Cybersecurity Quiz 1: Questions & Answers

Question: What is meant by IP spoofing in cybersecurity?
Answer: Fabricating source IP addresses to disguise identity.
Question: Define session hijacking.
Answer: Maliciously taking over an active, authenticated web session.
Question: How would you describe packet sniffing?
Answer: Passively capturing and analysing network data packets.
Question: What is an example of an attack that exploits IP communication?
Answer: The Smurf attack combining IP spoofing and ICMP.
Question: How does a Man-in-the-Middle (MITM) attack work?
Answer: Intercepting and altering traffic between two communicating parties.
Question: What are the effects of a Man-in-the-Middle (MITM) attack?
Answer: Information disclosure, identity theft, and financial fraud.
Question: How does IP spoofing work?
Answer: Altering source IP fields to impersonate trusted hosts.
Question: Give an example of session hijacking.
Answer: Injecting unauthorised shell commands into Telnet sessions.
Question: Name two tools used for packet sniffing.
Answer: Wireshark and Tcpdump are popular sniffing tools.
Question: What is a countermeasure against IP spoofing and packet interception?
Answer: Implementing IPsec for packet encryption and authentication.
Question: What is the purpose of network segmentation?
Answer: Isolating critical networks to contain security compromises.
Question: How can firewalls and IDS help prevent spoofing and hijacking attacks?
Answer: Rejecting forged packets and analysing traffic anomalies.
Question: What is a TCP SYN Flood attack?
Answer: Overwhelming servers with spoofed connection-initiating SYN packets.
Question: What is the result of a TCP SYN Flood attack?
Answer: Backlog queue exhaustion, blocking legitimate connection attempts.
Question: What is session hijacking in TCP?
Answer: Desynchronising and forging packets within TCP data flows.
Question: What is a UDP flood attack?
Answer: Flooding randomised destination ports with high-volume UDP packets.
Question: Why is UDP vulnerable to attacks?
Answer: Statelessness and lack of native authentication mechanisms.
Question: What is the difference between TCP and UDP?
Answer: TCP is connection-oriented; UDP is connectionless and stateless.
Question: What is a security risk of DNS over UDP?
Answer: Vulnerability to IP spoofing and cache poisoning attacks.
Question: How can HTTP over TCP be attacked?
Answer: Stealing session cookies or injecting malicious HTTP payloads.
Question: What is a TCP RESET attack?
Answer: Sending spoofed RST packets to terminate connection states.
Question: What are examples of UDP-based attacks?
Answer: UDP floods, Fraggle attacks, and DNS amplification exploits.
Question: How can a TCP SYN Flood attack be prevented?
Answer: Deploying SYN cookies, CDNs, or increasing backlog limits.
Question: How can UDP-based attacks be prevented?
Answer: Restricting ICMP responses, perimeter filtering, and BCP 38.
Question: How can protocol security flaws be mitigated?
Answer: Deploying encryption, ingress filtering, and network microsegmentation.