MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Spear phishing primarily targets which type of individual?
   a. Random internet users
   b. Government officials only
   c. Specific individuals or organizations
   d. Entire corporations
   Answer: c. Specific individuals or organizationsexamradar​
2. What distinguishes spear phishing from regular phishing?
   a. It’s broader in scope
   b. It uses targeted and personalized messages
   c. It involves physical devices
   d. It requires malware installation only
   Answer: b. It uses targeted and personalized messageskaspersky​
3. The first step in spear phishing is typically what?
   a. Malware injection
   b. Social media advertisement
   c. Reconnaissance and research
   d. Credential harvesting
   Answer: c. Reconnaissance and researchsprocketsecurity​
4. Which data source is most used in spear phishing reconnaissance?
   a. DNS logs
   b. Social media profiles
   c. Encrypted databases
   d. IoT devices
   Answer: b. Social media profileskaspersky​
5. What is the main motive behind spear phishing attacks?
   a. Annoying the user
   b. Gaining unauthorized access to sensitive data
   c. Website defacement
   d. Creating internet traffic
   Answer: b. Gaining unauthorized access to sensitive dataexamradar​
6. Which of the following best describes a spear phishing email?
   a. Random, plain text emails
   b. Personalized messages appearing from a trusted source
   c. Anonymous spam
   d. System update request
   Answer: b. Personalized messages appearing from a trusted sourcesprocketsecurity​
7. What technique does a spear phishing attacker use to mimic legitimacy?
   a. Using fake images only
   b. Using spoofed email domains and addresses
   c. Exploiting USB drives
   d. DNS poisoning
   Answer: b. Using spoofed email domains and addressessprocketsecurity​
8. What is the common payload in spear phishing attachments?
   a. Images
   b. Audio files
   c. Macros or malware scripts
   d. Text files
   Answer: c. Macros or malware scriptssprocketsecurity​
9. Spear phishing is best categorized under which cyber threat type?
   a. Network intrusion
   b. Social engineering
   c. DDoS attack
   d. Physical attack
   Answer: b. Social engineeringexamradar​
10. What type of attack uses similar methods but targets executives?
    a. Pharming
    b. Whaling
    c. Smishing
    d. Vishing
    Answer: b. Whalingcisco​
11. What is a red flag in potential spear phishing emails?
    a. Personalized greeting
    b. Urgent call to action
    c. Branded logo
    d. Proper signature
    Answer: b. Urgent call to actionexamradar​
12. Which department is often the main target of spear phishing?
    a. Human resources
    b. IT department
    c. Accounting and finance
    d. Security team only
    Answer: c. Accounting and financecisco​
13. How can attackers send realistic spear phishing messages?
    a. Through random automation
    b. By investigating target activities
    c. By hacking DNS servers
    d. Using cross-site scripting
    Answer: b. By investigating target activitiessprocketsecurity​
14. Which cybersecurity approach helps prevent spear phishing most effectively?
    a. Increased bandwidth
    b. Email filtering and employee training
    c. Using new web browsers
    d. Network expansion
    Answer: b. Email filtering and employee trainingsolarwinds​
15. What tool detects suspicious file changes that spear phishing may cause?
    a. Packet sniffer
    b. File Integrity Monitor
    c. Proxy server
    d. Load balancer
    Answer: b. File Integrity Monitorsolarwinds​
16. Why are spear phishing emails harder to detect than normal phishing?
    a. They are shorter
    b. They are highly personalized
    c. They come from unknown sources
    d. They contain broken links
    Answer: b. They are highly personalizedkaspersky​
17. What does the term “execution phase” signify in spear phishing?
    a. When malware is installed
    b. When reconnaissance begins
    c. When data is encrypted
    d. When the server is scanned
    Answer: a. When malware is installedsprocketsecurity​
18. A targeted email from a “colleague” asking for urgent payment is an example of?
    a. Bait phishing
    b. Spear phishing
    c. SQL injection
    d. Shoulder surfing
    Answer: b. Spear phishingibm​
19. Whaling differs from spear phishing because it targets:
    a. CEOs and senior executives
    b. Common users
    c. Students
    d. Developers
    Answer: a. CEOs and senior executivescisco​
20. Which underlying method does spear phishing exploit most?
    a. Technical vulnerabilities
    b. Human trust
    c. Software flaws
    d. System logs
    Answer: b. Human trustibm​
21. Which piece of data helps attackers design spear phishing emails?
    a. IP configuration
    b. Employment details
    c. MAC address
    d. Routing tables
    Answer: b. Employment detailskaspersky​
22. In spear phishing, which step comes right before sending the crafted email?
    a. Information gathering
    b. Covering tracks
    c. Credential theft
    d. Privilege escalation
    Answer: a. Information gatheringsprocketsecurity​
23. Attackers may use which source to gather company hierarchy details?
    a. Job postings
    b. System logs
    c. Router settings
    d. DNS cache
    Answer: a. Job postingskaspersky​
24. A commonly spoofed detail in spear phishing is:
    a. The sender’s name and email address
    b. The recipient’s password
    c. The subject line only
    d. Attachment type
    Answer: a. The sender’s name and email addresssprocketsecurity​
25. A fake “invoice” in a spear phishing message often conceals what?
    a. Advertising
    b. Malware payload
    c. Password protection
    d. Encryption key
    Answer: b. Malware payloadsprocketsecurity​
26. What can spear phishing lead to in a corporate setting?
    a. System optimization
    b. Data exfiltration
    c. Reduced traffic
    d. Enhanced reputation
    Answer: b. Data exfiltrationsolarwinds​
27. Spear phishing emails often exploit which psychological trigger?
    a. Fear or urgency
    b. Humor
    c. Curiosity
    d. Laziness
    Answer: a. Fear or urgencyexamradar​
28. Which prevention measure can identify spear phishing patterns?
    a. Network topology mapping
    b. Security event monitoring
    c. Firmware updates
    d. Data redundancy
    Answer: b. Security event monitoringsolarwinds​
29. A malicious attachment in spear phishing is often disguised as:
    a. Company report
    b. Animation file
    c. Log file
    d. Encrypted folder
    Answer: a. Company reportsprocketsecurity​
30. What form of data is often stolen via spear phishing?
    a. Encrypted backups
    b. Log files
    c. Login credentials
    d. Source code
    Answer: c. Login credentialsibm​
31. Why do traditional spam filters sometimes fail against spear phishing?
    a. Low message volume
    b. Targeted nature and context
    c. Old email format
    d. Random IP addresses
    Answer: b. Targeted nature and contextkaspersky​
32. A spear phishing message impersonating a known vendor is an attempt at:
    a. Business Email Compromise (BEC)
    b. Pharming
    c. Botnet creation
    d. Keylogging
    Answer: a. Business Email Compromise (BEC)sprocketsecurity​
33. Which organization type is most vulnerable to spear phishing?
    a. Banks and financial institutions
    b. Entertainment companies
    c. Schools only
    d. Nonprofits exclusively
    Answer: a. Banks and financial institutionsibm​
34. One way attackers prevent discovery after breach is:
    a. Data randomization
    b. Covering digital tracks
    c. Steganography
    d. Network rerouting
    Answer: b. Covering digital trackssprocketsecurity​
35. How should employees verify suspicious messages?
    a. Reply to the same email
    b. Use alternate communication channels
    c. Ignore all emails
    d. Click verification links
    Answer: b. Use alternate communication channelsduocircle​
36. Multi-Factor Authentication (MFA) helps reduce spear phishing risk by:
    a. Hiding emails
    b. Adding verification beyond passwords
    c. Encrypting attachments
    d. Using proxy terminals
    Answer: b. Adding verification beyond passwordsduocircle​
37. What are common signs of spear phishing domain spoofing?
    a. Substituted or slightly altered letters
    b. Too many exclamation marks
    c. Grammar corrections
    d. Missing favicon
    Answer: a. Substituted or slightly altered letterssprocketsecurity​
38. Where does spear phishing often occur first in the cyber kill chain?
    a. Delivery stage
    b. Reconnaissance stage
    c. Exploitation stage
    d. Escalation stage
    Answer: b. Reconnaissance stagesprocketsecurity​
39. Identifying high-value targets in advance indicates which phase?
    a. Intrusion detection
    b. Target profiling
    c. Payload deployment
    d. Privilege escalation
    Answer: b. Target profilingkaspersky​
40. Attackers often send spear phishing emails during which time?
    a. After business hours
    b. Random midnight hours
    c. Strategic corporate periods
    d. Holidays only
    Answer: c. Strategic corporate periodsibm​
41. A personalized subject line in a spear phishing email helps:
    a. Activate malware
    b. Increase click likelihood
    c. Track domain reputation
    d. Encrypt payload
    Answer: b. Increase click likelihoodkaspersky​
42. Which employee behavior increases susceptibility?
    a. Overtrust in internal emails
    b. Using strong passwords
    c. Reporting phishing immediately
    d. Multi-device authentication
    Answer: a. Overtrust in internal emailssprocketsecurity​
43. Spear phishing often uses which delivery vector?
    a. Email
    b. SMS
    c. Voice call
    d. Physical mail
    Answer: a. Emailcisco​
44. What is one best practice after suspecting spear phishing?
    a. Forward message to IT team
    b. Reply for verification
    c. Delete permanently
    d. Ignore totally
    Answer: a. Forward message to IT teamduocircle​
45. Spear phishing contributes to which larger attack type?
    a. APT (Advanced Persistent Threat)
    b. DDoS
    c. Password spraying
    d. Network flooding
    Answer: a. APT (Advanced Persistent Threat)ibm​
46. Advanced attackers conceal spear phishing by:
    a. Using encrypted HTTPS links
    b. Sending plain text
    c. Using fake usernames only
    d. Embedding visible malware
    Answer: a. Using encrypted HTTPS linkssprocketsecurity​
47. What’s a common aftermath of successful spear phishing?
    a. Credential theft and data breach
    b. Stronger encryption
    c. Network optimization
    d. Security improvement
    Answer: a. Credential theft and data breachsolarwinds​
48. Spear phishing can be mitigated using:
    a. Awareness training and anti-phishing tools
    b. ARP broadcasts
    c. Server virtualization
    d. Network caching
    Answer: a. Awareness training and anti-phishing toolsduocircle​
49. Which policy protects against spear phishing threats?
    a. Zero Trust Architecture
    b. Default allow rule
    c. Static routing
    d. Unmonitored access
    Answer: a. Zero Trust Architectureduocircle​
50. Attackers delete email traces post-attack primarily to:
    a. Reduce system load
    b. Avoid detection and analysis
    c. Protect user data
    d. Improve performance
    Answer: b. Avoid detection and analysissprocketsecurity​

1. https://examradar.com/spear-phishing-in-web-security-mcqs/
2. https://www.kaspersky.com/resource-center/definitions/spear-phishing
3. https://www.sprocketsecurity.com/blog/spear-phishing-attacks
4. https://examradar.com/phishing-and-social-engineering-mcqs-multiple-choice-questions-with-answers/
5. https://www.cisco.com/site/in/en/learn/topics/security/what-is-spear-phishing.html
6. https://www.solarwinds.com/security-event-manager/use-cases/spear-phishing-attack
7. https://www.ibm.com/think/topics/spear-phishing
8. https://www.duocircle.com/phishing-protection/spear-phishing-prevention-essential-cybersecurity-strategies-to-protect-your-data
9. https://www.sanfoundry.com/tricky-cyber-security-questions-answers/
10. https://www.igmguru.com/blog/cyber-security-mcqs
11. https://wayground.com/admin/quiz/65f80663be4932e96152c5a9/cyber-security-malware-vishing-spear-phishing
12. https://inspiredelearning.com/blog/phishing-quiz-for-employees/
13. https://www.fortinet.com/resources/cyberglossary/spear-phishing
14. https://testbook.com/question-answer/______tries-to-trick-specific-individuals-in–66c8441bf39a8e585b5ab3e8
15. https://www.proofpoint.com/us/threat-reference/spear-phishing
16. https://www.sciencedirect.com/science/article/abs/pii/S0167404825000069
17. https://www.scribd.com/document/722589683/Cyber-Security-Mcq
18. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
19. https://www.dni.gov/files/NCSC/documents/campaign/Counterintelligence_Tips_Spearphishing.pdf
20. https://www.cisco.com/site/us/en/learn/topics/security/what-is-phishing.html