NTS NAT-ICS (Computer Science Track) computer science Network Security — Set 3

NTS NAT-ICS (Computer Science Track) computer science Network Security — Set 3

1. Question 1

   Q1. Which type of attack involves flooding a network with traffic?

   • A) DDoS
   • B) Phishing
   • C) SQL Injection
   • D) Man-in-the-Middle

   Answer: DDoS

   Explanation: DDoS (Distributed Denial of Service) attack involves overwhelming a network with traffic to make it unavailable.

2. Question 2

   Q2. What is the main purpose of a digital signature?

   • A) To encrypt data
   • B) To verify the authenticity of a message
   • C) To compress data
   • D) To improve network speed

   Answer: To verify the authenticity of a message

   Explanation: A digital signature verifies the authenticity and integrity of a message, ensuring it comes from the claimed sender.

3. Question 3

   Q3. Which security measure helps in detecting and alerting about potential security threats?

   • A) Intrusion Detection System
   • B) Firewall
   • C) Encryption
   • D) Authentication

   Answer: Intrusion Detection System

   Explanation: Intrusion Detection System (IDS) monitors network traffic for signs of unauthorized access or malicious activity.

4. Question 4

   Q4. What is a characteristic of a symmetric encryption algorithm?

   • A) It uses different keys for encryption and decryption
   • B) It uses the same key for encryption and decryption
   • C) It is slower than asymmetric encryption
   • D) It is less secure than asymmetric encryption

   Answer: It uses the same key for encryption and decryption

   Explanation: Symmetric encryption uses the same key for both encryption and decryption, making it faster but requiring secure key exchange.

5. Question 5

   Q5. What is the primary benefit of using a secure protocol like SSH instead of Telnet?

   • A) Faster connection
   • B) Encrypted communication
   • C) Improved network speed
   • D) Simplified configuration

   Answer: Encrypted communication

   Explanation: SSH provides encrypted communication, unlike Telnet which transmits data in plain text, making SSH more secure.

6. Question 6

   Q6. Which network attack involves intercepting and altering communication?

   • A) Man-in-the-Middle
   • B) DDoS
   • C) Phishing
   • D) SQL Injection

   Answer: Man-in-the-Middle

   Explanation: Man-in-the-Middle attack involves intercepting and potentially altering communication between two parties. NET computer science MCQs often test this core concept.

7. Question 7

   Q7. Which security concept is based on the idea that multiple layers of security are better than a single layer?

   • A) Defense in Depth
   • B) Single Sign-On
   • C) Least Privilege
   • D) Fail-safe defaults

   Answer: Defense in Depth

   Explanation: Defense in Depth involves implementing multiple layers of security measures to protect against various types of threats.

8. Question 8

   Q8. What is a characteristic of asymmetric encryption?

   • A) Faster than symmetric encryption
   • B) Uses the same key for encryption and decryption
   • C) More secure key exchange
   • D) Less secure than symmetric encryption

   Answer: More secure key exchange

   Explanation: Asymmetric encryption provides a more secure key exchange mechanism by using a pair of keys (public and private).

9. Question 9

   Q9. Which of the following is a security risk associated with using public Wi-Fi?

   • A) Man-in-the-Middle attack
   • B) SQL Injection
   • C) Buffer Overflow
   • D) Cross-Site Scripting

   Answer: Man-in-the-Middle attack

   Explanation: Public Wi-Fi networks are vulnerable to Man-in-the-Middle attacks, where an attacker intercepts communication.

10. Question 10

    Q10. What is the term for a malicious program that disguises itself as legitimate software?

    • A) Virus
    • B) Worm
    • C) Trojan
    • D) Rootkit

    Answer: Trojan

    Explanation: A Trojan horse is malware that disguises itself as legitimate software, allowing unauthorized access to a computer system.

11. Question 11

    Q11. Which of the following is a type of malware that demands payment in exchange for restoring access to data?

    • A) Virus
    • B) Worm
    • C) Ransomware
    • D) Adware

    Answer: Ransomware

    Explanation: Ransomware is malware that encrypts a victim's files and demands a ransom in exchange for the decryption key.

12. Question 12

    Q12. What is a common technique used to protect passwords stored on a server?

    • A) Hashing
    • B) Encryption
    • C) Compression
    • D) Encoding

    Answer: Hashing

    Explanation: Hashing transforms passwords into fixed-length strings of characters, making it difficult to retrieve the original password.

13. Question 13

    Q13. Which protocol is used to securely access a remote server?

    • A) Telnet
    • B) SSH
    • C) FTP
    • D) HTTP

    Answer: SSH

    Explanation: SSH (Secure Shell) is a protocol used to securely access and manage a remote server, encrypting data transmitted.

14. Question 14

    Q14. What is the main goal of a intrusion detection system (IDS)?

    • A) To prevent intrusions
    • B) To detect and alert on potential intrusions
    • C) To encrypt network traffic
    • D) To authenticate users

    Answer: To detect and alert on potential intrusions

    Explanation: An IDS monitors network traffic for signs of unauthorized access or malicious activity, alerting administrators.

15. Question 15

    Q15. Which security measure involves using multiple forms of verification to access a system?

    • A) Single-factor authentication
    • B) Multi-factor authentication
    • C) Biometric authentication
    • D) Password authentication

    Answer: Multi-factor authentication

    Explanation: Multi-factor authentication requires multiple forms of verification, such as a password, fingerprint, and smart card, to access a system.

16. Question 16

    Q16. What type of attack involves overwhelming a system with traffic to make it unavailable?

    • A) Denial of Service (DoS) Attack
    • B) Man-in-the-Middle (MitM) Attack
    • C) Phishing Attack
    • D) Brute Force Attack

    Answer: Denial of Service (DoS) Attack

    Explanation: A DoS attack involves flooding a system with traffic, rendering it unavailable to legitimate users.

17. Question 17

    Q17. What is the term for a security threat that is previously unknown?

    • A) Zero-day exploit
    • B) Known vulnerability
    • C) Patch
    • D) Buffer overflow

    Answer: Zero-day exploit

    Explanation: A zero-day exploit is a security threat that is previously unknown, making it difficult to defend against without a patch.

18. Question 18

    Q18. Which of the following is a benefit of using a secure protocol like HTTPS?

    • A) Improved network performance
    • B) Enhanced security for data in transit
    • C) Simplified network configuration
    • D) Increased storage capacity

    Answer: Enhanced security for data in transit

    Explanation: HTTPS provides end-to-end encryption, ensuring the confidentiality and integrity of data transmitted between the client and server.

19. Question 19

    Q19. What is the primary goal of incident response planning?

    • A) To prevent security incidents
    • B) To detect security incidents
    • C) To respond to and contain security incidents
    • D) To improve network performance

    Answer: To respond to and contain security incidents

    Explanation: Incident response planning enables organizations to respond quickly and effectively to security incidents, minimizing damage.

20. Question 20

    Q20. What is the purpose of a VPN?

    • A) To encrypt data in transit
    • B) To filter incoming and outgoing network traffic
    • C) To detect and prevent intrusions
    • D) To authenticate users

    Answer: To encrypt data in transit

    Explanation: VPNs (Virtual Private Networks) encrypt data in transit to secure communications over public networks.