MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which of the following is a common method used in password attacks?
   a. Brute force
   b. Packet sniffing
   c. Phishing
   d. All of the above
   Answer: d. All of the abovelepide+2​
2. In a brute force attack, how does the attacker find the correct password?
   a. By using social engineering
   b. By guessing a single password
   c. By trying all possible combinations
   d. By intercepting network traffic
   Answer: c. By trying all possible combinationsexamradar+2​
3. What is a dictionary attack?
   a. Using malware to steal passwords
   b. Trying passwords from a predefined list
   c. Phishing for user credentials
   d. Guessing passwords using random combinations
   Answer: b. Trying passwords from a predefined listgeeksforgeeks+2​
4. Which attack uses leaked credentials from previous breaches?
   a. Phishing
   b. Credential stuffing
   c. Dictionary attack
   d. Man-in-the-middle attack
   Answer: b. Credential stuffingontinue+2​
5. What is the primary goal of a phishing attack?
   a. Stealing user credentials through deception
   b. Intercepting encrypted traffic
   c. Brute-forcing passwords
   d. Guessing default passwords
   Answer: a. Stealing user credentials through deceptionssh+2​
6. How does a keylogger compromise password security?
   a. By applying brute force remotely
   b. By recording keystrokes
   c. By guessing passwords from a list
   d. By phishing users
   Answer: b. By recording keystrokeslepide+2​
7. Which password attack involves intercepting authentication data while being transmitted?
   a. Brute force
   b. Man-in-the-middle
   c. Dictionary attack
   d. Credential stuffing
   Answer: b. Man-in-the-middleonelogin+1​
8. What is password spraying?
   a. Targeting a single account with many passwords
   b. Using default credentials
   c. Trying a few common passwords across many accounts
   d. Using malware
   Answer: c. Trying a few common passwords across many accountsvaronis+2​
9. In which attack does the hacker observe a user entering their password in public?
   a. Man-in-the-middle
   b. Shoulder surfing
   c. Brute force
   d. Keylogger
   Answer: b. Shoulder surfingexamradar+2​
10. What kind of passwords are most vulnerable to dictionary attacks?
    a. Long passwords
    b. Passwords using only common words
    c. Passwords containing symbols, numbers, and letters
    d. Passwords with mixed case
    Answer: b. Passwords using only common wordsgeeksforgeeks+1​
11. Which method increases the strength of password storage against attacks?
    a. Storing passwords in plain text
    b. Encrypting passwords without salt
    c. Hashing passwords with salt
    d. Using default credentials
    Answer: c. Hashing passwords with saltsailpoint+2​
12. What is the most effective defense against brute force attacks?
    a. Weak password policy
    b. Account lockout after multiple failed attempts
    c. Using default passwords
    d. Shoulder surfing
    Answer: b. Account lockout after multiple failed attemptsowasp+1​
13. Which tool helps in managing and protecting passwords securely?
    a. Password manager
    b. Packet sniffer
    c. Keylogger
    d. Proxy server
    Answer: a. Password managerkeepersecurity+2​
14. What is a hybrid attack?
    a. Combining social engineering and malware
    b. Merging brute force and dictionary attack methods
    c. Using credential stuffing
    d. Applying multi-factor authentication
    Answer: b. Merging brute force and dictionary attack methodsyeahhub+1​
15. What does multi-factor authentication (MFA) add?
    a. Additional password length
    b. Verification beyond passwords
    c. Weak password protection
    d. Credential stuffing vulnerability
    Answer: b. Verification beyond passwordskeepersecurity+2​
16. Which attack attempts to crack encrypted passwords using precomputed tables?
    a. Dictionary attack
    b. Rainbow table attack
    c. Phishing
    d. Keylogging
    Answer: b. Rainbow table attackontinue+2​
17. Why are default passwords dangerous?
    a. Hard to guess
    b. Unique for each device
    c. Widely known and easily exploited
    d. Always secured by vendors
    Answer: c. Widely known and easily exploitedsailpoint+2​
18. What is credential stuffing most effective against?
    a. Accounts with multi-factor authentication
    b. Accounts reused across platforms
    c. Passwords containing symbols
    d. Passwords hashed with salt
    Answer: b. Accounts reused across platformslepide+1​
19. Which is a non-electronic password attack?
    a. Shoulder surfing
    b. Keylogging
    c. Rainbow table
    d. Man-in-the-middle
    Answer: a. Shoulder surfingexamradar+1​
20. A strong password should:
    a. Be short and simple
    b. Use only lowercase letters
    c. Combine letters, numbers, and symbols
    d. Be a single dictionary word
    Answer: c. Combine letters, numbers, and symbolssailpoint+1​
21. Which protocol is vulnerable if passwords are sent in clear text?
    a. HTTPS
    b. SSH
    c. Telnet
    d. SFTP
    Answer: c. Telnetlepide+1​
22. What is the main purpose of account lockout policies?
    a. Allow unlimited password attempts
    b. Prevent brute force attacks
    c. Store passwords safely
    d. Enable keylogging
    Answer: b. Prevent brute force attacksowasp+1​
23. Which password attack exploits poor password resets and recovery processes?
    a. Brute force
    b. Password recovery attack
    c. Dictionary attack
    d. Keylogging
    Answer: b. Password recovery attackssh+1​
24. What is social engineering in the context of password attacks?
    a. Physically accessing devices
    b. Manipulating users to reveal credentials
    c. Brute-forcing passwords
    d. Keylogging with software
    Answer: b. Manipulating users to reveal credentialsonelogin+1​
25. Which of the following is NOT a password attack technique?
    a. Credential stuffing
    b. Rainbow table attack
    c. Two-factor authentication
    d. Keylogging
    Answer: c. Two-factor authenticationontinue+1​
26. Why is password reuse risky?
    a. It increases memory usage
    b. Reduces password strength
    c. Makes credential stuffing more effective
    d. Protects accounts better
    Answer: c. Makes credential stuffing more effectiveontinue+1​
27. Which attack leverages malware installed on a user’s device?
    a. Brute force
    b. Keylogging
    c. Shoulder surfing
    d. Password spraying
    Answer: b. Keyloggingssh+2​
28. What is password entropy?
    a. Ease of guessing passwords
    b. Complexity and unpredictability of a password
    c. Reuse of passwords across platforms
    d. Use of default credentials
    Answer: b. Complexity and unpredictability of a passwordgeeksforgeeks+1​
29. Which password cracking method applies mathematical algorithms to compare password hashes?
    a. Phishing
    b. Rainbow table attack
    c. Shoulder surfing
    d. Keylogging
    Answer: b. Rainbow table attackexamradar+1​
30. What is the role of password length in security?
    a. No impact
    b. Longer passwords are harder to crack
    c. Short passwords are more secure
    d. Length makes passwords weaker
    Answer: b. Longer passwords are harder to cracksailpoint+1​
31. Applying a strong hashing algorithm to passwords serves what purpose?
    a. Increases resource consumption
    b. Prevents offline password cracking
    c. Enables brute force attacks
    d. Allows default credentials
    Answer: b. Prevents offline password crackingssh+1​
32. Which service is susceptible to password spraying due to common password selection?
    a. Protected email accounts
    b. Any online login portal
    c. Multi-factor authentication portals
    d. Biometrics-only authentication
    Answer: b. Any online login portaldatadome+1​
33. Why are simple passwords easier to crack?
    a. Require more computation
    b. Are not stored securely
    c. Can be guessed quickly by attackers
    d. Only work with HTTPS
    Answer: c. Can be guessed quickly by attackerslepide+1​
34. What is hashing in password management?
    a. Storing passwords in plain text
    b. Encrypting passwords with simple algorithms
    c. Transforming passwords into fixed-size data using algorithms
    d. Sending passwords via email
    Answer: c. Transforming passwords into fixed-size data using algorithmssailpoint+1​
35. A password manager offers which primary benefit?
    a. Automatically sharing passwords
    b. Generating complex and unique passwords
    c. Disabling password policies
    d. Making passwords simple
    Answer: b. Generating complex and unique passwordsssh+1​
36. What does account privilege restriction help achieve in password security?
    a. Allows easy brute force
    b. Limits damage from compromised credentials
    c. Increases system vulnerability
    d. Disables password requirements
    Answer: b. Limits damage from compromised credentialssailpoint+1​
37. What is a password cracking tool?
    a. A password manager
    b. A program used to guess or recover passwords
    c. An authentication device
    d. An email server
    Answer: b. A program used to guess or recover passwordsgeeksforgeeks+1​
38. Which measure is essential to prevent password attacks?
    a. Using short passwords
    b. Avoiding password changes
    c. Enforcing password complexity and length
    d. Relying on weak passwords
    Answer: c. Enforcing password complexity and lengthlepide+1​
39. What is Salting in password storage?
    a. Making passwords tasty
    b. Adding random data to passwords before hashing
    c. Sending passwords in plain text
    d. Using only numeric passwords
    Answer: b. Adding random data to passwords before hashingssh+1​
40. What is the weakness of a brute-force password attack?
    a. Can crack passwords instantly
    b. Is slow and resource intensive
    c. Evades all detection methods
    d. Uses social engineering
    Answer: b. Is slow and resource intensiveexamradar+1​
41. What is a passphrase?
    a. Short code words
    b. A longer phrase used as a password for increased security
    c. Compound dictionary words
    d. Numeric code
    Answer: b. A longer phrase used as a password for increased securitylepide+1​
42. What is the most critical aspect when designing password policies?
    a. Simplicity
    b. Default credential usage
    c. Ensuring passwords are unique and complex
    d. Reusing passwords
    Answer: c. Ensuring passwords are unique and complexsailpoint+1​
43. What is shoulder surfing primarily prevented by?
    a. Strong password policies
    b. Physical security and privacy when entering passwords
    c. Abandoning passwords for biometrics
    d. Using malware protection
    Answer: b. Physical security and privacy when entering passwordsexamradar+1​
44. Which security measure blocks brute force attacks most efficiently?
    a. No password expiration
    b. Continuous monitoring and account lockouts
    c. Weak password requirements
    d. Using only numeric passwords
    Answer: b. Continuous monitoring and account lockoutsowasp+1​
45. What is password expiration policy?
    a. Never updating passwords
    b. Requiring periodic password changes
    c. Using default credentials
    d. Disabling password managers
    Answer: b. Requiring periodic password changeslepide+1​
46. Which password attack targets hash values rather than the password itself?
    a. Phishing
    b. Rainbow table attack
    c. Keylogging
    d. Credential stuffing
    Answer: b. Rainbow table attackontinue+1​
47. What is continuous authentication?
    a. Single sign-on only
    b. Constant assessment of user identity during sessions
    c. Disabling account lockouts
    d. Storing passwords as plain text
    Answer: b. Constant assessment of user identity during sessionsssh+1​
48. Which attack compromises passwords using malicious software to record inputs?
    a. Rainbow table attack
    b. Shoulder surfing
    c. Keylogging
    d. Password spraying
    Answer: c. Keyloggingontinue+2​
49. Why is it important to monitor failed login attempts?
    a. To allow unlimited retries
    b. To detect and prevent automated password attacks
    c. To reset all passwords instantly
    d. To log out inactive users
    Answer: b. To detect and prevent automated password attacksowasp+1​
50. What is the effect of enabling multi-factor authentication on password attacks?
    a. Makes password attacks easier
    b. Adds a second layer of protection, reducing reliance on passwords alone
    c. Eliminates password expiration
    d. Allows default credentials usage
    Answer: b. Adds a second layer of protection, reducing reliance on passwords alonekeepersecurity+2​

1. https://www.lepide.com/blog/types-of-password-attacks/
2. https://www.ontinue.com/password-attack/
3. https://www.onelogin.com/learn/6-types-password-attacks
4. https://examradar.com/password-attacks-on-authentication-in-web-security-mcqs/
5. https://www.geeksforgeeks.org/computer-networks/introduction-to-password-attacks-ethical-hacking/
6. https://www.ssh.com/academy/types-of-password-attacks-and-how-to-prevent-them
7. https://www.varonis.com/blog/password-spraying
8. https://datadome.co/bot-management-protection/how-to-prevent-brute-force-attacks/
9. https://www.sailpoint.com/identity-library/8-types-of-password-attacks
10. https://owasp.org/www-community/controls/Blocking_Brute_Force_Attacks
11. https://www.keepersecurity.com/blog/2022/12/19/how-to-prevent-password-attacks/
12. https://www.yeahhub.com/cyber-security-ethical-hacking-mcq-questions-answers-part2/
13. https://www.sanfoundry.com/cyber-security-questions-answers-password-cracking-security-measures-1/
14. https://letsfindcourse.com/cyber-security-mcq/secure-password-mcq-questions-and-answers
15. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
16. https://www.scribd.com/document/865399924/Cyber-Security-Awareness-MCQs
17. https://www.igmguru.com/blog/cyber-security-mcqs
18. https://www.geeksforgeeks.org/ethical-hacking/how-to-defend-against-password-cracking-of-systems/
19. https://www.placementpreparation.io/mcq/cyber-security/page/2/
20. https://www.vinsys.com/blog/top-30-mcqs-ceh-exam-preparation