Cybersecurity & Awareness
Computer Security, also known as Cybersecurity or Information Technology Security (IT Security), refers to the protection of computer systems from:
- Theft or damage to hardware.
- Damage to software.
- Theft or loss of electronic data.
- Unauthorised access to information.
- Disruption or misdirection of the services provided by computer systems.
Computer security protects the following three major areas:
COMPUTER SECURITY
│
┌────────────┼────────────┐
│ │ │
HARDWARE SOFTWARE DATA
│ │ │
Protection Protection Protection
│
▼
SECURE SERVICES
INTERNET SECURITY
Internet Security is a branch of computer security that specifically deals with protecting computers, networks, browsers, websites, and data connected to the Internet.
Its objective is to establish rules and security measures to protect users and systems against attacks over the Internet.
The Internet is an open communication channel and, therefore, information exchanged over it may be exposed to various security risks, including:
- Phishing
- Viruses
- Trojans
- Worms
- Identity theft
- Online fraud
- Unauthorised access
Various methods are used to protect data and communication over the Internet, including:
- Encryption
- Authentication
- Firewalls
- Secure network design
- Antivirus software
INTERNET SECURITY
│
┌─────────┴─────────┐
│ │
PROTECTION PROTECTION
OF DATA OF SYSTEMS
│ │
Encryption Firewall
Authentication Antivirus
Secure Browsing Access Control
CYBER-ATTACK
A cyber-attack is an attempt to exploit computer systems, networks, or digital devices.
A cyber-attack may use malicious code or other techniques to:
- Alter computer code.
- Manipulate data.
- Steal information.
- Gain unauthorised access.
- Disrupt computer services.
Cyber-attacks may result in cybercrimes such as:
- Information theft
- Identity theft
- Financial fraud
- Data destruction
CLASSIFICATION OF CYBER-ATTACKS
Cyber-attacks can broadly be classified into:
- Web-Based Attacks
- System-Based Attacks
CYBER-ATTACKS
│
┌───────────┴───────────┐
│ │
WEB-BASED SYSTEM-BASED
ATTACKS ATTACKS
│ │
Website / Web Computer / Network
Application Compromise
I. WEB-BASED ATTACKS
Web-based attacks are attacks that target websites or web applications.
Some important web-based attacks are described below.
1. INJECTION ATTACKS
An Injection Attack occurs when an attacker inserts or injects malicious data into a web application in order to manipulate the application or obtain unauthorised information.
Examples
- SQL Injection
- Code Injection
- Log Injection
- XML Injection
Attacker
│
▼
Malicious Input ───► Web Application
│
▼
Unauthorised Result
2. DNS SPOOFING
DNS Spoofing is a type of cyber-attack in which false information is introduced into a DNS resolver’s cache.
As a result, the DNS server returns an incorrect IP address.
This may redirect the user from the genuine website to:
- The attacker’s computer.
- A fake website.
- Another unauthorised computer.
DNS spoofing attacks may remain undetected for a long period and can cause serious security problems.
User
│
▼
Requests genuine website
│
▼
False DNS Information
│
▼
Fake IP Address
│
▼
Attacker’s Website
3. SESSION HIJACKING
Session Hijacking is a security attack in which an attacker takes control of a user’s active session over a protected network.
Web applications often use cookies to store information about user sessions.
If an attacker steals a user’s session cookie, the attacker may gain access to the user’s data and account.
User ───────► Web Server
│ │
│ Session │
│ Cookie │
▼ │
Attacker steals ──┘
session information
4. PHISHING
Phishing is an attack designed to steal sensitive information by pretending to be a trustworthy person or organisation.
The information targeted may include:
- Usernames
- Passwords
- Login credentials
- Credit card numbers
- Banking information
Phishing is commonly carried out through:
- Fake emails
- Fake websites
- Instant messages
- Fraudulent links
5. BRUTE-FORCE ATTACK
A Brute-Force Attack uses a trial-and-error method to obtain confidential information.
The attacker generates and tests a large number of possible combinations until the correct information is found.
It may be used to obtain:
- Passwords
- PINs
- Encryption keys
Security analysts may also use controlled brute-force techniques to test the security of an organisation’s systems.
Possible Passwords
│
▼
1234 ──► Incorrect
5678 ──► Incorrect
2468 ──► Incorrect
4321 ──► Correct
6. DENIAL-OF-SERVICE (DoS) ATTACK
A Denial-of-Service (DoS) Attack is designed to make a server, website, or network resource unavailable to legitimate users.
The attacker may:
- Flood the target with excessive traffic.
- Send specially designed information that causes the system to crash.
A traditional DoS attack generally uses a single system and a single Internet connection.
Types of DoS Attacks
A. Volume-Based Attacks
The objective is to consume or saturate the bandwidth of the target.
Measurement: Bits per second (bps)
B. Protocol Attacks
These attacks consume the resources of servers or network devices.
Measurement: Packets
C. Application-Layer Attacks
The objective is to crash or overload a web server.
Measurement: Requests per second
ATTACKER
│
▼
┌─────────┐
│ SERVER │
└─────────┘
▲
Excessive Traffic
│
▼
Service Unavailable
7. DICTIONARY ATTACK
A Dictionary Attack uses a prepared list of commonly used passwords.
The attacker tests the passwords from the list against the target account until the correct password is found.
8. URL INTERPRETATION ATTACK
A URL Interpretation Attack occurs when an attacker changes certain parts of a URL in an attempt to access web pages or resources that they are not authorised to access.
9. FILE INCLUSION ATTACK
A File Inclusion Attack allows an attacker to access unauthorised or sensitive files available on a web server.
In some cases, the attacker may also execute malicious files on the web server by exploiting the file inclusion functionality of a web application.
10. MAN-IN-THE-MIDDLE (MITM) ATTACK
A Man-in-the-Middle Attack occurs when an attacker intercepts communication between a client and a server.
The attacker acts as an intermediary between the two parties and may be able to:
- Read the data.
- Insert new data.
- Modify the data.
- Monitor the communication.
CLIENT
│
▼
┌─────────┐
│ ATTACKER│
│ MITM │
└─────────┘
│
▼
SERVER
Client believes it is communicating
directly with the Server.
II. SYSTEM-BASED ATTACKS
System-based attacks are designed to compromise:
- Individual computers.
- Computer systems.
- Computer networks.
Important system-based threats include:
- Virus
- Computer Worm
- Trojan Horse
- Malware
- Ransomware
- Spyware
- Adware
- Keylogger
- Phishing
- Spoofing
- Pharming
1. COMPUTER VIRUS
A Computer Virus is a type of malicious software that replicates itself by modifying other computer programs and inserting its own code into them.
When the replication process is successful, the affected programs or files are said to be infected.
Common Ways a Virus Spreads
A virus may spread through:
- Email attachments.
- Executable files.
- Infected websites.
- Malicious advertisements.
- Infected USB drives.
- Other removable storage devices.
Effects of a Virus
A virus may:
- Corrupt data.
- Delete files.
- Disrupt computer operations.
- Spread to other computers.
- Damage the hard disk in severe cases.
The main purpose of a computer virus is generally to disrupt the operation of a computer or computer program.
Examples of Computer Viruses and Malware Names
- Ripper
- Stuxnet
- Petya
- WannaCry
- Code Red
- Melissa
- Sasser
- Zeus
- Mydoom
- CryptoLocker
- Flashback
2. COMPUTER WORM
A Computer Worm is a malicious, self-replicating software program that can spread from one computer to another.
Worms may affect the functioning of software and hardware systems.
Before widespread computer networking, worms were commonly spread through infected storage media such as floppy disks.
Today, USB drives and computer networks may also be used as vectors for spreading worms.
Difference Between a Virus and a Worm
| Computer Virus | Computer Worm |
| Usually requires some user action to spread. | Can spread without human intervention once activated. |
| Attaches itself to or modifies other files or programs. | Generally spreads independently from one system to another. |
| Often requires a host file or program. | Can replicate itself across networks. |
VIRUS:
User Action → Infected File → Other Files / Systems
WORM:
Infected System → Automatic Replication → Other Systems
3. TROJAN HORSE
A Trojan Horse, or simply a Trojan, is malware that misleads users about its true purpose.
It often appears to be a legitimate or harmless program or file.
Common Methods of Distribution
- Fake email attachments.
- Fake software.
- Fraudulent advertisements.
- Fake social media links.
- Malicious downloads.
A Trojan may allow an attacker to:
- Steal banking information.
- Steal passwords.
- Access personal information.
- Delete files.
- Infect other devices.
- Install additional malware.
- Create a backdoor for unauthorised access.
Trojans may range from causing minor inconvenience, such as displaying unwanted windows, to causing serious damage such as stealing data or deleting files.
Important Point
Unlike viruses and worms, Trojans generally do not attempt to replicate themselves by inserting their code into other files or spreading independently.
4. MALWARE
Malware is short for Malicious Software.
It refers to any software designed to:
- Disrupt computer operations.
- Gather sensitive information.
- Damage computer systems.
- Gain unauthorised access to private systems.
Malware may appear in the form of:
- Executable code.
- Scripts.
- Active content.
- Other malicious software.
MALWARE
│
┌────────────┼────────────┐
│ │ │
VIRUS WORM TROJAN
│ │ │
RANSOMWARE SPYWARE ADWARE
5. RANSOMWARE
Ransomware is a type of malware that infects and takes control of a computer system.
It is designed to prevent the owner from accessing files or systems and is generally used to extort money from the victim.
System / Files
│
▼
Ransomware
│
▼
Access Blocked
│
▼
Ransom Demanded
6. SPYWARE
Spyware is unwanted software that secretly collects information about a user’s activities and device.
It may collect:
- Internet usage data.
- Personal information.
- Sensitive information.
- Other user activities.
Spyware may be installed without the user’s knowledge through:
- Malicious email attachments.
- Cookies.
- Other software bundled with spyware.
- Malicious downloads.
7. ADWARE
Adware, or Advertising-Supported Software, is software that generates revenue for its developer by displaying advertisements.
Advertisements may appear as:
- Banner advertisements.
- Pop-up advertisements.
- Static boxes.
- Full-screen advertisements.
- Videos.
Revenue may be generated through:
- Displaying advertisements.
- Pay-per-click advertisements.
8. KEYLOGGER
A Keylogger is a type of malware or monitoring software that records the keystrokes made on a computer.
It may capture:
- Usernames.
- Passwords.
- Credit card numbers.
- Emails.
- Personal documents.
User Types:
Username → Password → Card Number
│
▼
KEYLOGGER
│
▼
Keystrokes Recorded
9. PHISHING
Phishing is a fraudulent attempt to obtain sensitive information by pretending to be a trustworthy person or organisation.
It may target:
- Usernames.
- Passwords.
- Credit card details.
- Banking credentials.
Phishing commonly uses:
- Email spoofing.
- Instant messaging.
- Fake websites.
- Fraudulent links.
The fake website may be designed to look almost identical to a legitimate website.
10. SPOOFING
A Spoofing Attack occurs when a person, program, or system falsely represents itself as another legitimate person, device, or system.
The attacker falsifies information in order to gain an unauthorised advantage.
Examples include:
- Email spoofing.
- IP spoofing.
- DNS spoofing.
11. PHARMING
Pharming is a cyber-attack designed to redirect users from a legitimate website to a fake website.
Pharming may be carried out by:
- Modifying the hosts file on a victim’s computer.
- Exploiting vulnerabilities in DNS server software.
DNS servers are responsible for converting Internet names into their corresponding IP addresses.
Users of:
- Online banking websites.
- E-commerce websites.
may be particularly vulnerable to this type of attack.
User enters:
www.genuine-site.com
│
▼
Pharming Attack
│
▼
Fake Website
│
▼
Sensitive Information Stolen
IMPORTANT COMPUTER SECURITY TERMS
1. ANTIVIRUS SOFTWARE
Antivirus Software is a program or set of programs designed to:
- Prevent viruses.
- Search for malicious software.
- Detect threats.
- Remove viruses and other malware.
It may also protect against:
- Worms.
- Trojans.
- Adware.
2. FIREWALL
A Firewall is a network security system that monitors and controls incoming and outgoing network traffic.
It does this according to predetermined security rules.
INTERNET
│
▼
┌─────────┐
│ FIREWALL│
└─────────┘
│ │
Allowed Blocked
Traffic Traffic
│
▼
COMPUTER / NETWORK
3. AUTHORIZATION
Authorization is the process of specifying and controlling the access rights of users to resources.
It determines:
What a user is allowed to access or do.
Example
A user may be authorised to:
- Read a file.
- Edit a file.
- Delete a file.
- Access a particular system.
4. AUTHENTICATION
Authentication is the process of verifying the identity of a person, system, or entity.
It determines:
Who are you?
Authentication may involve:
- Passwords.
- Identity documents.
- Digital certificates.
- Biometric verification.
- Other forms of identification.
Difference Between Authentication and Authorization
USER
│
▼
AUTHENTICATION
“Who are you?”
│
▼
AUTHORIZATION
“What are you allowed to access?”
│
▼
ACCESS GRANTED / DENIED
5. HACKER
A Hacker is a person who uses technical expertise to gain access to computer systems or information.
When a person gains access to another person’s computer illegally or causes damage, the activity is considered unauthorised or malicious hacking.
6. ZOMBIE
A Zombie is a computer connected to the Internet that has been compromised by:
- A hacker.
- A computer virus.
- A Trojan horse.
The compromised computer can then be remotely controlled and used to perform malicious tasks.
7. SECURITY BREACH
A Security Breach occurs when an attacker successfully exploits a vulnerability in a computer system or device and gains unauthorised access to:
- Files.
- Data.
- Systems.
- Networks.
8. BOT AND BOTNET
A Bot is a software application or script that performs tasks automatically or according to commands.
An attacker may use a bot to remotely control a compromised computer.
A collection of infected computers controlled by an attacker is called a Botnet.
The person controlling a botnet is sometimes referred to as a Bot Herder.
ATTACKER
│
▼
BOTNET
┌───────┼───────┐
│ │ │
ZOMBIE ZOMBIE ZOMBIE
COMPUTER COMPUTER COMPUTER
9. SPAM
Spam refers to unwanted or unsolicited messages, particularly emails.
Spam may include:
- Unwanted promotional emails.
- Unsolicited advertisements.
- Fraudulent messages.
- Malicious links.
10. ENCRYPTION
Encryption is the process of converting readable data, known as Plaintext, into an encoded form known as Ciphertext.
The encrypted data can be converted back into its original readable form using a Decryption Key.
PLAINTEXT
│
▼
ENCRYPTION + KEY
│
▼
CIPHERTEXT
│
▼
DECRYPTION + KEY
│
▼
ORIGINAL DATA
Encryption is one of the most important methods of protecting data, particularly data transmitted across networks.
It is widely used for:
- Secure communication.
- Online banking.
- E-commerce.
- Password protection.
- End-to-end data security.
Web-Based Attacks
- Injection
- DNS Spoofing
- Session Hijacking
- Phishing
- Brute Force
- Denial of Service
- Dictionary Attack
- URL Interpretation
- File Inclusion
- Man-in-the-Middle
System-Based Attacks
- Virus
- Worm
- Trojan
- Malware
- Ransomware
- Spyware
- Adware
- Keylogger
- Phishing
- Spoofing
- Pharming
Important Security Concepts
| Term | Meaning |
| Antivirus | Detects and removes malicious software |
| Firewall | Monitors and controls network traffic |
| Authentication | Verifies identity |
| Authorization | Determines access rights |
| Hacker | Person who gains access using technical expertise |
| Zombie | Compromised computer under remote control |
| Breach | Unauthorised access after exploiting a vulnerability |
| Bot | Software that performs tasks automatically |
| Botnet | Collection of compromised computers |
| Spam | Unwanted or unsolicited messages |
| Encryption | Converts readable data into coded form |
1. ‘ILOVEYOU’, one of the world’s most destructive viruses, spread via
(A) USB drives
(B) e-mail attachments
(C) FTP servers
(D) mobile messages
Liaison Officer (LO) 2025
Answer: (B) e-mail attachments
2. Which of the following is malicious software?
A. Malware
B. Hardware
C. Firmware
D. Freeware
Answer: A. Malware
3. Malware stands for:
A. Malfunctioning Hardware
B. Malicious Software
C. Managed Software
D. Manual Software
Answer: B. Malicious Software
4. A computer virus is a program that:
A. Improves computer performance
B. Replicates itself and can infect other files or programs
C. Protects the computer from malware
D. Compresses files
Answer: B. Replicates itself and can infect other files or programs
5. Which malware can replicate itself without requiring a user to attach itself to another program?
A. Worm
B. Adware
C. Spyware
D. Trojan
Answer: A. Worm
6. A Trojan horse is malware that:
A. Always replicates itself
B. Disguises itself as legitimate or useful software
C. Only affects printers
D. Only encrypts files
Answer: B. Disguises itself as legitimate or useful software
7. Ransomware primarily:
A. Displays advertisements
B. Encrypts or locks data and demands payment
C. Improves network speed
D. Creates backups
Answer: B. Encrypts or locks data and demands payment
8. Which of the following is an example of ransomware?
A. Medusa
B. Windows Defender
C. Google Chrome
D. Linux
Answer: A. Medusa
9. Which recent ransomware was the subject of a CISA #StopRansomware advisory in March 2025?
A. Medusa
B. Melissa
C. Michelangelo
D. Mydoom
Answer: A. Medusa
10. Which malware was highlighted by CISA in 2025 for stealing sensitive data?
A. LummaC2
B. ILOVEYOU
C. Morris
D. Brain
Answer: A. LummaC2
11. Adware is software that:
A. Automatically displays advertisements
B. Encrypts files
C. Steals passwords only
D. Repairs hard disks
Answer: A. Automatically displays advertisements
12. Spyware is designed primarily to:
A. Monitor or collect information about users without proper knowledge or consent
B. Increase computer memory
C. Create presentations
D. Compress files
Answer: A. Monitor or collect information about users without proper knowledge or consent
13. A keylogger records:
A. Screen brightness
B. Keystrokes typed by the user
C. Printer speed
D. Internet bandwidth
Answer: B. Keystrokes typed by the user
14. Phishing is an attempt to:
A. Obtain sensitive information by pretending to be a trustworthy entity
B. Increase internet speed
C. Repair damaged hardware
D. Create a computer network
Answer: A. Obtain sensitive information by pretending to be a trustworthy entity
15. Which of the following is commonly targeted in phishing attacks?
A. Passwords
B. Bank details
C. Login credentials
D. All of the above
Answer: D. All of the above
16. A phishing attack carried out through SMS is commonly called:
A. Smishing
B. Vishing
C. Pharming
D. Spoofing
Answer: A. Smishing
17. A phishing attack carried out through voice calls is called:
A. Smishing
B. Vishing
C. Pharming
D. Spamming
Answer: B. Vishing
18. Pharming is an attack that:
A. Redirects users to fraudulent websites
B. Deletes temporary files
C. Blocks advertisements
D. Improves browser performance
Answer: A. Redirects users to fraudulent websites
19. Spoofing involves:
A. Pretending to be another person, device or entity by falsifying information
B. Compressing files
C. Deleting viruses
D. Creating backups
Answer: A. Pretending to be another person, device or entity by falsifying information
20. A brute-force attack attempts to:
A. Guess passwords or credentials through repeated attempts
B. Destroy a computer physically
C. Increase the speed of a network
D. Create a backup
Answer: A. Guess passwords or credentials through repeated attempts
21. A dictionary attack uses:
A. A list of commonly used words and passwords
B. A physical dictionary only
C. Random computer hardware
D. Encrypted backups
Answer: A. A list of commonly used words and passwords
22. A Denial-of-Service attack attempts to:
A. Make a service or network unavailable to legitimate users
B. Improve server performance
C. Encrypt personal files for backup
D. Increase internet bandwidth
Answer: A. Make a service or network unavailable to legitimate users
23. A DDoS attack differs from a DoS attack mainly because:
A. DDoS attacks use multiple compromised systems
B. DDoS attacks do not use the Internet
C. DoS attacks always use malware
D. DDoS attacks are not cyberattacks
Answer: A. DDoS attacks use multiple compromised systems
24. A computer infected and controlled remotely by an attacker is called a:
A. Zombie
B. Firewall
C. Server
D. Proxy
Answer: A. Zombie
25. A network of infected computers controlled by an attacker is called:
A. Botnet
B. Intranet
C. Ethernet
D. Extranet
Answer: A. Botnet
26. A botnet is controlled by:
A. A bot herder or attacker
B. A printer
C. A keyboard
D. A monitor
Answer: A. A bot herder or attacker
27. A Man-in-the-Middle (MITM) attack occurs when:
A. An attacker intercepts communication between two parties
B. A user forgets a password
C. A computer shuts down
D. A printer stops working
Answer: A. An attacker intercepts communication between two parties
28. In a MITM attack, the attacker may:
A. Read data
B. Modify data
C. Insert data
D. All of the above
Answer: D. All of the above
29. SQL Injection is an example of:
A. Injection attack
B. Physical attack
C. Hardware failure
D. Backup technique
Answer: A. Injection attack
30. SQL Injection attempts to manipulate:
A. Database queries
B. Monitor brightness
C. Printer settings
D. Keyboard layout
Answer: A. Database queries
31. DNS spoofing involves:
A. Providing false DNS information to redirect users
B. Increasing DNS speed
C. Deleting a web browser
D. Formatting a hard disk
Answer: A. Providing false DNS information to redirect users
32. Session hijacking generally involves stealing:
A. User session information or cookies
B. Computer hardware
C. Printer ink
D. Monitor pixels
Answer: A. User session information or cookies
33. A firewall is used to:
A. Monitor and control network traffic
B. Create documents
C. Increase RAM
D. Print files
Answer: A. Monitor and control network traffic
34. Antivirus software is designed to:
A. Detect, prevent and remove malware
B. Create websites
C. Increase monitor resolution
D. Replace the operating system
Answer: A. Detect, prevent and remove malware
35. Authentication is the process of:
A. Verifying the identity of a user or entity
B. Giving access rights
C. Encrypting all files
D. Deleting user accounts
Answer: A. Verifying the identity of a user or entity
36. Authorization determines:
A. What an authenticated user is allowed to access
B. Whether a user is genuine
C. The speed of a processor
D. The size of a hard disk
Answer: A. What an authenticated user is allowed to access
37. Which of the following is an example of multi-factor authentication?
A. Password only
B. Username only
C. Password plus OTP
D. PIN only
Answer: C. Password plus OTP
38. Encryption converts:
A. Plaintext into ciphertext
B. Ciphertext into hardware
C. Hardware into software
D. Data into a printer
Answer: A. Plaintext into ciphertext
39. The process of converting ciphertext back into readable information is:
A. Encryption
B. Decryption
C. Authentication
D. Compression
Answer: B. Decryption
40. Spam refers to:
A. Unsolicited or unwanted messages
B. Encrypted data
C. Antivirus software
D. Secure communication
Answer: A. Unsolicited or unwanted messages
41. Which of the following is a good cybersecurity practice?
A. Using the same password everywhere
B. Sharing OTPs with others
C. Using strong and unique passwords
D. Clicking every unknown link
Answer: C. Using strong and unique passwords
42. An OTP should:
A. Be shared with customer-care callers
B. Be kept confidential
C. Be posted online
D. Be sent to unknown persons
Answer: B. Be kept confidential
43. Which of the following is the safest action when receiving a suspicious email attachment?
A. Open it immediately
B. Forward it to everyone
C. Verify the sender before opening it
D. Disable antivirus software
Answer: C. Verify the sender before opening it
44. HTTPS is more secure than HTTP because it generally uses:
A. Encryption
B. No security
C. Only plain text
D. No authentication
Answer: A. Encryption
45. Which of the following should NOT be shared publicly?
A. Password
B. OTP
C. ATM PIN
D. All of the above
Answer: D. All of the above
46. A security breach occurs when:
A. An unauthorised person gains access to a system or data
B. A user saves a file
C. A computer is switched on
D. A printer prints a document
Answer: A. An unauthorised person gains access to a system or data
47. A vulnerability is:
A. A weakness that can be exploited by an attacker
B. A type of printer
C. A backup device
D. A strong password
Answer: A. A weakness that can be exploited by an attacker
48. An exploit is:
A. A method or code used to take advantage of a vulnerability
B. A type of antivirus
C. A storage device
D. A computer monitor
Answer: A. A method or code used to take advantage of a vulnerability
49. Which of the following is a common method of protecting data?
A. Encryption
B. Sharing passwords
C. Using outdated software
D. Disabling security updates
Answer: A. Encryption
50. The best protection against ransomware-related data loss is:
A. Regularly maintained backups
B. Sharing passwords
C. Ignoring software updates
D. Opening unknown attachments
Answer: A. Regularly maintained backups
51. Which of the following is an example of a recent ransomware family highlighted in cybersecurity advisories?
A. Ghost (Cring)
B. MS Word
C. Android
D. Firefox
Answer: A. Ghost (Cring)
52. Interlock is associated with:
A. Ransomware
B. Spreadsheet software
C. Antivirus software
D. Web browsers
Answer: A. Ransomware
53. Which of the following is a modern cybersecurity concern associated with AI?
A. AI-assisted phishing and cyberattacks
B. Faster typing only
C. Increased screen resolution
D. Printer maintenance
Answer: A. AI-assisted phishing and cyberattacks
54. Which of the following is an example of social engineering?
A. Tricking a person into revealing a password
B. Increasing RAM
C. Formatting a hard disk
D. Installing a printer
Answer: A. Tricking a person into revealing a password
55. The main purpose of social engineering is to:
A. Manipulate people into revealing information or performing an action
B. Improve computer hardware
C. Increase internet speed
D. Repair software errors
Answer: A. Manipulate people into revealing information or performing an action
56. Cybersecurity is primarily concerned with protecting:
A. Only computer hardware
B. Computer systems, networks, data and digital information
C. Only printers
D. Only software applications
Answer: B. Computer systems, networks, data and digital information
57. What is Adware?
A. A malware that displays unwanted advertisements
B. A software for creating Ads
C. A type of database software
D. A network protocol
AEO 2025
Answer: A. A malware that displays unwanted advertisements
58. What is firewall’s primary function?
A. Store data
B. Increase processing speed
C. Protect against unauthorized network access
D. Run Applications
AEO 2025
Answer: C. Protect against unauthorized network access
59. Which Internet Protocol is used for secure data transfer?
A. HTTP
B. HTTPS
C. FTP
D. SMTP
AEO 2025
Answer: A. HTTP
Kindly provide me notes