing” in the context of MitB prevention?
    a. A method that provides non-repudiation for transactions
    b. A way to make transactions anonymous
    c. A technique to hide transaction details
    d. A method to delay transaction processing
    Answer: a. A method that provides non-repudiation for transactionswikipedia​
25. Which of the following is NOT a MitB prevention technique?
    a. Using a dedicated mobile app with graphical cryptogram
    b. Relying solely on antivirus software
    c. Implementing web fraud detection at the bank level
    d. Using hardware security tokens
    Answer: b. Relying solely on antivirus softwarewikipedia​
26. What is the “boy-in-the-browser” (BitB) attack?
    a. A simpler form of MitB attack
    b. A completely different type of cyberattack
    c. A defense mechanism against MitB
    d. A type of antivirus software
    Answer: a. A simpler form of MitB attackwikipedia​
27. When was the term “man-in-the-browser” coined?
    a. 2005
    b. 2007
    c. 2010
    d. 2012
    Answer: b. 2007wikipedia​
28. Who coined the term “man-in-the-browser”?
    a. Augusto Paes de Barros
    b. Philipp Gühring
    c. Kevin Mitnick
    d. Linus Torvalds
    Answer: b. Philipp Gühringwikipedia​
29. Which of the following is a MitB Trojan that targets Facebook users?
    a. Carberp
    b. Stuxnet
    c. Zeus
    d. SpyEye
    Answer: a. Carberpwikipedia​
30. What is the primary target of MitB attacks?
    a. Financial data such as online banking credentials
    b. Social media profile pictures
    c. Email signatures
    d. Browser themes
    Answer: a. Financial data such as online banking credentialsanomali​
31. How does MitB malware typically gain initial access?
    a. Through phishing emails or malicious downloads
    b. By physically accessing the device
    c. Through legitimate software updates
    d. By guessing weak passwords
    Answer: a. Through phishing emails or malicious downloadsanomali​
32. What can MitB malware do to web forms?
    a. Alter fields to collect sensitive data or redirect funds
    b. Automatically fill in correct information
    c. Prevent form submission
    d. Encrypt form data before submission
    Answer: a. Alter fields to collect sensitive data or redirect fundsjumpcloud​
33. Which security measure can be bypassed by MitB attacks?
    a. Multi-factor authentication (MFA)
    b. Physical security locks
    c. Biometric door access
    d. Security cameras
    Answer: a. Multi-factor authentication (MFA)jumpcloud​
34. What is a keylogging function in MitB malware?
    a. Capturing keystrokes to steal passwords and credentials
    b. Recording video of the screen
    c. Monitoring network bandwidth usage
    d. Tracking mouse movements only
    Answer: a. Capturing keystrokes to steal passwords and credentialsrublon​
35. How can organizations detect MitB behavior?
    a. By deploying anti-fraud systems that detect anomalous transaction patterns
    b. By banning all online transactions
    c. By requiring handwritten transaction requests
    d. By limiting transaction amounts
    Answer: a. By deploying anti-fraud systems that detect anomalous transaction patternsjumpcloud​
36. What is data exfiltration in the context of MitB attacks?
    a. Transmitting stolen user information to the attacker’s server
    b. Deleting data from the victim’s computer
    c. Encrypting data for backup purposes
    d. Sharing data with authorized partners
    Answer: a. Transmitting stolen user information to the attacker’s serverjumpcloud​
37. Which of the following is a prevention strategy involving user education?
    a. Training users to identify phishing attempts and suspicious downloads
    b. Teaching users to disable all security software
    c. Encouraging users to share passwords
    d. Instructing users to click on all email links
    Answer: a. Training users to identify phishing attempts and suspicious downloadsjumpcloud​
38. What is the advantage of using a hardware token for authentication?
    a. It keeps the second factor out of the browser’s reach
    b. It slows down the authentication process
    c. It requires internet connection to work
    d. It stores all passwords in the cloud
    Answer: a. It keeps the second factor out of the browser’s reachjumpcloud​
39. Which of the following is NOT an indicator of MitB infection?
    a. Improved browser performance
    b. Altered web page layouts
    c. Suspicious changes in transaction details
    d. Requests for unusual sensitive information
    Answer: a. Improved browser performancejumpcloud​
40. What is web fraud detection?
    a. A method implemented at the bank to check for anomalous transaction behavior
    b. A browser extension that blocks all online purchases
    c. A law enforcement database of fraudulent websites
    d. A consumer protection hotline
    Answer: a. A method implemented at the bank to check for anomalous transaction behaviorwikipedia​
41. Which of the following can help prevent MitB attacks?
    a. Regularly updating browsers, plugins, and operating systems
    b. Using the same browser version indefinitely
    c. Disabling automatic updates
    d. Avoiding security patches
    Answer: a. Regularly updating browsers, plugins, and operating systemsjumpcloud​
42. What is the purpose of browser extensions in MitB attacks?
    a. They can be used by malware to extend browser functionality maliciously
    b. They automatically remove all malware
    c. They prevent any website from loading
    d. They encrypt all browser data permanently
    Answer: a. They can be used by malware to extend browser functionality maliciouslyrublon​
43. How can MitB malware manipulate user interfaces?
    a. By changing the appearance of legitimate web pages to trick users
    b. By improving website usability
    c. By automatically correcting website errors
    d. By translating website content
    Answer: a. By changing the appearance of legitimate web pages to trick usersflashstart​
44. What is a characteristic of MitB attacks regarding their duration?
    a. They can operate continuously for extended periods without detection
    b. They only last for a few seconds
    c. They occur only during system startup
    d. They stop when the browser is closed
    Answer: a. They can operate continuously for extended periods without detectionflashstart​
45. Which of the following is a method to protect user inputs from MitB attacks?
    a. Obfuscation and encryption of input fields
    b. Displaying passwords in plain text
    c. Disabling all form validation
    d. Removing input field labels
    Answer: a. Obfuscation and encryption of input fieldsfortinet​
46. What is the role of artificial intelligence in detecting MitB attacks?
    a. Performing constant analysis to identify new threats in real time
    b. Automatically approving all transactions
    c. Disabling all browser security features
    d. Removing all browser extensions
    Answer: a. Performing constant analysis to identify new threats in real timeflashstart​
47. Which of the following organizations considers MitB a major threat to online banking?
    a. Financial service professionals in a 2014 survey
    b. Social media influencers
    c. Hardware manufacturers
    d. Internet service providers
    Answer: a. Financial service professionals in a 2014 surveywikipedia​
48. What is the difference between MitB and MitMo?
    a. MitB targets browsers while MitMo targets mobile devices
    b. MitB is legal while MitMo is illegal
    c. MitB is older technology than MitMo
    d. MitB requires physical access while MitMo does not
    Answer: a. MitB targets browsers while MitMo targets mobile deviceswikipedia​
49. Which of the following is a limitation of SMS-based two-factor authentication?
    a. It can be defeated by man-in-the-mobile (MitMo) malware
    b. It is too expensive for most users
    c. It requires a landline phone
    d. It only works with specific browsers
    Answer: a. It can be defeated by man-in-the-mobile (MitMo) malwarewikipedia​
50. What is the most effective way to combat MitB attacks according to security experts?
    a. Using out-of-band transaction verification with multiple channels
    b. Avoiding all online transactions
    c. Using only one-factor authentication
    d. Conducting transactions only on weekends
    Answer: a. Using out-of-band transaction verification with multiple channelswikipedia​

1. https://en.wikipedia.org/wiki/Man-in-the-browser
2. https://www.cdnetworks.com/glossary/man-in-the-browser/
3. https://owasp.org/www-community/attacks/Man-in-the-browser_attack
4. https://www.anomali.com/glossary/man-in-the-browser-mitb-attack
5. https://rublon.com/blog/what-is-man-in-the-browser-attack-how-to-detect-and-prevent-it/
6. https://jumpcloud.com/it-index/what-is-a-man-in-the-browser-mitb-attack
7. https://flashstart.com/how-to-detect-a-man-in-the-browser-attack/
8. https://docs.fortinet.com/document/fortiweb/7.0.4/administration-guide/431293/protection-for-man-in-the-browser-mitb-attacks
9. https://doubleoctopus.com/security-wiki/threats-and-tools/man-in-the-browser-attack/
10. https://www.techtarget.com/searchsecurity/definition/man-in-the-browser
11. https://www.fortinet.com/resources/cyberglossary/man-in-the-middle-attack
12. https://www.geeksforgeeks.org/ethical-hacking/man-in-the-browser-attack/
13. https://www.1kosmos.com/authentication/man-in-the-browser-attack/
14. https://seraphicsecurity.com/learn/website-security/7-types-of-man-in-the-middle-attacks-and-5-real-world-examples/
15. https://jscrambler.com/learning-hub/man-in-the-browser-mitb
16. https://www.f5.com/glossary/man-in-the-browser-attack-mitb
17. https://repository.stcloudstate.edu/cgi/viewcontent.cgi?article=1054&context=msia_etds
18. https://www.cynet.com/attack-techniques-hands-on/man-in-the-browser-attacks/
19. https://www.agentx.so/mcp/blog/browser-agent-security-risks-complete-guide-for-2025
20. https://docs.fortinet.com/document/fortiweb/6.3.9/administration-guide/431293/protection-for-man-in-the-browser-mitb-attacks
21. https://dmarcreport.com/blog/session-hijacking-understanding-risks-and-prevention-techniques/
22. https://www.ibm.com/think/topics/man-in-the-middle