Front

Which of the following contributes to an expanded attack surface?

1. A. Strong password policies

2. B. Increased number of connected IoT devices

3. C. Regular system updates

4. D. Use of air-gapped networks

Back

B. Increased number of connected IoT devices
Explanation: Each IoT device represents a potential entry point for attackers, increasing the overall attack surface.

Front

What is the most common security risk associated with IoT devices?

1. A. Lack of internet access

2. B. Limited battery life

3. C. Weak authentication mechanisms

4. D. High power consumption

Back

C. Weak authentication mechanisms

Explanation: Many IoT devices use default or weak passwords, making them easy targets for unauthorized access.

Front

Which attack type specifically targets IoT devices?

1. A. Man-in-the-Middle attack

2. B. SQL Injection

3. C. Brute Force attack

4. D. Botnet attacks

Back

D. Botnet attacks
Explanation: IoT devices are often hijacked by botnets to launch large-scale cyberattacks such as DDoS attacks.

Front

What is a "zero trust" approach in cybersecurity?

1. A. Trusting all users by default

2. B. Relying on firewall protection alone

3. C. Enforcing strict verification for all access requests

4. D. Allowing unrestricted internal communication

Back

C. Enforcing strict verification for all access requests
Explanation: The zero trust model assumes that no entity should be automatically trusted, requiring strict authentication and authorization at all levels.

Front

Which protocol is used to secure website communication?

1. A. HTTP

2. B. FTP

3. C. HTTPS

4. D. SMTP

Back

C. HTTPS
Explanation: HTTPS encrypts data transmitted between the website and users, preventing interception by malicious actors.

Front

Which of the following is an essential practice for maintaining site security?

1. A. Using outdated software

2. B. Ignoring security patches

3. C. Regularly updating plugins and software

4. D. Allowing unrestricted access to admin accounts

Back

C. Regularly updating plugins and software
Explanation: Updates patch vulnerabilities that could be exploited by attackers.

Front

What is a "honeypot" in cybersecurity?

1. A. A type of sweet-based attack

2. B. A decoy system designed to lure hackers

3. C. A tool for encrypting passwords

4. D. A method to increase website rankings

Back

B. A decoy system designed to lure hackers
Explanation: Honeypots mimic vulnerable systems to detect and analyze cyberattack tactics without risking actual assets.

Front

What is the purpose of the Metasploit Framework?

1. A. To scan for viruses

2. B. To execute and develop exploits

3. C. To design web applications

4. D. To improve network speed

Back

B. To execute and develop exploits
Explanation: The Metasploit Framework provides tools for testing and deploying exploits against known vulnerabilities to assess security risks.

Front

Which Metasploit component helps manage exploits and payloads?

1. A. Metasploit Express

2. B. Metasploit Pro

3. C. msfconsole

4. D. Wireshark

Back

C. msfconsole
Explanation: The msfconsole is the primary interface for Metasploit, allowing users to manage exploits, payloads, and modules efficiently.

Front

5. What is a payload in Metasploit?

1. A. A type of firewall

2. B. Malicious code executed after exploitation

3. C. A security patch

4. D. An encryption key

Back

B. Malicious code executed after exploitation
Explanation: A payload is the code that runs after successfully exploiting a vulnerability, often used to gain access or manipulate a system.