1Which of the following is a primary goal of information security?
- A) To ensure data integrity
- B) To improve system performance
- C) To enhance user experience
- D) To reduce operational costs
2Which of the following is an example of multifactor authentication?
- A) Username and password
- B) Password and security question
- C) Fingerprint and password
- D) Email and SMS verification
3What does the principle of least privilege entail?
- A) Users should have all permissions necessary to perform their jobs.
- B) Users should have minimal access rights needed to perform their tasks.
- C) Users should be granted access to all resources by default.
- D) Users should share their passwords with colleagues.
4What is the main purpose of a firewall?
- A) To provide data encryption
- B) To prevent unauthorized access to or from a private network
- C) To monitor network traffic
- D) To perform system backups
5Which type of malware is designed to replicate itself and spread to other computers?
- A) Trojan
- B) Worm
- C) Virus
- D) Spyware
6What does the term "phishing" refer to?
- A) A method to capture network traffic
- B) A type of malware that encrypts files
- C) A social engineering attack to steal user credentials
- D) A network scanning technique
7In a risk management process, which of the following is the first step?
- A) Risk assessment
- B) Risk mitigation
- C) Risk acceptance
- D) Risk identification
8Which of the following protocols is used to securely transmit data over a network?
- A) HTTP
- B) FTP
- C) HTTPS
- D) SMTP
9What is the function of an intrusion detection system (IDS)?
- A) To prevent unauthorized access to a network
- B) To monitor and analyze network traffic for suspicious activity
- C) To provide data encryption
- D) To authenticate users
10Which of the following is a common method of data exfiltration?
- A) Data encryption
- B) Data masking
- C) USB transfer
- D) Data backup
11What is a DDoS attack?
- A) A method to steal data
- B) An attack that depletes system resources by overwhelming a target with traffic
- C) A technique to bypass security controls
- D) A method of social engineering
12Which of the following best describes a VPN?
- A) A public network
- B) A secure tunnel for transmitting data over the Internet
- C) An unencrypted connection
- D) A type of malware
13What does the acronym "SIEM" stand for?
- A) Security Information and Event Management
- B) Secure Identification and Event Monitoring
- C) System Information and Event Management
- D) Security Incident and Event Management
14Which of the following is a benefit of using encryption?
- A) Increases data access speed
- B) Ensures data integrity
- C) Protects data confidentiality
- D) Eliminates all security risks
15What is the primary function of a digital certificate?
- A) To encrypt data
- B) To provide a secure connection
- C) To verify the identity of a person or organization
- D) To manage user access
16Which of the following is a characteristic of a Trojan horse?
- A) It self-replicates
- B) It disguises itself as legitimate software
- C) It requires user interaction to spread
- D) It encrypts files
17What is a common method of preventing unauthorized access to sensitive data?
- A) Data compression
- B) Data encryption
- C) Data cleansing
- D) Data migration
18Which of the following describes a zero-day vulnerability?
- A) A vulnerability that has been publicly disclosed
- B) A vulnerability that has an available patch
- C) A vulnerability that is unknown to the vendor
- D) A vulnerability that is under investigation
19What is the role of a security policy?
- A) To define how security measures are implemented
- B) To outline the goals of the organization
- C) To establish a framework for compliance
- D) To specify user responsibilities
20 Which of the following is a type of physical security control?
- A) Firewall
- B) Security camera
- C) Antivirus software
- D) Encryption
21Which of the following best describes a man-in-the-middle attack?
- A) An attacker intercepts and alters communication between two parties.
- B) An attacker sends a flood of traffic to a target.
- C) An attacker impersonates a legitimate service.
- D) An attacker gains unauthorized access to a system.
22What is the purpose of a password policy?
- A) To limit the number of users accessing a system
B) To ensure users create strong and secure passwords- C) To encourage users to share passwords
- D) To monitor user activity
23Which of the following tools is commonly used to perform vulnerability assessments?
- A) Nmap
- B) Wireshark
- C) Nessus
- D) Metasploit
24What does the term "social engineering" refer to?
- A) Manipulating people to gain confidential information
- B) A method of network penetration
- C) A type of malware
- D) A form of encryption
25In the context of cybersecurity, what does "CIA" stand for?
- A) Confidentiality, Integrity, Availability
- B) Control, Identify, Assess
- C) Compliance, Investigation, Analysis
- D) Confidentiality, Identification, Authentication
26Which of the following is an example of a strong password?
- A) 123456
- B) qwertyuiop
- C) P@ssw0rd123!
- D) password
27Which attack involves the use of multiple compromised systems to launch a coordinated attack?
- A) Phishing
- B) Ransomware
- Botnet
- D) Keyloggingse of multiple compromised systems to launch a coordinated attack?
28What is the primary function of a security information and event management (SIEM) system?
- A) To manage user access rights
- B) To analyze security alerts generated by applications and network hardware
- C) To perform regular backups
- D) To monitor system performance
29What type of attack does not require user intervention?
- A) Phishing
- B) Drive-by download
- C) Social engineering
- D) Keylogging
30Which of the following is a common symptom of malware infection?
- A) Improved system performance
- B) Frequent system crashes
- C) Increased battery life
- D) Faster internet speeds
31What is the purpose of a DMZ in network security?
- A) To allow unrestricted access to all users
- B) To provide a buffer zone between the public internet and the internal network
- C) To store backup data
- D) To encrypt sensitive information
32Which of the following is a primary function of antivirus software?
- A) To manage user permissions
- B) To detect and remove malware
- D) To encrypt files
- C) To backup data
33Which of the following best describes a brute force attack?
- A) Guessing passwords using a dictionary of common words
- B) Using a large number of guesses to crack a password
- C) Exploiting a software vulnerability
- D) Intercepting network traffic
34What type of malware disguises itself as a legitimate application?
- A) Virus
- B) Trojan
- C) Worm
- D) Rootkit
35Which of the following methods can be used to secure a wireless network?
- A) Use WEP encryption
- B) Disable SSID broadcast
- C) Use default passwords
- D) Allow open connections
36What is the primary purpose of a patch management process?
- A) To remove outdated hardware
- B) To ensure that software vulnerabilities are addressed
- C) To manage user accounts
- D) To backup data
37What is the function of a proxy server?
- A) To provide direct internet access to users
- B) To act as an intermediary for requests from clients seeking resources from other servers
- C) To encrypt data in transit
- D) To perform system backups
38Which of the following is a key benefit of using a VPN?
- A) Increased internet speed
- B) Enhanced security for data in transit
- C) Reduced latency
- D) Improved user experience
39What is an example of an insider threat?
- A) A hacker breaching a company’s network
- B) A natural disaster damaging data centers
- C) An employee stealing sensitive data
- D) A vendor supplying faulty hardware
40Which of the following best describes a ransomware attack?
- A) Malware that encrypts files and demands payment for decryption
- B) Malware that steals user credentials
- C) Malware that monitors user activity
- D) Malware that spreads through email attachments
41What is the primary function of a digital signature?
- A) To encrypt data
- B) To verify the authenticity and integrity of a message
- C) To provide access control
- D) To manage user permissions
42Which of the following is a type of denial-of-service (DoS) attack?
- A) Spoofing
- B) Ping flood
- C) Phishing
- D) Man-in-the-middle
43Which of the following is a critical step in incident response?
- A) Ignoring the incident
- B) Documenting the incident and response actions
- C) Disabling all network access
- D) Informing all employees immediately
44What type of security control is biometric authentication?
- A) Administrative control
- B) Physical control
- C) Technical control
- D) Environmental control
45Which of the following is a common security framework?
- A) ISO 9001
- B) NIST Cybersecurity Framework
- C) PCI DSS
- D) All of the above
46What is the purpose of an access control list (ACL)?
- A) To manage user permissions and access to resources
- B) To monitor network traffic
- C) To perform data backups
- D) To encrypt sensitive information
47Which of the following is a characteristic of a worm?
- A) Requires user intervention to spread
- B) Attaches itself to other files
- C) Self-replicates and spreads independently
- D) Disguises itself as legitimate software
48What does "CIA" stand for in the context of information security?
- A) Compliance, Integrity, Availability
- B) Confidentiality, Integrity, Availability
- C) Control, Identify, Assess
- D) Confidentiality, Identification, Authentication
49Which of the following is a common method for preventing SQL injection attacks?
- A) Input validation
- B) Using stored procedures
- C) Parameterized queries
- D) All of the above
50What is the primary goal of a penetration test?
- A) To find and exploit vulnerabilities in a system
- B) To monitor user activity
- C) To perform system backups
- D) To ensure compliance with regulations
51Which of the following describes a security incident?
- A) Any event that negatively impacts system performance
- C) An event that compromises the confidentiality, integrity, or availability of data
- D) A failed login attempt
- B) Any violation of security policies
52What is the function of a honeypot?
- A) To detect and prevent malware
- B) To serve as a decoy to attract attackers
- C) To monitor user behavior
- D) To manage user access
53Which of the following is an example of a social engineering attack?
- A) SQL injection
- B) Phishing email
- C) Man-in-the-middle attack
- D) DDoS attack
54What is the purpose of a security audit?
- A) To improve user experience
- B) To assess the effectiveness of security controls
- C) To increase system performance
- D) To monitor network traffic
55Which of the following describes a vulnerability?
- A) To improve user experience
- B) To assess the effectiveness of security controls
- C) To increase system performance
- D) To monitor network traffic
56Which of the following is a type of malware that encrypts files and demands payment for decryption?
- A) Ransomware
- B) Spyware
- C) Adware
- D) Worm
57What is the function of a data loss prevention (DLP) solution?
- A) To encrypt data in transit
- B) To monitor and control data transfers
- C) To perform system backups
- D) To manage user access
58Which of the following best describes the term "sandboxing"?
- A) Running untrusted applications in a separate environment
- B) Encrypting sensitive data
- C) Monitoring network traffic
- D) Limiting user access
59What is a primary benefit of using two-factor authentication (2FA)?
- A) It simplifies the login process
- B) It enhances security by requiring two forms of verification
- C) It eliminates the need for passwords
- D) It improves user experience
60Which of the following is a type of attack that targets weaknesses in web applications?
- A) Ransomware
- B) SQL injection
- C) DDoS
- D) Phishing
61What is the purpose of an incident response team (IRT)?
- C) To perform regular backups
- B) To respond to security incidents and breaches
- A) To monitor network traffic
- D) To manage user access
62Which protocol is commonly used for sending email messages from a client to a server?
- B) SMTP
- C) HTTP
- A) FTP
- D) SNMP
63What does the acronym HTTP stand for?
- A) Hyper Transfer Protocol
- B) Hypertext Transfer Protocol
- C) High Text Transfer Protocol
- D) Hyperlink Text Transfer Protocol
64Which protocol is used to retrieve email messages from a server?
- A) IMAP
- B) SMTP
- C) FTP
- D) SNTP
65What is the function of the DHCP protocol?
- A) To assign IP addresses dynamically
- B) To transmit files between computers
- C) To secure network communications
- D) To manage email delivery
66Which protocol provides a secure version of HTTP?
- A) HTTPS
- B) FTPS
- C) SFTP
- D) SNMPv3
67What does the acronym FTP stand for?
- A) File Transfer Protocol
- B) Fast Transfer Protocol
- C) File Transmission Protocol
- D) File Transport Protocol
68Which protocol is used for network management and monitoring?
- A) FTP
- B) SNMP
- C) SMTP
- D) HTTP
69Which protocol is used for accessing and managing directory services?
- A) SNMP
- B) LDAP
- C) DHCP
- D) RDP
70What is the purpose of the ICMP protocol?
- A) To provide error messaging and operational information
- B) To transfer files between hosts
- C) To manage email delivery
- D) To encrypt data
71Which protocol is commonly used for remote desktop access?
- A) FTP
- B) RDP
- C) SNMP
- D) HTTP
72What does the acronym SNTP stand for?
- A) Simple Network Transfer Protocol
- B) Simple Network Time Protocol
- C) Secure Network Time Protocol
- D) Standard Network Time Protocol
73Which protocol operates at the transport layer and provides reliable communication?
74What is the main difference between TCP and UDP?
- A) TCP is connectionless, while UDP is connection-oriented
- B) TCP is reliable, while UDP is unreliable
- C) TCP uses less overhead than UDP
- D) TCP is faster than UDP
75Which of the following protocols is used for secure file transfer?
- A) FTP
- B) SFTP
- C) TFTP
- D) HTTP
76What is the primary purpose of the ARP protocol?
- A) To resolve IP addresses to MAC addresses
- B) To manage bandwidth
- C) To encrypt data
- D) To route packets
77Which protocol is used for connecting to a secure shell?
- A) SSH
- B) FTP
- C) Telnet
- D) RDP
78What type of protocol is Telnet?
- A) Secure
- B) Connection-oriented
- C) Connectionless
- D) Application layer
79Which network protocol is used to synchronize clocks of network devices?
- A) DHCP
- B) NTP
- C) SNTP
- D) ICMP
80What does the acronym BGP stand for?
- A) Border Gateway Protocol
- B) Basic Gateway Protocol
- C) Binary Gateway Protocol
- D) Bandwidth Gateway Protocol
81Which protocol is used for transferring files in a very simple, unsecure manner?
- A) FTP
- B) SFTP
- C) SCP
- D) TFTP