INT244 Unit 6: Hacking Wi-Fi and Bluetooth, Mobile Device Security, Cloud Technologies and Security - MCQ Practice | B. Tech. CSE

1 $Which IEEE standard governs Wireless LAN (WLAN) technologies?$

A.

IEEE 802.1X

B.

IEEE 802.11

C.

IEEE 802.3

D.

IEEE 802.15

2 $In the context of wireless security, what is an 'Evil Twin' attack?$

A.

A bluetooth attack that crashes the device

B.

A rogue access point that mimics a legitimate SSID to intercept traffic

C.

A virus that replicates itself on mobile devices

D.

Two hackers working simultaneously on the same network

3 $Which wireless encryption protocol is considered the weakest and has been deprecated due to severe vulnerabilities?$

A.

WEP

B.

WPA-Enterprise

C.

WPA2

D.

WPA3

4 $What is the primary difference between Bluejacking and Bluesnarfing?$

A.

Bluejacking involves stealing data, while Bluesnarfing sends unsolicited messages

B.

Bluejacking sends unsolicited messages, while Bluesnarfing involves stealing data

C.

There is no difference; they are synonyms

D.

Bluejacking takes full control of the device, while Bluesnarfing only crashes it

5 $Which Bluetooth attack allows an attacker to take full control of a target device to make calls or send texts?$

A.

Bluestriking

B.

Bluesnarfing

C.

Bluebugging

D.

Bluejacking

6 $What is the primary function of a SIEM (Security Information and Event Management) system?$

A.

To manage cloud subscriptions

B.

To encrypt mobile device hard drives

C.

To act as a firewall for wireless networks

D.

To aggregate and analyze log data from various sources to detect security incidents

7 $In a Security Operations Center (SOC), what is the main responsibility of Tier 1 analysts?$

A.

Deep forensic analysis

B.

Managing the budget of the security team

C.

Threat hunting

D.

Triage and initial classification of security alerts

8 $What core component does the Android operating system use as its foundation?$

A.

Windows NT Kernel

B.

Linux Kernel

C.

Microkernel

D.

Darwin Kernel

9 $iOS utilizes a security mechanism that restricts apps from accessing data or processes of other apps. What is this called?$

A.

Containerization

B.

Hypervising

C.

Rooting

D.

Sandboxing

10 $The process of removing software restrictions imposed by Apple on iOS devices is known as:$

A.

Jailbreaking

B.

Unlocking

C.

Rooting

D.

Sideloading

11 $On Android devices, gaining administrative (superuser) privileges is referred to as:$

A.

Rooting

B.

Jailbreaking

C.

Phishing

D.

Bootloading

12 $Which mobile security model involves separating personal and corporate data on the same device?$

A.

BYOD (Bring Your Own Device)

B.

Containerization

C.

CYOD (Choose Your Own Device)

D.

Direct Access

13 $What is 'Sideloading' in the context of mobile security?$

A.

Installing applications from sources other than the official app store

B.

Turning the phone sideways to bypass facial recognition

C.

Charging a device via a malicious USB port

D.

Transferring data to the cloud

14 $Which solution allows IT administrators to remotely wipe, lock, and configure mobile devices across an enterprise?$

A.

VPN (Virtual Private Network)

B.

IDS (Intrusion Detection System)

C.

MDM (Mobile Device Management)

D.

WPA2

15 $What is the 'Shared Responsibility Model' in cloud computing?$

A.

Multiple cloud providers share the cost of security

B.

Security obligations are divided between the cloud provider and the customer

C.

The customer is responsible for everything

D.

The cloud provider is responsible for everything

16 $Which Cloud Service Model provides the consumer with the capability to provision processing, storage, and networks (e.g., AWS EC2)?$

A.

PaaS (Platform as a Service)

B.

SaaS (Software as a Service)

C.

IaaS (Infrastructure as a Service)

D.

DaaS (Desktop as a Service)

17 $Which Cloud Service Model delivers applications over the internet (e.g., Gmail, Salesforce)?$

A.

FaaS (Function as a Service)

B.

IaaS (Infrastructure as a Service)

C.

SaaS (Software as a Service)

D.

PaaS (Platform as a Service)

18 $Google App Engine and Microsoft Azure App Service are examples of which cloud model?$

A.

PaaS

B.

Hybrid

C.

SaaS

D.

IaaS

19 $Which cloud deployment model is exclusively used by a single organization?$

A.

Hybrid Cloud

B.

Private Cloud

C.

Public Cloud

D.

Community Cloud

20 $What is a major security risk associated with Insecure APIs in cloud computing?$

A.

They can expose sensitive data or allow unauthorized control if not properly authenticated

B.

They consume too much electricity

C.

They prevent the use of firewalls

D.

They slow down the internet connection

21 $In the context of Wireless security, what is 'War Driving'?$

A.

Overclocking a CPU to increase speed

B.

Driving a tank into a data center

C.

Using a drone to jam signals

D.

Physically driving around to locate and map open or vulnerable wireless networks

22 $Which of the following is a countermeasure against Bluetooth attacks?$

A.

Using a PIN of '0000'

B.

Setting the device to 'Non-discoverable' or 'Hidden' mode when not pairing

C.

Broadcasting the device name publicly

D.

Keeping Bluetooth in 'Discoverable' mode at all times

23 $What is a 'Rogue Access Point'?$

A.

A software update for Wi-Fi drivers

B.

A firewall rule that blocks traffic

C.

A secure router provided by the ISP

D.

An unauthorized wireless access point installed on a secure network

24 $What is the purpose of SSID broadcasting?$

A.

To increase the speed of the internet

B.

To announce the presence and name of the wireless network to nearby devices

C.

To encrypt the data traffic

D.

To block unauthorized users

25 $Which mobile threat involves an attacker intercepting communication between the user and a server?$

A.

Man-in-the-Middle (MitM) attack

B.

Screen locking

C.

Geofencing

D.

Data resting

26 $What is 'Shadow IT' in the context of Cloud Security?$

A.

Backup data stored in a dark room

B.

The use of IT systems and cloud services without explicit approval from the IT department

C.

Dark mode interfaces in cloud apps

D.

A hacking group targeting clouds

27 $Which cloud attack involves an attacker exploiting the shared resources in a virtualized environment to access data from another tenant?$

A.

Guest-Escape / Hypervisor Jumping

B.

DDoS

C.

Phishing

D.

SQL Injection

28 $What is a CASB (Cloud Access Security Broker)?$

A.

A type of cloud malware

B.

Software that sits between cloud service users and cloud applications to enforce security policies

C.

A physical lock for server rooms

D.

A government agency regulating clouds

29 $Why is 'Multitenancy' a security concern in the cloud?$

A.

It increases the cost of storage

B.

It makes the internet slower

C.

Multiple customers share the same physical resources, creating a risk of data leakage if isolation fails

D.

It requires more electricity

30 $Which of the following is a critical step when testing security in the cloud (Penetration Testing)?$

A.

Testing only on weekends

B.

Obtaining permission from the Cloud Service Provider (CSP) before testing

C.

Launching an attack without warning

D.

Ignoring the Service Level Agreement

31 $What does WPA3 use to replace the WPA2 Pre-Shared Key exchange, making it resistant to offline dictionary attacks?$

A.

Plaintext

B.

Simultaneous Authentication of Equals (SAE)

C.

WEP

D.

TKIP

32 $What is a 'Botnet' often used for in cloud attacks?$

A.

Backing up data

B.

Mining cryptocurrency legally

C.

Indexing web pages

D.

Perform Distributed Denial of Service (DDoS) attacks

33 $What allows Android users to verify what capabilities an application is requesting (e.g., access to camera, contacts)?$

A.

App Permissions

B.

Kernel Panic

C.

The instruction manual

D.

Root Access

34 $Which wireless security protocol uses TKIP (Temporal Key Integrity Protocol)?$

A.

WEP

B.

WPA2

C.

WPA

D.

WPA3

35 $What is 'Geo-tagging' and why is it a mobile security risk?$

A.

Embedding location data in photos/posts; it reveals the user's physical location to stalkers

B.

Using GPS for maps; it uses data

C.

Playing games based on location; it wastes battery

D.

Tagging friends in photos; it is a privacy violation

36 $In the context of SOC, what does 'Correlation' mean?$

A.

Linking different events from log files to identify a complex attack pattern

B.

Communicating with the HR department

C.

Connecting the power cables

D.

Backing up files to two locations

37 $Which of the following is a physical security threat to mobile devices?$

A.

SQL Injection

B.

Phishing

C.

Theft or Loss

D.

Malware

38 $What is 'Cryptojacking' in a cloud environment?$

A.

Unauthorized use of cloud computing resources to mine cryptocurrency

B.

Stealing credit card numbers

C.

Encrypting data for ransom

D.

Hacking into a bank

39 $The NIST definition of Cloud Computing includes 'Rapid Elasticity'. What does this mean?$

A.

Data is stored on flexible disks

B.

The cloud is made of rubber

C.

Capabilities can be elastically provisioned and released to scale rapidly outward and inward

D.

The internet speed is constant

40 $Which attack vector involves a malicious insider abusing their authorized access to cloud data?$

A.

Insider Threat

B.

DDoS

C.

War Driving

D.

Outsider Threat

41 $What is the primary function of a Virtual Private Network (VPN) on a mobile device connecting to public Wi-Fi?$

A.

To boost signal strength

B.

To download apps faster

C.

To bypass battery limits

D.

To create an encrypted tunnel for data, protecting it from interception

42 $Which Bluetooth class has the longest range (approximately 100 meters)?$

A.

Class 3

B.

Class 1

C.

Class 2

D.

Class 4

43 $What is 'MAM' in mobile security?$

A.

Mobile Application Management

B.

Main Access Module

C.

Man-Against-Machine

D.

Mobile Access Monitoring

44 $Which file format is used for installing software on the Android operating system?$

A.

.DMG

B.

.APK

C.

.EXE

D.

.IPA

45 $In cloud security, what does 'Data Sovereignty' refer to?$

A.

The concept that data is subject to the laws of the country in which it is physically stored

B.

The speed of data transfer

C.

The king of data

D.

The encryption level of data

46 $What is a 'Hybrid Cloud'?$

A.

A composition of two or more clouds (private, community, or public) that remain unique entities but are bound together

B.

A cloud maintained by a single person

C.

A cloud that only stores images

D.

A cloud that runs on gas and electricity

47 $Which wireless attack involves capturing handshake packets and attempting to crack the password offline?$

A.

Beacon Flooding

B.

Signal Jamming

C.

MAC Filtering

D.

WPA Cracking / Dictionary Attack

48 $What is 'MAC Address Filtering'?$

A.

Allowing or denying network access based on the hardware address of the network card

B.

Filtering out Mac computers

C.

Blocking websites

D.

Cleaning the router

49 $Why is 'Remote Wipe' a critical feature for enterprise mobile security?$

A.

To update the OS remotely

B.

To clean the screen remotely

C.

To delete apps that are not used

D.

To erase sensitive corporate data if a device is lost or stolen

50 $Which of the following is a symptom of a mobile device being infected with malware?$

A.

Extended battery life

B.

Unexpected data usage spikes and rapid battery drain

C.

Faster performance

D.

Screen becoming brighter

Unit 6: Hacking Wi-Fi and Bluetooth, Mobile Device Security, Cloud Technologies and Security - Practice Quiz

Did this save you a night before the exam?