IIIT(RAIPUR) QUIZ
This presentation covers Metasploitable2, FTP security risks, Nmap vs. OpenVAS, SQL injection prevention, forensic evidence handling, AI security challenges, and vulnerabilities in digital systems.
Categories
Slides (69)
1 - Pick Answer What is the primary purpose of a Metasploitable2 virtual machine?
1. C. Monitor network traffic2. A. Store encrypted backups3. B. Practise exploiting known vulnerabilities4. D. Manage user accounts2 - Leaderboard
3 - Pick Answer A university suffers a data breach, unauthorised mark changes, and a ransomware attack. Which CIA Triad principles are affected?
1. B. Integrity and Availability only2. D. Confidentiality, Integrity, and Availability3. A. Confidentiality only4. C. Confidentiality and Integrity only4 - Leaderboard
5 - Pick Answer Two files have identical SHA-256 hashes. What does this most strongly indicate?
1. C. Both files have identical filenames2. A. Both files are encrypted3. B. Both files are malware4. D. Both files likely contain identical data6 - Leaderboard
7 - True Or False Confidentiality protects information from unauthorised access or disclosure.
8 - Leaderboard
9 - Pick Answer Which Wireshark display filter identifies HTTP POST requests?
1. http.request.method == "POST"2. tcp.port == "POST"3. ip.method == "POST"4. http.response == "POST"10 - Leaderboard
11 - Pick Answer Why can standard FTP expose login credentials?
1. A. It disables all network ports2. D. It automatically shares user files3. C. It may transmit credentials in plaintext4. B. It stores passwords in DNS records12 - Leaderboard
13 - Pick Answer Why can standard FTP expose login credentials?
1. A. It disables all network ports2. B. It stores passwords in DNS records3. C. It may transmit credentials in plaintext4. D. It automatically shares user files14 - Leaderboard
15 - Pick Answer What does a filtered port state in Nmap usually mean?
1. A. The service is definitely running2. C. The port is permanently closed3. B. A firewall or filter prevents a clear determination4. D. The host has no operating system16 - Leaderboard
17 - Pick Answer What is the main difference between Nmap and OpenVAS?
1. C. OpenVAS captures packets; Nmap analyses malware2. A. Both are exclusively password-cracking tools3. B. Nmap encrypts traffic; OpenVAS decrypts it4. D. Nmap discovers hosts and services; OpenVAS assesses vulnerabilities18 - Leaderboard
19 - True Or False Nmap discovers hosts and services; OpenVAS assesses vulnerabilities
20 - Leaderboard
21 - Pick Answer What is the main cause of SQL injection?
1. C. Expired digital certificates2. A. Weak Wi-Fi encryption3. D. Excessive network bandwidth4. B. Unsafe handling of untrusted input in SQL queries22 - Leaderboard
23 - Pick Answer How do parameterized queries help prevent SQL injection?
1. A. They separate SQL instructions from supplied data2. B. They automatically encrypt the entire database3. C. They disable all user input4. D. They block every type of cyberattack24 - Leaderboard
25 - Pick Answer A student changes an account ID in a URL and accesses another student's records. Which vulnerability is most likely?
1. A. Cross-site scripting2. B. SQL injection3. C. Broken access control4. D. Denial of service26 - Leaderboard
27 - Pick Answer What makes a captured WPA2 handshake useful to an attacker?
1. C. It automatically exposes the plaintext password2. B. It disables the router remotely3. A. It reveals every stored Wi-Fi file4. D. It can support offline password guessing28 - Leaderboard
29 - True Or False Parameterized queries completely eliminate every type of web application vulnerability.
30 - Leaderboard
31 - Pick Answer What does a CVSS score primarily communicate?
1. A. The number of users on a network2. B. The severity of a vulnerability3. D. The strength of an individual password4. C. The age of a computer32 - Leaderboard
33 - Pick Answer Why might an authenticated vulnerability scan find more issues than an unauthenticated scan?
1. D. It automatically repairs insecure systems2. A. It can inspect additional details using valid credentials3. B. It bypasses every security control4. C. It guarantees that no vulnerabilities are missed34 - Leaderboard
35 - Pick Answer Which tool is commonly used to test password strength through password cracking?
1. A. Wireshark2. B. Autopsy3. C. John the Ripper4. D. Binwalk36 - Leaderboard
37 - Pick Answer What is the purpose of a passphrase protecting a private key?
1. C. To replace the need for encryption2. B. To prevent all network scanning3. D. To protect access to the private key4. A. To make the key publicly accessible38 - Leaderboard
39 - Pick Answer Why might a system use AES and RSA together?
1. D. RSA hides files inside images while AES detects malware2. A. AES scans ports while RSA records logs3. B. AES encrypts data while RSA protects the encryption key4. C. Both algorithms are used only to hash passwords40 - Leaderboard
41 - Pick Answer What is the key difference between encryption and steganography?
1. B. Both only compress files2. A. Encryption hides meaning; steganography hides the existence of a message3. C. Steganography always requires a private key4. D. Encryption is used only for images42 - Leaderboard
43 - Pick Answer Which tool can help identify embedded filesystems and file signatures within a binary image?
1. D. OpenVAS2. B. Wazuh3. A. Nmap4. C. Binwalk44 - Leaderboard
45 - True Or False Encryption and hashing serve exactly the same purpose.
46 - Leaderboard
47 - Pick Answer What is the primary purpose of creating a forensic image of a storage device?
1. A. Increase storage capacity2. C. Improve system performance3. D. Preserve a bit-for-bit copy for examination4. B. Delete unnecessary files48 - Leaderboard
49 - Pick Answer Investigators suspect that a USB drive was connected to a computer. Which evidence may help establish this?
1. B. Device installation records and USB-related registry artefacts2. Recent file access records and application usage logs3. D. File modification timestamps and recycle bin records4. C. User login records and browser history50 - Leaderboard
51 - Pick Answer Why must investigators account for time zones when analysing digital timestamps?
1. B. Incorrect time-zone conversion can change the apparent sequence of events2. A. Different time zones can alter the recorded metadata values3. C. Time-zone differences can prevent forensic tools from reading timestamps4. D. Digital timestamps are always recorded in the computer’s local time52 - True Or False A digital evidence chain of custody remains valid as long as the evidence is securely stored, even if a transfer between investigators was not documented.
53 - Leaderboard
54 - Pick Answer A ransomware attack is actively spreading across a university network. What should the response team do first?
1. C. Shut down all security monitoring to reduce network traffic2. D. Restore backups immediately without investigating the incident3. A. Isolate affected systems while preserving evidence for investigation4. B. Delete suspicious files and restart all affected systems55 - Leaderboard
56 - Pick Answer Which sequence correctly represents a typical Wazuh architecture?
1. A. Dashboard → Agent → Indexer → Server2. C. Agent → Server → Indexer → Dashboard3. B. Indexer → Dashboard → Agent → Server4. D. Server → Dashboard → Agent → Indexer57 - Leaderboard
58 - Pick Answer Wazuh generates a file integrity alert. What should an analyst do next?
1. A. Disable file integrity monitoring to prevent further alerts2. B. Delete the modified file before collecting evidence3. D. Review the alert details and correlate the change with related events4. C. Classify the change as malicious without further checks59 - Leaderboard
60 - Pick Answer Which scenario best represents an AI hallucination?
1. A. An AI declines to answer because the request exceeds its permitted access2. B. An AI generates a convincing explanation containing fabricated facts3. C. An AI retrieves outdated information from an external database4. D. An AI flags a legitimate file as potentially malicious61 - Leaderboard
62 - True Or False RAG can help ground AI responses in retrieved information, but it does not guarantee that every response is correct.
63 - Leaderboard
64 - Pick Answer An AI assistant follows malicious instructions hidden inside a document it is asked to summarise. What type of attack is this?
1. A. Data poisoning2. D. Adversarial training3. B. Model inversion4. C. Indirect prompt injection65 - Leaderboard
66 - Pick Answer Why should an AI assistant have restricted permissions when using external tools?
1. B. To increase the size of its training dataset2. C. To eliminate the need for human oversight3. D. To guarantee that its responses are always accurate4. A. To reduce the impact of unauthorised or unintended actions67 - Leaderboard
68 - Pick Answer During AI security testing, a team makes small, carefully designed changes to input data that cause an AI model to misclassify an otherwise correctly identified object. Which attack technique does this demonstrate?
1. D. AI supply chain monitoring2. A. Data backup manipulation3. B. Adversarial machine learning4. C. Model-to-model communication69 - Leaderboard
Similar templates
Frequently asked questions
How do I access the AhaSlides template library?
You can access templates from the Templates tab in your dashboard after logging in, from the Templates section on our website, or directly in the Editor app.
What are the templates designed for?
Official templates help you prepare interactive presentations for training, meetings, classes, and workshops. Community templates are created by users and shared to inspire others.
How do I host a session using a template?
Select a template, customise it by editing slides, themes, multimedia, and settings, then host it just like any other presentation.
Do I need to pay to use templates?
All templates are free to download and host, but some may exceed the free plan limits (5 quiz questions or 3 polls), which require a paid plan.
If I publish a template to share with my team, will it be visible to all other users?
Yes. Published templates are added to the public library and visible to all users. To keep a template private, share it with team members as collaborators instead.