Cybercrime & Security Interview Questions — Flashcards | inGrade

Question 1

What is the primary goal of cybercriminals?

Accepted Answer

Cybercriminals aim to exploit vulnerabilities in systems, networks, or individuals to steal data, disrupt services, or gain unauthorized access for financial, ideological, or political gains.

Question 2

What is a botnet, and how is it used in cybercrime?

Accepted Answer

A botnet is a network of infected devices controlled remotely to perform large-scale attacks like DDoS or spamming without the owners' knowledge.

Question 3

How do cybercriminals use the Dark Web?

Accepted Answer

The Dark Web serves as a marketplace for trading stolen data, malware, exploit kits, and other illegal goods and services.

Question 4

What is a Zero-Day Exploit?

Accepted Answer

A zero-day exploit takes advantage of unknown vulnerabilities in software before a patch is available, giving defenders no time to prepare.

Question 5

What is phishing and what are its common types?

Accepted Answer

Phishing is a social engineering attack where attackers trick individuals into revealing sensitive information. Types include email phishing, spear phishing, whaling, smishing (SMS), and vishing (voice).

Question 6

What is ransomware?

Accepted Answer

Ransomware encrypts a victim's data, rendering it inaccessible until a ransom is paid to the attacker. It is one of the most damaging forms of malware.

Question 7

What is the difference between passive and active cyberattacks?

Accepted Answer

Passive attacks involve eavesdropping or monitoring communications without affecting systems (e.g., sniffing). Active attacks involve altering system resources or operations (e.g., phishing, ransomware).

Question 8

How does salting improve password security?

Accepted Answer

Salting adds random data to passwords before hashing, making rainbow table attacks ineffective because identical passwords produce different hash values.

Question 9

What is a keylogger?

Accepted Answer

A keylogger is a tool that records keystrokes on a device to capture sensitive information like passwords and credit card details. They can be hardware-based or software-based.

Question 10

What are common cybersecurity compliance frameworks?

Accepted Answer

Frameworks include ISO 27001, GDPR, HIPAA, NIST CSF, and PCI DSS. They ensure organizations meet legal, regulatory, and industry standards to secure data and systems.

Start your learning journey today