INT244 Unit 6: Hacking Wi-Fi and Bluetooth, Mobile Device Security, Cloud Technologies and Security - MCQ Practice | B. Tech. CSE

1 $Which IEEE standard governs Wireless LAN (WLAN) technologies?$

A.

IEEE 802.1X

B.

IEEE 802.11

C.

IEEE 802.15

D.

IEEE 802.3

2 $In the context of wireless security, what is an 'Evil Twin' attack?$

A.

A bluetooth attack that crashes the device

B.

Two hackers working simultaneously on the same network

C.

A rogue access point that mimics a legitimate SSID to intercept traffic

D.

A virus that replicates itself on mobile devices

3 $Which wireless encryption protocol is considered the weakest and has been deprecated due to severe vulnerabilities?$

A.

WEP

B.

WPA3

C.

WPA-Enterprise

D.

WPA2

4 $What is the primary difference between Bluejacking and Bluesnarfing?$

A.

Bluejacking involves stealing data, while Bluesnarfing sends unsolicited messages

B.

Bluejacking takes full control of the device, while Bluesnarfing only crashes it

C.

There is no difference; they are synonyms

D.

Bluejacking sends unsolicited messages, while Bluesnarfing involves stealing data

5 $Which Bluetooth attack allows an attacker to take full control of a target device to make calls or send texts?$

A.

Bluestriking

B.

Bluejacking

C.

Bluesnarfing

D.

Bluebugging

6 $What is the primary function of a SIEM (Security Information and Event Management) system?$

A.

To act as a firewall for wireless networks

B.

To encrypt mobile device hard drives

C.

To aggregate and analyze log data from various sources to detect security incidents

D.

To manage cloud subscriptions

7 $In a Security Operations Center (SOC), what is the main responsibility of Tier 1 analysts?$

A.

Managing the budget of the security team

B.

Deep forensic analysis

C.

Threat hunting

D.

Triage and initial classification of security alerts

8 $What core component does the Android operating system use as its foundation?$

A.

Linux Kernel

B.

Windows NT Kernel

C.

Microkernel

D.

Darwin Kernel

9 $iOS utilizes a security mechanism that restricts apps from accessing data or processes of other apps. What is this called?$

A.

Rooting

B.

Containerization

C.

Hypervising

D.

Sandboxing

10 $The process of removing software restrictions imposed by Apple on iOS devices is known as:$

A.

Rooting

B.

Jailbreaking

C.

Sideloading

D.

Unlocking

11 $On Android devices, gaining administrative (superuser) privileges is referred to as:$

A.

Phishing

B.

Bootloading

C.

Jailbreaking

D.

Rooting

12 $Which mobile security model involves separating personal and corporate data on the same device?$

A.

Containerization

B.

CYOD (Choose Your Own Device)

C.

BYOD (Bring Your Own Device)

D.

Direct Access

13 $What is 'Sideloading' in the context of mobile security?$

A.

Turning the phone sideways to bypass facial recognition

B.

Installing applications from sources other than the official app store

C.

Transferring data to the cloud

D.

Charging a device via a malicious USB port

14 $Which solution allows IT administrators to remotely wipe, lock, and configure mobile devices across an enterprise?$

A.

WPA2

B.

MDM (Mobile Device Management)

C.

VPN (Virtual Private Network)

D.

IDS (Intrusion Detection System)

15 $What is the 'Shared Responsibility Model' in cloud computing?$

A.

The customer is responsible for everything

B.

Multiple cloud providers share the cost of security

C.

Security obligations are divided between the cloud provider and the customer

D.

The cloud provider is responsible for everything

16 $Which Cloud Service Model provides the consumer with the capability to provision processing, storage, and networks (e.g., AWS EC2)?$

A.

PaaS (Platform as a Service)

B.

SaaS (Software as a Service)

C.

DaaS (Desktop as a Service)

D.

IaaS (Infrastructure as a Service)

17 $Which Cloud Service Model delivers applications over the internet (e.g., Gmail, Salesforce)?$

A.

IaaS (Infrastructure as a Service)

B.

SaaS (Software as a Service)

C.

PaaS (Platform as a Service)

D.

FaaS (Function as a Service)

18 $Google App Engine and Microsoft Azure App Service are examples of which cloud model?$

A.

Hybrid

B.

SaaS

C.

IaaS

D.

PaaS

19 $Which cloud deployment model is exclusively used by a single organization?$

A.

Hybrid Cloud

B.

Community Cloud

C.

Public Cloud

D.

Private Cloud

20 $What is a major security risk associated with Insecure APIs in cloud computing?$

A.

They consume too much electricity

B.

They prevent the use of firewalls

C.

They can expose sensitive data or allow unauthorized control if not properly authenticated

D.

They slow down the internet connection

21 $In the context of Wireless security, what is 'War Driving'?$

A.

Physically driving around to locate and map open or vulnerable wireless networks

B.

Overclocking a CPU to increase speed

C.

Using a drone to jam signals

D.

Driving a tank into a data center

22 $Which of the following is a countermeasure against Bluetooth attacks?$

A.

Setting the device to 'Non-discoverable' or 'Hidden' mode when not pairing

B.

Keeping Bluetooth in 'Discoverable' mode at all times

C.

Broadcasting the device name publicly

D.

Using a PIN of '0000'

23 $What is a 'Rogue Access Point'?$

A.

A secure router provided by the ISP

B.

An unauthorized wireless access point installed on a secure network

C.

A firewall rule that blocks traffic

D.

A software update for Wi-Fi drivers

24 $What is the purpose of SSID broadcasting?$

A.

To encrypt the data traffic

B.

To announce the presence and name of the wireless network to nearby devices

C.

To block unauthorized users

D.

To increase the speed of the internet

25 $Which mobile threat involves an attacker intercepting communication between the user and a server?$

A.

Screen locking

B.

Geofencing

C.

Man-in-the-Middle (MitM) attack

D.

Data resting

26 $What is 'Shadow IT' in the context of Cloud Security?$

A.

Dark mode interfaces in cloud apps

B.

Backup data stored in a dark room

C.

The use of IT systems and cloud services without explicit approval from the IT department

D.

A hacking group targeting clouds

27 $Which cloud attack involves an attacker exploiting the shared resources in a virtualized environment to access data from another tenant?$

A.

Guest-Escape / Hypervisor Jumping

B.

DDoS

C.

Phishing

D.

SQL Injection

28 $What is a CASB (Cloud Access Security Broker)?$

A.

A physical lock for server rooms

B.

A type of cloud malware

C.

Software that sits between cloud service users and cloud applications to enforce security policies

D.

A government agency regulating clouds

29 $Why is 'Multitenancy' a security concern in the cloud?$

A.

It makes the internet slower

B.

Multiple customers share the same physical resources, creating a risk of data leakage if isolation fails

C.

It requires more electricity

D.

It increases the cost of storage

30 $Which of the following is a critical step when testing security in the cloud (Penetration Testing)?$

A.

Testing only on weekends

B.

Ignoring the Service Level Agreement

C.

Launching an attack without warning

D.

Obtaining permission from the Cloud Service Provider (CSP) before testing

31 $What does WPA3 use to replace the WPA2 Pre-Shared Key exchange, making it resistant to offline dictionary attacks?$

A.

Plaintext

B.

TKIP

C.

WEP

D.

Simultaneous Authentication of Equals (SAE)

32 $What is a 'Botnet' often used for in cloud attacks?$

A.

Perform Distributed Denial of Service (DDoS) attacks

B.

Indexing web pages

C.

Mining cryptocurrency legally

D.

Backing up data

33 $What allows Android users to verify what capabilities an application is requesting (e.g., access to camera, contacts)?$

A.

The instruction manual

B.

Root Access

C.

App Permissions

D.

Kernel Panic

34 $Which wireless security protocol uses TKIP (Temporal Key Integrity Protocol)?$

A.

WPA2

B.

WEP

C.

WPA

D.

WPA3

35 $What is 'Geo-tagging' and why is it a mobile security risk?$

A.

Tagging friends in photos; it is a privacy violation

B.

Using GPS for maps; it uses data

C.

Playing games based on location; it wastes battery

D.

Embedding location data in photos/posts; it reveals the user's physical location to stalkers

36 $In the context of SOC, what does 'Correlation' mean?$

A.

Connecting the power cables

B.

Communicating with the HR department

C.

Linking different events from log files to identify a complex attack pattern

D.

Backing up files to two locations

37 $Which of the following is a physical security threat to mobile devices?$

A.

Phishing

B.

Malware

C.

Theft or Loss

D.

SQL Injection

38 $What is 'Cryptojacking' in a cloud environment?$

A.

Encrypting data for ransom

B.

Hacking into a bank

C.

Stealing credit card numbers

D.

Unauthorized use of cloud computing resources to mine cryptocurrency

39 $The NIST definition of Cloud Computing includes 'Rapid Elasticity'. What does this mean?$

A.

Capabilities can be elastically provisioned and released to scale rapidly outward and inward

B.

The internet speed is constant

C.

The cloud is made of rubber

D.

Data is stored on flexible disks

40 $Which attack vector involves a malicious insider abusing their authorized access to cloud data?$

A.

Insider Threat

B.

DDoS

C.

War Driving

D.

Outsider Threat

41 $What is the primary function of a Virtual Private Network (VPN) on a mobile device connecting to public Wi-Fi?$

A.

To bypass battery limits

B.

To boost signal strength

C.

To create an encrypted tunnel for data, protecting it from interception

D.

To download apps faster

42 $Which Bluetooth class has the longest range (approximately 100 meters)?$

A.

Class 1

B.

Class 2

C.

Class 3

D.

Class 4

43 $What is 'MAM' in mobile security?$

A.

Main Access Module

B.

Mobile Application Management

C.

Mobile Access Monitoring

D.

Man-Against-Machine

44 $Which file format is used for installing software on the Android operating system?$

A.

.APK

B.

.DMG

C.

.EXE

D.

.IPA

45 $In cloud security, what does 'Data Sovereignty' refer to?$

A.

The king of data

B.

The speed of data transfer

C.

The encryption level of data

D.

The concept that data is subject to the laws of the country in which it is physically stored

46 $What is a 'Hybrid Cloud'?$

A.

A cloud maintained by a single person

B.

A composition of two or more clouds (private, community, or public) that remain unique entities but are bound together

C.

A cloud that only stores images

D.

A cloud that runs on gas and electricity

47 $Which wireless attack involves capturing handshake packets and attempting to crack the password offline?$

A.

Signal Jamming

B.

WPA Cracking / Dictionary Attack

C.

MAC Filtering

D.

Beacon Flooding

48 $What is 'MAC Address Filtering'?$

A.

Cleaning the router

B.

Allowing or denying network access based on the hardware address of the network card

C.

Blocking websites

D.

Filtering out Mac computers

49 $Why is 'Remote Wipe' a critical feature for enterprise mobile security?$

A.

To delete apps that are not used

B.

To erase sensitive corporate data if a device is lost or stolen

C.

To clean the screen remotely

D.

To update the OS remotely

50 $Which of the following is a symptom of a mobile device being infected with malware?$

A.

Screen becoming brighter

B.

Unexpected data usage spikes and rapid battery drain

C.

Extended battery life

D.

Faster performance

Unit 6: Hacking Wi-Fi and Bluetooth, Mobile Device Security, Cloud Technologies and Security - Practice Quiz

Did this save you a night before the exam?