technology
beginner
10 sample questions
Cyber Warfare MCQ Practice Test
Nation-state attacks, digital espionage, and security threats
Q1. A type of cyber attack that involves sending a large amount of traffic to a network or system in order to overwhelm its resources and make it unavailable to users is known as:
-
A. Distributed Denial-of-Service (DDoS) attack ✓
-
B. Man-in-the-Middle (MitM) attack
-
C. SQL Injection attack
-
D. Cross-Site Scripting (XSS) attack
Explanation: A DDoS attack is a type of cyber attack that involves sending a large amount of traffic to a network or system in order to overwhelm its resources and make it unavailable to users. This can be done using a network of compromised computers or devices.
Q2. In the context of cyber warfare, what is the primary purpose of a “false flag” operation?
-
A. To attribute a cyber attack to a nation-state that did not actually conduct the attack ✓
-
B. To deploy a ransomware attack on a critical infrastructure target
-
C. To conduct a cyber espionage operation on a rival nation-state
-
D. To launch a distributed denial-of-service (DDoS) attack on a website
Explanation: A “false flag” operation in cyber warfare involves attributing a cyber attack to a nation-state that did not actually conduct the attack. This can be done to mislead the public, distract from the real perpetrator, or to justify a pre-planned military response.
Q3. A nation-state actor is conducting a cyber operation against a critical infrastructure target. Which of the following types of malware is most likely to be used in this type of attack?
-
A. Ransomware
-
B. Wiper malware ✓
-
C. Logic bomb
-
D. Trojan horse
Explanation: Wiper malware is designed to destroy or erase data, making it a likely choice for a nation-state actor conducting a cyber operation against a critical infrastructure target.
Q4. In a cyber warfare scenario, what is the primary goal of a "Man-in-the-Middle" (MitM) attack?
-
A. To gain unauthorized access to a target system
-
B. To intercept and alter communication between two parties ✓
-
C. To create a backdoor in a target system
-
D. To conduct a denial-of-service (DoS) attack
Explanation: A Man-in-the-Middle attack involves intercepting and altering communication between two parties, often to steal sensitive information or inject malware. This type of attack is commonly used in cyber warfare to compromise the integrity of communication between military units or government agencies.
Q5. In a cyber warfare scenario, what is the primary purpose of a "honeynet"?
-
A. To detect and analyze malware in real-time
-
B. To deceive attackers into thinking they have compromised a network ✓
-
C. To monitor and record network traffic for forensic analysis
-
D. To prevent lateral movement of an attacker within a network
Explanation: A honeynet is a network or system designed to mimic a vulnerable system, with the goal of deceiving attackers into thinking they have successfully compromised a network. This allows security teams to observe and analyze the attacker's behavior, gather intelligence, and prepare for potential countermeasures.
Q6. In a cyber warfare scenario, a threat actor uses a technique called "spear phishing" to target a specific individual. What is the primary goal of spear phishing?
-
A. to spread malware to a large number of users
-
B. to trick the target into revealing sensitive information ✓
-
C. to disrupt the target's system with a denial-of-service attack
-
D. to gain unauthorized access to a network
Explanation: Spear phishing is a targeted form of phishing where the threat actor sends a tailored email or message to a specific individual, often with the goal of tricking them into revealing sensitive information such as login credentials or financial information.
Q7. In a cyber warfare scenario, what is the primary goal of a “phishing” attack using a “spear phishing” technique?
-
A. To infect the target’s device with malware
-
B. To trick the target into revealing sensitive information ✓
-
C. To launch a denial-of-service (DoS) attack
-
D. To gain unauthorized access to the target’s network
Explanation: Spear phishing is a type of phishing attack where the attacker targets a specific individual or organization with a personalized message, often using social engineering tactics to trick the target into revealing sensitive information, such as login credentials or financial information.
Q8. What is the primary purpose of a "honeynet" in a cyber warfare context?
-
A. To monitor and analyze malicious network traffic
-
B. To deceive attackers into revealing their tactics and techniques ✓
-
C. To detect and prevent malware infections
-
D. To perform man-in-the-middle attacks on adversaries
Explanation: A honeynet is a network of decoy computers and data that appears to be a legitimate target, but is actually designed to lure attackers into revealing their tactics and techniques. This information can then be used to improve defenses and anticipate future attacks.
Q9. A “man-in-the-middle” (MitM) attack in a Wi-Fi network is typically achieved through a vulnerability in the WPA2 protocol. Which of the following is a common technique used to exploit this vulnerability?
-
A. Krebs’ on the dark web
-
B. Association Request Replay
-
C. KRACKing the WPA2 protocol ✓
-
D. Cerberus malware
Explanation: KRACK (Key Reinstallation Attack) is a vulnerability in the WPA2 protocol that allows an attacker to intercept and manipulate encrypted data in a Wi-Fi network.
Q10. In a cyber warfare scenario, what is the primary function of a "Honeypot"?
-
A. A decoy system designed to attract and detect potential attackers. ✓
-
B. A sophisticated malware used to infiltrate secure networks.
-
C. A type of encryption used to protect sensitive data.
-
D. A tool used to conduct man-in-the-middle attacks.
Explanation: A Honeypot is a decoy system or data that appears to be a valuable target, but in reality is a trap designed to detect and deflect potential attackers. It is used to lure attackers into a controlled environment where their actions can be monitored and analyzed.
That was just a sample. Sign up to unlock the full question bank with timed tests and certificates.
Sign Up Free