Cybersecurity Quiz 1: Questions & Answers

1. Question: What is meant by IP spoofing in cybersecurity? Answer: Fabricating source IP addresses to disguise identity.

2. Question: Define session hijacking. Answer: Maliciously taking over an active, authenticated web session.

3. Question: How would you describe packet sniffing? Answer: Passively capturing and analysing network data packets.

4. Question: What is an example of an attack that exploits IP communication? Answer: The Smurf attack combining IP spoofing and ICMP.

5. Question: How does a Man-in-the-Middle (MITM) attack work? Answer: Intercepting and altering traffic between two communicating parties.

6. Question: What are the effects of a Man-in-the-Middle (MITM) attack? Answer: Information disclosure, identity theft, and financial fraud.

7. Question: How does IP spoofing work? Answer: Altering source IP fields to impersonate trusted hosts.

8. Question: Give an example of session hijacking. Answer: Injecting unauthorised shell commands into Telnet sessions.

9. Question: Name two tools used for packet sniffing. Answer: Wireshark and Tcpdump are popular sniffing tools.

10. Question: What is a countermeasure against IP spoofing and packet interception? Answer: Implementing IPsec for packet encryption and authentication.

11. Question: What is the purpose of network segmentation? Answer: Isolating critical networks to contain security compromises.

12. Question: How can firewalls and IDS help prevent spoofing and hijacking attacks? Answer: Rejecting forged packets and analysing traffic anomalies.

13. Question: What is a TCP SYN Flood attack? Answer: Overwhelming servers with spoofed connection-initiating SYN packets.

14. Question: What is the result of a TCP SYN Flood attack? Answer: Backlog queue exhaustion, blocking legitimate connection attempts.

15. Question: What is session hijacking in TCP? Answer: Desynchronising and forging packets within TCP data flows.

16. Question: What is a UDP flood attack? Answer: Flooding randomised destination ports with high-volume UDP packets.

17. Question: Why is UDP vulnerable to attacks? Answer: Statelessness and lack of native authentication mechanisms.

18. Question: What is the difference between TCP and UDP? Answer: TCP is connection-oriented; UDP is connectionless and stateless.

19. Question: What is a security risk of DNS over UDP? Answer: Vulnerability to IP spoofing and cache poisoning attacks.

20. Question: How can HTTP over TCP be attacked? Answer: Stealing session cookies or injecting malicious HTTP payloads.

21. Question: What is a TCP RESET attack? Answer: Sending spoofed RST packets to terminate connection states.

22. Question: What are examples of UDP-based attacks? Answer: UDP floods, Fraggle attacks, and DNS amplification exploits.

23. Question: How can a TCP SYN Flood attack be prevented? Answer: Deploying SYN cookies, CDNs, or increasing backlog limits.

24. Question: How can UDP-based attacks be prevented? Answer: Restricting ICMP responses, perimeter filtering, and BCP 38.

25. Question: How can protocol security flaws be mitigated? Answer: Deploying encryption, ingress filtering, and network microsegmentation.