MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Offline attacks are executed from a location other than the actual system being targeted.
   a. True
   b. False
   c. Depends on network type
   d. Only in online scenarios
   Answer: atutorialspoint​
2. The primary goal of an offline attack is to extract what from password files?
   a. Plaintext credentials
   b. Cookies
   c. Logs
   d. Encryption keys
   Answer: atutorialspoint​
3. Offline cracking mainly targets which type of stored data?
   a. Hashes
   b. Cookies
   c. Access tokens
   d. Certificates
   Answer: atutorialspoint​
4. Offline attacks typically occur after obtaining what file type in Windows systems?
   a. SAM file
   b. Config.sys
   c. hosts file
   d. Registry.dat
   Answer: atutorialspoint​
5. On Linux systems, offline password hashes are usually found in the:
   a. /etc/shadow file
   b. /bin directory
   c. /config/passwords file
   d. /root/access file
   Answer: atutorialspoint​
6. Which of the following is not a type of offline attack?
   a. Rainbow Table Attack
   b. Online Guessing Attack
   c. Dictionary Attack
   d. Mask Attack
   Answer: btutorialspoint​
7. Offline attacks require access to what kind of system data?
   a. Password hash storage
   b. Application logs
   c. Network traffic
   d. System backups
   Answer: atutorialspoint​
8. Offline attacks are considered less detectable because they:
   a. Occur outside the network
   b. Always trigger alarms
   c. Modify security logs
   d. Disable antivirus
   Answer: atutorialspoint​
9. The main difference between online and offline password attacks is:
   a. Interaction with the target system
   b. Use of encryption
   c. Type of network
   d. Number of attempts
   Answer: asigcorp​
10. What key factor makes offline password cracking faster than online?
    a. Absence of account lockout mechanisms
    b. Strong encryption
    c. Slow iteration
    d. Multi-factor authentication
    Answer: atutorialspoint​
11. Offline brute-force attacks start with which component?
    a. A stolen password database
    b. Firewall logs
    c. Network packets
    d. Email headers
    Answer: ascalahosting​
12. Offline brute-force techniques calculate what to crack passwords?
    a. Hash values
    b. Encrypted TLS data
    c. Certificates
    d. Cookies
    Answer: ascalahosting​
13. The process of comparing precomputed hashes to stored ones is known as:
    a. Rainbow Table Attack
    b. Man-in-the-middle
    c. Keylogging
    d. Injection
    Answer: atutorialspoint​
14. Which tool uses precomputed hash tables for faster cracking?
    a. Rainbow Table
    b. Wireshark
    c. IDS Sensor
    d. Firewall
    Answer: atutorialspoint​
15. Rainbow table attacks rely on previously:
    a. Computed password-hash relations
    b. Encrypted plaintexts
    c. Network dumps
    d. Server-side cookies
    Answer: atutorialspoint​
16. The main drawback of rainbow tables is:
    a. Large storage requirement
    b. Slow speed
    c. Inaccuracy
    d. Encrypted results
    Answer: atutorialspoint​
17. Dictionary attacks use:
    a. Lists of common passwords
    b. Random character patterns
    c. SQL queries
    d. Session tokens
    Answer: aswimlane​
18. Offline dictionary attacks occur without:
    a. Any server interaction
    b. User input
    c. Hash comparison
    d. Word lists
    Answer: aswimlane​
19. One simple modification technique in dictionary attacks replaces characters using:
    a. Leetspeak patterns (like p@ssword)
    b. Random ASCII codes
    c. XOR encryption
    d. System binaries
    Answer: aswimlane​
20. Brute-force attacks are characterized by:
    a. Trying every possible password combination
    b. Using limited password lists
    c. Exploiting network vulnerabilities
    d. Leveraging fake certificates
    Answer: ascalahosting​
21. Offline brute-force attacks do not trigger:
    a. Account lockouts
    b. Data loss prevention tools
    c. Phishing alerts
    d. DNS changes
    Answer: ascalahosting​
22. Which environment variable is most commonly targeted during offline attacks?
    a. Password hashes
    b. MAC addresses
    c. Cookies
    d. ARP cache
    Answer: atutorialspoint​
23. What advantage do attackers gain from performing offline attacks?
    a. Ability to test unlimited password guesses
    b. Direct system access
    c. Real-time interaction
    d. Network privilege escalation
    Answer: atutorialspoint​
24. Offline attacks are usually performed on:
    a. Separate hardware systems
    b. Live production servers
    c. Cloud firewalls
    d. Wireless routers
    Answer: atutorialspoint​
25. Which offline attack method uses wildcard character patterns for guessing passwords?
    a. Mask Attack
    b. Rainbow Attack
    c. Dictionary Attack
    d. Hybrid Attack
    Answer: atutorialspoint​
26. What do attackers often use to recover password hashes for offline analysis?
    a. SQL injection, file dumps, or memory captures
    b. VPN tunneling
    c. Network pings
    d. DNS spoofing
    Answer: asigcorp​
27. A successful offline attack typically relies on weak:
    a. Password hashing algorithms
    b. Firewall rules
    c. Network encryption
    d. CPU configuration
    Answer: asigcorp​
28. Which of the following algorithms is more resistant to offline attacks?
    a. bcrypt
    b. MD5
    c. SHA-1
    d. DES
    Answer: aproofpoint​
29. Offline password cracking can recover credentials from which file type on Windows?
    a. NTDS.dit
    b. boot.ini
    c. group.policy
    d. hosts.conf
    Answer: asigcorp​
30. Attackers use NTDS.dit files primarily to extract:
    a. Domain user passwords
    b. Firewall rules
    c. Application licenses
    d. Registry entries
    Answer: asigcorp​
31. Offline cracking speed depends heavily on:
    a. Hardware performance
    b. Cloud storage
    c. Email phishing campaigns
    d. DNS servers
    Answer: atutorialspoint​
32. Which of these is a hybrid method combining dictionary and brute-force techniques?
    a. Rule-based attacks
    b. Credential stuffing
    c. Social engineering
    d. Packet sniffing
    Answer: ajumpcloud​
33. Credential stuffing is not considered an offline attack because it:
    a. Requires server interaction
    b. Uses hashing
    c. Runs locally
    d. Uses precomputed values
    Answer: asailpoint​
34. Offline attacks do not rely on:
    a. Network connectivity
    b. Stored hashes
    c. Password files
    d. Encryption algorithms
    Answer: atutorialspoint​
35. Offline attacks can be mitigated by applying:
    a. Salted hashes and strong encryption algorithms
    b. Simple MD5 encryption
    c. Plaintext password saving
    d. Removing file permissions
    Answer: atutorialspoint​
36. Using salts in password storage primarily prevents:
    a. Rainbow table reuse
    b. Keylogging
    c. Screen recording
    d. Spoofing
    Answer: atutorialspoint​
37. Offline attacks are increasingly powered by:
    a. GPU acceleration
    b. Firewalls
    c. DNS filtering
    d. VPN encryption
    Answer: ascalahosting​
38. Brute-force attacks can be slowed by implementing:
    a. Key stretching methods like PBKDF2
    b. Weak passwords
    c. Simple hash algorithms
    d. Parallel cracking
    Answer: asailpoint​
39. Offline attacks can be initiated once an attacker has:
    a. Gained access to password hash files
    b. Logged onto the victim’s account
    c. Hacked a router
    d. Installed adware
    Answer: asigcorp​
40. A mask attack reduces search space by:
    a. Using known character pattern rules
    b. Trying every ASCII character
    c. Using random strings
    d. Duplicating hashes
    Answer: atutorialspoint​
41. Passwords stored with strong salting and iteration are:
    a. More resistant to offline attacks
    b. Easier to reverse-engineer
    c. Transparent for crackers
    d. Unusable for users
    Answer: atutorialspoint​
42. Tools such as Hashcat are used for:
    a. Performing offline password cracking
    b. Network packet analysis
    c. SQL database injection
    d. Social engineering
    Answer: abeyondtrust​
43. Offline attacks often begin following which compromise?
    a. Database breach
    b. Network partition
    c. Router misconfiguration
    d. DNS caching
    Answer: ascalahosting​
44. During offline cracking, multiple hashes can be tested simultaneously due to:
    a. Parallel computing
    b. Sequential data transfer
    c. VPN tunneling
    d. Cloud throttling
    Answer: abeyondtrust​
45. The presence of salts ensures that identical passwords:
    a. Produce unique hashes
    b. Reduce password length
    c. Generate faster attacks
    d. Are easier to crack
    Answer: atutorialspoint​
46. Offline attacks are commonly used in data breaches where attackers obtain:
    a. Dumped credential databases
    b. Firewall logs
    c. Social media messages
    d. Certificates
    Answer: asigcorp​
47. The faster hash algorithms like MD5 and SHA1 are avoided because they:
    a. Speed up offline attacks
    b. Slow down authentication
    c. Increase complexity
    d. Are irreversible
    Answer: aproofpoint​
48. The main defense strategy against offline attacks is:
    a. Multi-factor authentication combined with strong hashing
    b. Enabling guest accounts
    c. Disabling passwords
    d. Using short passwords
    Answer: agocorptech​
49. What kind of system access does an attacker typically need for offline attacks?
    a. Administrator or root access
    b. User-level access
    c. Read-only permissions
    d. Guest access
    Answer: atutorialspoint​
50. Offline attacks demonstrate that password security should rely on:
    a. Strong encryption, salting, and limited exposure
    b. Simple password reuse
    c. Obscure usernames
    d. Basic antivirus protection
    Answer: abeyondtrust+2​

1. https://www.tutorialspoint.com/what-is-an-offline-attack-types-and-working
2. https://www.sigcorp.com/insights/whats-the-difference-between-offline-and-online-password-attacks/
3. https://www.scalahosting.com/blog/cyber-attack-guide-brute-force-attacks/
4. https://swimlane.com/blog/what-is-a-dictionary-attack/
5. https://www.proofpoint.com/us/blog/information-protection/password-cracking-techniques-used-in-cyber-attacks
6. https://jumpcloud.com/it-index/what-is-offline-password-cracking
7. https://www.sailpoint.com/identity-library/8-types-of-password-attacks
8. https://www.beyondtrust.com/blog/entry/password-cracking-101-attacks-defenses-explained
9. https://gocorptech.com/security/tips-to-defend-cyber-attacks/
10. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
11. https://www.igmguru.com/blog/cyber-security-mcqs
12. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
13. https://www.interviewbit.com/cyber-security-mcq/
14. https://www.sanfoundry.com/computer-networks-mcqs-network-attacks/
15. https://byjus.com/gate/cyber-security-mcqs/
16. https://www.ncsc.gov.uk/guidance/mitigating-malware-and-ransomware-attacks
17. https://www.scribd.com/document/660905820/Mcq-Quations-of-Cyber-Sequrity-Pdf00
18. https://rublon.com/blog/brute-force-dictionary-attack-difference/
19. https://isacybersecurity.com/15-common-cybersecurity-attack-vectors-and-how-to-defend-against-them/
20. https://copamcq.com/cyber-security/