Google cybersecurity practice 2

What involves changing the source IP in the packet header to impersonate a trusted machine?. ARP Poisoning. MAC Spoofing. IP Spoofing. Phishing.

In which attack does the attacker place themselves between the client and the server?. Smurf Attack. Replay Attack. On-Path Attack (Man-in-the-Middle). Denial of Service.

Which attack intercepts a valid packet and resends it later to impersonate a session?. Replay Attack. Smurf Attack. SYN Flood. XSS.

Which attack combines DDoS and Spoofing by sending a Ping to a broadcast address using a victim's spoofed IP?. SYN Flood. Ping of Death. Smurf Attack. On-Path Attack.

What process does a VPN use to hide real source addresses by wrapping data in an outer packet?. Hashing. Encapsulation. Spoofing. Sniffing.

Which type of firewall filters based solely on fixed port and IP rules without tracking state?. Stateful. Stateless. Next Generation Firewall. Proxy.

Which type of firewall analyzes traffic and tracks the actual state of the connection?. Stateless. Stateful. Hub. DNS.

Where are web servers, DNS, and Proxies typically placed to expose them safely to the Internet?. Internal Network. DMZ. Core Switch. Deep Web.

What is the purpose of a Forward Proxy?. Hides internal servers from external traffic. Regulates and hides employees going out to the Internet. Acts as a primary Domain Controller. Sniffs wireless traffic.

What is the purpose of a Reverse Proxy?. Hides internal servers by receiving external traffic for them. Regulates employees accessing the Internet. Filters outbound traffic only. Acts as an endpoint antivirus.

Why is the BIOS/UEFI considered a prime target for persistent malware (rootkits)?. It has no encryption. It is a blind spot for standard antivirus software. It uses default passwords. It connects directly to the Internet.

Why do security analysts monitor OS resource management (CPU/RAM)?. To ensure the database is fast. Because anomalous resource spikes can indicate malware execution like cryptominers. To optimize monitor resolution. To update the kernel.

What translates user inputs into instructions for the kernel in Linux?. Hardware. Applications. Shell (Bash). GUI.

What is the core of the Linux OS that manages memory, processes, and talks directly to hardware?. Shell. User. Kernel. Kali.

Which Linux distribution is highlighted for penetration testing and digital forensics?. Ubuntu. Fedora. Kali Linux. CentOS.

Which command outputs the present working directory?. cd. pwd. ls. mkdir.

Which command shows hidden files starting with a dot in Linux?. ls -l. ls -a. grep. cat.

Which commands are used to create and delete files, respectively?. mkdir / rmdir. cat / head. touch / rm. cp / mv.

Which command outputs only the first 10 lines of a file?. cat. head. nano. grep.

Which command searches for a specific string inside a file?. pwd. apropos. grep. chmod.

In the Linux permission string '-rwxrw-r--', what does the first character '-' indicate?. A directory. A file. A superuser. An executable.

Why is it a best practice to never log in directly as the Root User?. It limits CPU resources. It causes a loss of accountability (no audit trail). The root user cannot use sudo. It corrupts the kernel.

Which command modifies file permissions in Linux?. chown. sudo. chmod. useradd.

What does a Primary Key do in a database?. Links to another table. Uniquely identifies every row in a table without nulls or duplicates. Allows duplicate records for redundancy. Hashes the data.

What type of SQL key links to a primary key in another table and can contain duplicates?. Secondary Key. Super Key. Foreign Key. Index Key.

Which SQL keyword filters records within a specific range?. LIKE. BETWEEN. INNER JOIN. NOT.

Which SQL keyword is used for pattern matching with the % wildcard?. WHERE. LIKE. OR. JOIN.

Which SQL join returns ONLY the rows where there is a match in both tables?. LEFT JOIN. RIGHT JOIN. FULL OUTER JOIN. INNER JOIN.

Which SQL join returns ALL rows from the left table, and matching rows from the right?. LEFT JOIN. RIGHT JOIN. INNER JOIN. FULL OUTER JOIN.

Which state describes data actively moving across a network?. Data in Use. Data in Transit. Data at Rest. Data Archived.

Which encryption type uses a single shared key to encrypt and decrypt?. Asymmetric Encryption. Symmetric Encryption. Public Key Infrastructure. Hashing.

What uses a key pair (Public Key to encrypt, Private Key to decrypt)?. Symmetric Encryption. Asymmetric Encryption. Hashing. Steganography.

What entity verifies identities and issues digital certificates?. Security Analyst. Domain Name System. Certificate Authority (CA). Internet Service Provider.

What is the primary purpose of Hashing?. Reversible encryption. Ensuring Integrity (Non-repudiation). Speeding up network traffic. Hiding IP addresses.

Which open-standard authorization protocol uses API Tokens to grant apps access without exposing passwords?. SSO. OAuth. PKI. CVSS.

What is a Zero-Day Exploit?. A vulnerability patched on day zero. An attack exploiting a previously unknown vulnerability. An outdated virus. An attack targeting backups.

On the CVSS score, what range is considered critical and requires immediate remediation?. 1 to 3. 4 to 6. 7 to 8. Above 9.0.

Which malware requires user interaction to replicate and spread?. Worm. Trojan. Virus. Spyware.

Which malware spreads autonomously across networks without user interaction?. Worm. Virus. Trojan. Phishing.

What is an Incident in cybersecurity?. Any observable occurrence on a network. A user resetting a forgotten password. An event that violates security policies or imminently jeopardizes assets. A routine vulnerability scan.

Which network packet sniffer is command-line based?. Wireshark. Splunk. Chronicle. TCPdump.

Why must a Chain of Custody include hashes of the evidence?. To compress the file size. To prove the evidence hasn't been tampered with. To encrypt it against unauthorized viewing. To route it through the firewall.

What does the STAR Method stand for in interview strategy?. Standard, Technical, Action, Review. Situation, Task, Action, Result. System, Triage, Analyze, Recover. Secure, Test, Assess, Remediate.

Which of the following are types of Packet Sniffing?. Passive. Aggressive. Active. Reactive.

What capabilities do Next Generation Firewalls (NGFW) possess?. Deep Packet Inspection (DPI). Act as intrusion prevention systems (IPS). Connect to threat intelligence clouds. Replace routers completely.

Which actions are part of OS Hardening?. Immediate application of patches. Removal of old software. Use of baseline configurations. Using a hub instead of a switch.

Which actions are considered Network Hardening?. Closing unused ports. Migrating to WPA2 or WPA3. Implementing SIEM log analysis. Disabling firewalls for speed.

Which tools are pre-installed in Kali Linux according to the text?. Metasploit. Burp Suite. John the Ripper. Microsoft Word.

Which are forms of Social Engineering mentioned in the text?. Phishing. Smishing. Vishing. Hashing.

Which errors are encountered when debugging Python code?. Syntax Errors. Exceptions (Runtime Errors). Logic Errors. Hardware Errors.