MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. The term “removable media vector” primarily refers to which cybersecurity concept?
   a. Wireless communication vulnerabilities
   b. Malware transmission through portable devices
   c. DDoS network amplification
   d. Phishing email spoofing
   Answer: b. Malware transmission through portable devicesindustrialcyber+2​
2. Which of the following is an example of a removable media device?
   a. Network switch
   b. Cloud server
   c. USB flash drive
   d. Router
   Answer: c. USB flash driveopswat+1​
3. The Stuxnet malware is historically known for which method of propagation?
   a. Phishing links in email
   b. Drive-by website downloads
   c. USB removable media
   d. DNS tunneling
   Answer: c. USB removable mediaemsisoft+1​
4. Which malware was distributed via USB drives and linked to TEMP.Hex espionage group?
   a. SOGU
   b. SNOWYDRIVE
   c. Wannacry
   d. Conficker
   Answer: a. SOGUemsisoft​
5. In industrial control environments, attackers use USB media to bypass what critical security measure?
   a. Two-factor authentication
   b. VPN tunneling
   c. Air gap isolation
   d. Network segmentation
   Answer: c. Air gap isolationsasa-software+1​
6. Which type of attack reprograms USB firmware to act maliciously despite appearing legitimate?
   a. Fileless attack
   b. BadUSB exploit
   c. Man-in-the-middle
   d. SQL injection
   Answer: b. BadUSB exploitsasa-software​
7. According to Honeywell’s findings, what percentage of USB threats can disrupt industrial control systems?
   a. 22%
   b. 45%
   c. 79%
   d. 33%
   Answer: c. 79%industrialcyber​
8. What is one of the most common roles of removable media in cyberattacks?
   a. Initial infection vector
   b. Password reuse mechanism
   c. Browser hijacking tool
   d. Wireless jamming device
   Answer: a. Initial infection vectoropswat+1​
9. Which of the following malware types commonly spreads via USB drives?
   a. Trojan
   b. Rootkit
   c. Spyware
   d. Macro virus
   Answer: a. Trojanindustrialcyber+1​
10. What is the main security risk when a removable device is stolen?
    a. Denial of service
    b. Unauthorized data access
    c. Physical damage
    d. Reduced bandwidth
    Answer: b. Unauthorized data accessemsisoft+1​
11. Which of these controls can help restrict unauthorized use of USB drives?
    a. Device control software
    b. Packet sniffers
    c. Cloud backup solutions
    d. Proxy filters
    Answer: a. Device control softwaresasa-software​
12. The SNOWYDRIVE malware primarily targeted which industry sector?
    a. Healthcare
    b. Oil and gas
    c. Banking
    d. Telecommunications
    Answer: b. Oil and gasemsisoft​
13. Which compliance frameworks require protection of removable media?
    a. GDPR and HIPAA
    b. DNS and SMTP
    c. ISO 8601 and TCP
    d. HTML5 and CSS
    Answer: a. GDPR and HIPAAsasa-software​
14. What percentage of malware is designed to spread via USB devices according to Honeywell’s 2024 report?
    a. 25%
    b. 51%
    c. 63%
    d. 80%
    Answer: b. 51%emsisoft​
15. What type of data breach occurred at Mitsubishi Electric in 2020?
    a. Cloud misconfiguration
    b. Ransomware
    c. Insider data theft using USB drives
    d. DDoS overload
    Answer: c. Insider data theft using USB drivesemsisoft​
16. Which of these is an example of an air-gapped environment vulnerable to infected removable media?
    a. Home Wi-Fi networks
    b. Industrial control systems
    c. Public web servers
    d. Corporate VPNs
    Answer: b. Industrial control systemsindustrialcyber+1​
17. What is the main disadvantage of unencrypted removable devices?
    a. Lower transfer speed
    b. Vulnerability to unauthorized access
    c. Overheating risk
    d. File fragmentation
    Answer: b. Vulnerability to unauthorized accessadvancedit+1​
18. What term describes the use of removable media to extract sensitive data illegally?
    a. Data exfiltration
    b. Network mirroring
    c. System replication
    d. File indexing
    Answer: a. Data exfiltrationadvancedit+1​
19. Which protocol is irrelevant for mitigating removable media attacks?
    a. USB filtering policies
    b. Email encryption
    c. Endpoint detection
    d. Device whitelisting
    Answer: b. Email encryptionopswat+1​
20. What percentage of global organizations reported USB-based viral intrusions in 2021?
    a. 25%
    b. 39%
    c. 54%
    d. 70%
    Answer: c. 54%advancedit​
21. The primary impact of USB-based malware in OT environments is what?
    a. Reduced network latency
    b. Business disruptions
    c. Greater bandwidth
    d. System cooling
    Answer: b. Business disruptionsindustrialcyber​
22. What differentiates removable media threats from typical online threats?
    a. They require physical access
    b. They need continuous internet
    c. They depend on cloud APIs
    d. They only affect mobile phones
    Answer: a. They require physical accessopswat+1​
23. How do cybercriminals often disguise malicious removable drives?
    a. As movie storage disks
    b. As legitimate software tools
    c. As public networks
    d. As DNS cache files
    Answer: b. As legitimate software toolsindustrialcyber+1​
24. What is a recommended strategy for managing USB security organization-wide?
    a. Allow unrestricted access
    b. Implement central device control
    c. Disable antivirus
    d. Ignore user training
    Answer: b. Implement central device controlsasa-software+1​
25. What physical characteristic makes removable media a security risk?
    a. Portability
    b. Durability
    c. Large size
    d. Weight
    Answer: a. Portabilityadvancedit+1​
26. Which malware feature helps spread infections through USB without user action?
    a. Autorun
    b. Clickjacking
    c. Session hijacking
    d. Spoofing
    Answer: a. Autorunopswat+1​
27. What type of attack involves firmware modification of USB devices to mimic keyboards or network cards?
    a. BadUSB
    b. Keylogging script
    c. Trojan downloader
    d. Rootkit dropper
    Answer: a. BadUSBsasa-software​
28. Which entity published multiple reports about USB threat trends?
    a. Cisco
    b. Microsoft
    c. Honeywell
    d. Palo Alto Networks
    Answer: c. Honeywellindustrialcyber+1​
29. Which free-standing malware spread through removable drives is famous for ICS/SCADA targeting?
    a. Stuxnet
    b. Mirai
    c. Zeus
    d. WannaCry
    Answer: a. Stuxnetsasa-software​
30. What regulatory impact can occur if a lost USB holds unencrypted personal data?
    a. Licensing suspension
    b. Compliance violation penalties
    c. Antivirus alerts
    d. File recovery warnings
    Answer: b. Compliance violation penaltiessasa-software​
31. What kind of malware injected via USB can provide remote access to threat actors?
    a. Backdoor
    b. Spyware
    c. Browser hijacker
    d. Worm
    Answer: a. Backdooremsisoft+1​
32. Which practice minimizes USB-borne virus infections?
    a. Disabling autorun
    b. Increasing device count
    c. Allowing all plug-ins
    d. Using public charging stations
    Answer: a. Disabling autorunadvancedit+1​
33. USB vectors are particularly dangerous for what type of network model?
    a. Isolated/air-gapped
    b. Open public Wi-Fi
    c. Cloud SaaS
    d. Home IoT
    Answer: a. Isolated/air-gappedindustrialcyber+1​
34. What should be regularly updated to prevent removable media malware compatibility issues?
    a. Device firmware
    b. Browser cookies
    c. DNS cache
    d. Email password
    Answer: a. Device firmwareadvancedit​
35. How do organizations limit which devices can connect through USB ports?
    a. Port blocking
    b. Device whitelisting
    c. Unrestricted access
    d. BIOS disablement only
    Answer: b. Device whitelistingsasa-software​
36. Which human factor commonly leads to removable media exploitation?
    a. Curiosity opening unknown USBs
    b. Password reuse
    c. Poor DNS configuration
    d. Misconfigured firewalls
    Answer: a. Curiosity opening unknown USBsopswat+1​
37. Which phrase describes using USBs to deliver malware as part of a larger campaign?
    a. Initial intrusion vector
    b. Cyber hygiene
    c. Vulnerability patch
    d. Passive surveillance
    Answer: a. Initial intrusion vectoremsisoft+1​
38. In 2020, USB threats in OT environments rose from what to what percentage?
    a. 10% to 20%
    b. 19% to 37%
    c. 45% to 69%
    d. 35% to 60%
    Answer: b. 19% to 37%industrialcyber​
39. A removable media breach can lead to which major risk for organizations?
    a. Financial and reputational damage
    b. Faster backups
    c. Stronger encryption
    d. Improved network latency
    Answer: a. Financial and reputational damageopswat+1​
40. What technical control can monitor and block suspicious USB activity?
    a. Endpoint protection software
    b. VPN
    c. Cloud sync app
    d. Server firewall
    Answer: a. Endpoint protection softwaresasa-software​
41. What does “removable media protection” encompass primarily?
    a. Physical and technical safeguards
    b. Only physical locks
    c. Only user education
    d. Hardware-only encryption
    Answer: a. Physical and technical safeguardssasa-software​
42. What is a simple preventive action against data theft through lost USBs?
    a. Encryption
    b. File compression
    c. Cloud syncing
    d. Registry editing
    Answer: a. Encryptionadvancedit+1​
43. Infected removable media is often used to compromise what security barrier?
    a. Firewalls
    b. Air gaps
    c. VPN tunnels
    d. IDS signatures
    Answer: b. Air gapsindustrialcyber+1​
44. Insider threats often misuse removable devices for what purpose?
    a. Data exfiltration
    b. Software updates
    c. Performance boost
    d. Power management
    Answer: a. Data exfiltrationemsisoft+1​
45. Which key principle should govern removable media policies in enterprises?
    a. Least privilege
    b. Full accessibility
    c. Open device usage
    d. Unlimited sharing
    Answer: a. Least privilegeopswat+1​
46. What is a frequent consequence of outdated USB device software?
    a. Malware exploitation
    b. Faster data transfer
    c. Improved reliability
    d. Energy saving
    Answer: a. Malware exploitationadvancedit​
47. Which removable media attack category uses documents instead of executables?
    a. Trojan impersonation
    b. Phishing
    c. SQL injection
    d. DoS
    Answer: a. Trojan impersonationindustrialcyber​
48. USB-borne threats increased due to what global event causing remote operations?
    a. 2019 economic downturn
    b. COVID-19 pandemic
    c. Cloud expansion
    d. IPv6 rollout
    Answer: b. COVID-19 pandemicindustrialcyber​
49. What type of malware leverages removable media to spread autonomously?
    a. Worms
    b. Botnets
    c. Adware
    d. Phishkits
    Answer: a. Wormsopswat+1​
50. Which industry-specific framework emphasizes USB control for cyber resilience?
    a. PCI DSS
    b. HTML5
    c. RSS v2
    d. VTP
    Answer: a. PCI DSSsasa-software​

1. https://industrialcyber.co/threats-attacks/usb-removable-media-still-acts-as-an-initial-attack-vector-in-ot-environments/
2. https://www.emsisoft.com/en/blog/45977/small-devices-big-threats-the-dark-side-of-removable-devices/
3. https://www.opswat.com/blog/removable-media
4. https://cyberpedia.reasonlabs.com/EN/removable%20media.html
5. https://www.sasa-software.com/learning/what-is-removable-media-protection/
6. https://advancedit.net/removable-media-cyber-security/
7. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
8. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
9. https://www.includehelp.com/mcq/cyber-security-mcqs.aspx
10. https://www.sanfoundry.com/cyber-security-questions-answers-virus-worms/
11. https://examradar.com/mobile-device-vulnerabilities-and-threats-mcqs-multiple-choice-questions-with-answer/
12. https://www.scribd.com/document/827956737/Module-5-MCQ-of-Cyber-Security
13. https://www.sasa-software.com/learning/risks-of-removable-media-in-cybersecurity/
14. https://www.beyond20.com/blog/external-storage-device-security/
15. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
16. https://www.9ine.com/newsblog/cyber-security-in-schools-removable-media-data-loss-and-malware
17. https://examradar.com/cyber-security-mcq-set-14/
18. https://www.geeksforgeeks.org/ethical-hacking/what-are-the-security-risks-of-usb-drives/
19. https://www.balbix.com/insights/attack-vectors-and-breach-methods/
20. https://www.easyvista.com/blog/10-strategies-to-prevent-removable-media-security-cyberattacks/