Types of cyber threats in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Phishing Attacks

Which of the following best describes a phishing attack?

A A software that encrypts files and demands payment for decryption.

B An attempt to trick users into revealing personal information by pretending to be a trustworthy entity.

C A program that secretly records keystrokes to steal passwords.

D An attack that floods a network with excessive traffic to cause disruption.

💡 Hint

Think about scams that use fake emails or websites to steal information.

Phishing attacks use fake messages or websites to trick people into giving away sensitive data like passwords or credit card numbers.

📋 Factual

intermediate

Identifying Ransomware Characteristics

What is the primary effect of ransomware on a victim's computer?

A It encrypts files and demands payment to restore access.

B It steals data silently without the user's knowledge.

C It sends spam emails to the victim's contacts.

D It monitors network traffic for sensitive information.

💡 Hint

Consider what happens when you cannot open your own files and see a payment demand.

Ransomware locks or encrypts files and demands money to unlock them, disrupting access to important data.

🔍 Analysis

advanced

Analyzing Denial of Service (DoS) Attacks

Which of the following scenarios best illustrates a Denial of Service (DoS) attack?

A A virus deletes files from a computer without warning.

B An attacker installs spyware to monitor user activity over time.

C A phishing email tricks a user into revealing their password.

D A hacker sends a huge amount of traffic to a website, making it unavailable to users.

💡 Hint

Think about attacks that overwhelm a service to stop it from working.

DoS attacks flood a target with excessive traffic to overload it, causing legitimate users to lose access.

❓ Comparison

advanced

Comparing Malware Types

Which statement correctly distinguishes a virus from a worm?

A A virus requires user action to spread, while a worm spreads automatically without user help.

B A worm attaches itself to files, but a virus operates independently.

C A virus encrypts files for ransom, while a worm steals passwords.

D A worm only affects networks, while a virus only affects individual files.

💡 Hint

Consider how each type spreads from one computer to another.

Viruses need a user to run or open infected files to spread, whereas worms can spread on their own through networks.

❓ Reasoning

expert

Evaluating Social Engineering Risks

A company employee receives a call from someone claiming to be IT support asking for their login password to fix an urgent issue. What type of cyber threat does this represent?

A Phishing attack

B Ransomware attack

C Pretexting attack

D Man-in-the-middle attack

💡 Hint

Think about attacks that use made-up stories to trick people into giving information.

Pretexting involves creating a false scenario to persuade someone to reveal confidential information.

Practice

1. Which of the following is a type of cyber threat that tricks users into revealing personal information by pretending to be a trustworthy entity?

easy

A. Phishing

B. Firewall

C. Encryption

D. Backup

Solution

1. Step 1: Understand the definition of phishing

   Phishing is a cyber threat where attackers send fake messages to trick people into giving sensitive data.

2. Step 2: Compare other options

   Firewall protects networks, encryption secures data, and backup saves copies; none trick users.

3. Final Answer:

   Phishing -> Option A

4. Quick Check:

   Tricking users for info = Phishing [OK]

Hint: Phishing always involves fake messages to steal info [OK]

Common Mistakes:

• Confusing phishing with firewall
• Thinking encryption tricks users
• Mixing backup with threats

2. Which of the following correctly describes a Denial of Service (DoS) attack?

easy

A. Installing software to spy on users

B. Stealing passwords from a user

C. Encrypting files for ransom

D. Overloading a system to make it unavailable

Solution

1. Step 1: Define Denial of Service (DoS) attack

   A DoS attack floods a system with traffic to stop it from working properly.

2. Step 2: Eliminate other options

   Stealing passwords is not DoS, encrypting files is ransomware, spying is spyware.

3. Final Answer:

   Overloading a system to make it unavailable -> Option D

4. Quick Check:

   DoS = system overload to block access [OK]

Hint: DoS means making a service stop by flooding it [OK]

Common Mistakes:

• Mixing DoS with password theft
• Confusing ransomware with DoS
• Thinking spyware is DoS

3. What type of cyber threat is demonstrated by this scenario?

"A user receives an email with a link that, when clicked, installs software that records keystrokes."

medium

A. Ransomware

B. Phishing

C. Spyware

D. DoS attack

Solution

1. Step 1: Identify the threat from the scenario

   The software records keystrokes secretly, which is typical of spyware.

2. Step 2: Differentiate from other threats

   Phishing tricks for info, ransomware locks files, DoS overloads systems; none record keystrokes.

3. Final Answer:

   Spyware -> Option C

4. Quick Check:

   Software spying on keys = Spyware [OK]

Hint: Keylogger software = Spyware spying on user actions [OK]

Common Mistakes:

• Confusing phishing with spyware
• Thinking ransomware records keys
• Mixing DoS with spyware

4. A user reports their computer is slow and strange pop-ups appear. Which of these is the most likely cause?

Options:
A) Firewall misconfiguration
B) Spyware infection
C) Strong password use
D) Regular software updates

medium

A. Firewall misconfiguration

B. Spyware infection

C. Strong password use

D. Regular software updates

Solution

1. Step 1: Analyze symptoms of slowness and pop-ups

   Spyware often causes slow performance and unwanted pop-ups by running secretly.

2. Step 2: Rule out other options

   Firewall issues don't cause pop-ups, strong passwords and updates improve security, not cause problems.

3. Final Answer:

   Spyware infection -> Option B

4. Quick Check:

   Slow PC + pop-ups = Spyware [OK]

Hint: Pop-ups and slow PC usually mean spyware [OK]

Common Mistakes:

• Blaming firewall for pop-ups
• Thinking strong passwords cause issues
• Confusing updates with threats

5. A company wants to protect its data from being locked and held for ransom by attackers. Which cyber threat should they focus on preventing?

hard

A. Ransomware

B. Phishing

C. Spyware

D. DoS attack

Solution

1. Step 1: Understand ransomware's effect

   Ransomware encrypts data and demands payment to unlock it, threatening data access.

2. Step 2: Compare with other threats

   Phishing steals info, spyware spies, DoS disrupts service but doesn't lock data.

3. Final Answer:

   Ransomware -> Option A

4. Quick Check:

   Data locked for ransom = Ransomware [OK]

Hint: Ransomware locks files and demands payment [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking spyware locks data
• Mixing DoS with ransomware