Quick Revision

GK One-Line Question & Answer

15541+ short questions with short answers, covering every category and sub-category on the site — no long articles to scroll through. Good for a fast recap before an exam, or a few minutes of daily practice.

Looking for exam process/strategy questions instead? Try the Exam Preparation FAQ →

Computer Networks → Introduction to Computer Networks 40

Keylogger records
Keystrokes to steal credentials
click to copy
APT is characterized by
Long-term targeted sophisticated persistent attack
click to copy
Lateral movement means
Moving from compromised to other systems in network
click to copy
Exfiltration means
Unauthorized data transfer outside organization
click to copy
C2 infrastructure is used for
Attacker communicating with and controlling compromised systems
click to copy
Path traversal uses
Directory traversal using ../ to access files outside webroot
click to copy
SSRF allows
Server to make requests to internal/external resources
click to copy
XXE exploits
XML parser to read files or perform SSRF
click to copy
Deserialization attack exploits
Insecure object deserialization for code execution
click to copy
Logic bomb executes when
Specific trigger condition is met
click to copy
Watering hole attack compromises
Website frequently visited by target
click to copy
Supply chain attack targets
Software vendor to reach customers downstream
click to copy
Pretexting creates
Fabricated scenario to manipulate target
click to copy
Vishing uses
Voice phone calls for social engineering
click to copy
Smishing uses
SMS text messages for phishing
click to copy
OWASP Top 10 first item is
Broken Access Control
click to copy
Injection attack inserts malicious
Code or queries via untrusted input
click to copy
Broken authentication leads to
Account takeover session hijacking
click to copy
Sensitive data exposure results from
Inadequate protection of sensitive data
click to copy
Security misconfiguration includes
Insecure defaults and unnecessary features left enabled
click to copy
Using outdated components means
Running libraries with known vulnerabilities
click to copy
Insecure direct object reference allows
User to access objects without proper authorization
click to copy
Cross-site scripting injects
Malicious client-side scripts into pages viewed by users
click to copy
CSRF forces authenticated user to
Make unwanted requests without their knowledge
click to copy
Buffer overflow writes
Beyond allocated memory boundary
click to copy
ISO 27001 is for
Information Security Management System ISMS
click to copy
NIST CSF stands for
Cybersecurity Framework by NIST
click to copy
NIST CSF five functions are
Identify Protect Detect Respond Recover
click to copy
SOC 2 Type 2 assesses
Controls over a period of time
click to copy
GDPR right to erasure means
Individual can request deletion of personal data
click to copy
PCI DSS applies to
Organizations handling payment card data
click to copy
Data classification levels typically include
Public Internal Confidential and Restricted
click to copy
DLP monitors for
Unauthorized sensitive data transfer
click to copy
Vulnerability assessment differs from pen test because
VA identifies weaknesses pen test exploits them
click to copy
Bug bounty program rewards
Security researchers for discovering and reporting vulnerabilities
click to copy
ELB in AWS stands for
Elastic Load Balancer
click to copy
AWS S3 is
Simple Storage Service
click to copy
AWS EC2 is
External Cloud Connection
click to copy
AWS Lambda is
Serverless function execution
click to copy
IaaS provides
Infrastructure as virtual machines and networking
click to copy