General Concepts

Question 1

IP Address

Answer 1

A numerical label assigned to each device connected to a computer network that uses the Internet Protocol for communication.

Question 2

Port

Answer 2

A communication endpoint on a computer or network device, used to identify a specific process or service.

Question 3

Packet Sniffing

Answer 3

A method of monitoring and analyzing network traffic to detect and extract sensitive information.

Question 4

Phishing

Answer 4

A type of social engineering attack in which an attacker attempts to trick a victim into providing sensitive information, such as login credentials or financial information.

Question 5

SQL Injection

Answer 5

A type of cyber attack in which an attacker injects malicious code into a website’s SQL database, allowing them to gain unauthorized access to sensitive information.

Question 6

Man-in-the-middle (MitM)

Answer 6

A type of cyber attack in which an attacker intercepts and alters communication between two parties.

Question 7

DDoS

Answer 7

A type of cyber attack in which an attacker uses a network of infected computers to flood a website or online service with traffic, causing it to become unavailable to legitimate users.

Question 8

Malware

Answer 8

Software specifically designed to harm or exploit a computer system, such as viruses, trojans, and ransomware.

Question 9

Rootkit

Answer 9

A type of malware that is designed to conceal its presence on a system and provide an attacker with unauthorized access.

Question 10

Public Key Cryptography

Answer 10

A method of encrypting and decrypting data using a pair of mathematically-related keys, one of which is public and the other is private.

Question 11

SSH

Answer 11

A secure network protocol used to remotely access and manage network devices.

Question 12

Vulnerability Scanning

Answer 12

The process of identifying potential vulnerabilities in a computer system or network.

Question 13

Social Engineering

Answer 13

A type of cyber attack in which an attacker uses psychological manipulation to trick a victim into providing sensitive information or performing a certain action.

Question 14

Botnet

Answer 14

A network of infected computers controlled by an attacker, used to launch DDoS attacks or other malicious activity.

Question 15

Keylogger

Answer 15

A type of malware that records every keystroke made on a computer, allowing an attacker to steal login credentials and other sensitive information.

Question 16

Encryption

Answer 16

The process of converting plaintext into ciphertext, making it unreadable to anyone without the decryption key.

Question 17

Firewall

Answer 17

A network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.

Question 18

Two-Factor Authentication

Answer 18

A method of confirming a user’s claimed identity by requiring them to present two or more pieces of evidence.

Question 19

Zero-Day Exploit

Answer 19

A type of cyber attack that takes advantage of a previously unknown vulnerability in a computer system or software.

Question 20

Advanced Persistent Threat (APT)

Answer 20

A type of cyber attack in which an attacker establishes a long-term presence on a target’s network with the goal of stealing sensitive information or causing damage over an extended period of time.

Question 21

Remote Access Trojan (RAT)

Answer 21

A type of malware that allows an attacker to remotely control an infected computer.

Question 22

Denial of Service (DoS)

Answer 22

A type of cyber attack that aims to make a computer resource unavailable to its intended users by overwhelming it with traffic.

Question 23

Cross-Site Scripting (XSS)

Answer 23

A type of cyber attack that injects malicious code into a website, allowing an attacker to steal sensitive information from users.

Question 24

Cross-Site Request Forgery (CSRF)

Answer 24

A type of cyber attack that tricks a user into performing an action on a website without their knowledge or consent.

Question 25

File Inclusion Vulnerability

Answer 25

A type of vulnerability that allows an attacker to include a file on a web server, potentially allowing them to execute malicious code.

Question 26

Password Cracking

Answer 26

The process of attempting to gain unauthorized access to a computer system by guessing or cracking a user’s password.

Question 27

Email Spoofing

Answer 27

A type of cyber attack in which an attacker sends an email that appears to be from a legitimate sender in order to trick the recipient into providing sensitive information.

Question 28

Network Mapping

Answer 28

The process of creating a visual representation of a network’s structure and topology.

Question 29

Distributed Denial of Service (DDoS)

Answer 29

A type of cyber attack that uses a network of infected computers to overwhelm a website or online service with traffic, making it unavailable to legitimate users.

Question 30

Clickjacking

Answer 30

A type of cyber attack that tricks a user into clicking on a button or link that they did not intend to click on.

Question 31

Advanced Encryption Standard (AES)

Answer 31

A widely-used standard for encrypting and decrypting data, known for its strong security and high performance.

Question 32

Virtual Private Network (VPN)

Answer 32

A private network that uses a public network to securely connect remote users and devices.

Question 33

Network Segmentation

Answer 33

The process of dividing a network into smaller, isolated segments in order to improve security and reduce the impact of a cyber attack.

Question 34

Buffer Overflow

Answer 34

A type of cyber attack that exploits a vulnerability in a computer program by overflowing its buffer, allowing an attacker to execute malicious code.

Question 35

Internet of Things (IoT)

Answer 35

The interconnection of everyday devices and appliances that are connected to the internet, allowing them to collect and share data.

Question 36

Backdoor

Answer 36

A type of cyber attack that creates a hidden way for an attacker to gain unauthorized access to a computer system or network.

Question 37

Exploit Kit

Answer 37

A collection of tools and techniques used to exploit vulnerabilities in computer systems and networks.

Question 38

Root Access

Answer 38

The highest level of access to a computer system, allowing a user to perform any action on the system.

Question 39

End-to-End Encryption

Answer 39

A method of encrypting data that ensures only the sender and the intended recipient can read the message, not even the service provider can access.

Question 40

Advanced Persistent Threats (APT)

Answer 40

A type of cyber attack that establishes a long-term presence on a target’s network with the goal of stealing sensitive information or causing damage over an extended