WorksheetsCybersecurity Quiz
Total questions: 100
Worksheet time: 50mins
What does the term "Absolute file path" refer to in cybersecurity?
A) A type of attack where data packets are manipulated in transit
B) The full file path, which starts from the root
C) A network protocol used to determine the MAC address of the next router or device on the path
D) A detection method that identifies abnormal behavior
What is "Access controls" in the context of cybersecurity?
A) A set of rules used to solve a problem
B) A type of legitimate software that displays digital advertisements
C) Security controls that manage access, authorization, and accountability of information
D) The investigation and validation of alerts
What is "Active packet sniffing"?
A) A detection method that identifies abnormal behavior
B) A technique that manipulates AI and ML technology to conduct attacks
C) A type of legitimate software used to display digital advertisements
D) A type of attack where data packets are manipulated in transit
What does "Address Resolution Protocol (ARP)" stand for?
A) A technique where attackers impersonate customer service representatives on social media
B) A set of rules used to solve a problem
C) A network protocol used to determine the MAC address of the next router or device on the path
D) A detection method that identifies abnormal behavior
What is an "Advanced persistent threat (APT)"?
A) A detection method that identifies abnormal behavior
B) An instance when a threat actor maintains unauthorized access to a system for an extended period of time
C) A type of legitimate software that is sometimes used to display digital advertisements
D) A technique where attackers impersonate customer service representatives on social media
What is "Adversarial artificial intelligence (AI)"?
A) A detection method that identifies abnormal behavior
B) A technique that manipulates AI and ML technology to conduct attacks more efficiently
C) A network protocol used to determine the MAC address of the next router or device on the path
D) A type of attack where data packets are manipulated in transit
What is "Adware"?
A) A type of attack where data packets are manipulated in transit
B) A network protocol used to determine the MAC address of the next router or device on the path
C) A type of legitimate software that is sometimes used to display digital advertisements
D) A technique that manipulates AI and ML technology to conduct attacks more efficiently
What is an "Algorithm" in the context of cybersecurity?
A) A network protocol used to determine the MAC address of the next router or device on the path
B) A type of legitimate software that is sometimes used to display digital advertisements
C) A detection method that identifies abnormal behavior
D) A set of rules used to solve a problem
What does "Analysis" refer to in cybersecurity?
A) A type of legitimate software that is sometimes used to display digital advertisements
B) The full file path, which starts from the root
C) The investigation and validation of alerts
D) A network protocol used to determine the MAC address of the next router or device on the path
What is "Angler phishing"?
A) A detection method that identifies abnormal behavior
B) A type of legitimate software that is sometimes used to display digital advertisements
C) A technique where attackers impersonate customer service representatives on social media
D) A network protocol used to determine the MAC address of the next router or device on the path
What is "Anomaly-based analysis"?
A) A technique where attackers impersonate customer service representatives on social media
B) A set of rules used to solve a problem
C) A type of legitimate software that is sometimes used to display digital advertisements
D) A detection method that identifies abnormal behavior
What is the purpose of antivirus software?
To enhance the performance of applications
To prevent, detect, and eliminate malware and viruses
To store data in a comma-separated ordered list
To map threats to assets
What is an API token?
A software program used to eliminate viruses
A practice of labeling assets based on sensitivity
A small block of encrypted code that contains information about a user
A type of asymmetric encryption
What is the fifth step of the NIST RMF that assesses if established controls are implemented correctly?
Asset
Assess
Authorize
Automation
What does the term 'asset' refer to in an organizational context?
A catalog of assets that need to be protected
An item perceived as having value to an organization
The process of tracking assets and the risks that affect them
The practice of labeling assets based on sensitivity and importance
What is asymmetric encryption?
A diagram that maps threats to assets
The use of a public and private key pair for encryption and decryption of data
The process of verifying who someone is
The idea that data is accessible to those who are authorized to access it
What is an attack surface?
The process of tracking assets
The pathways attackers use to penetrate security defenses
All the potential vulnerabilities that a threat actor could exploit
A type of data that stores information in a list
What is the purpose of authentication in security?
To reduce human and manual effort to perform tasks
To grant access to specific resources in a system
To verify who someone is
To label assets based on sensitivity and importance
What does 'availability' mean in the context of data access?
The use of technology to perform tasks
The process of tracking assets
The idea that data is accessible to those who are authorized to access it
The practice of labeling assets
What is the term for a social engineering tactic that tempts people into compromising their security?
Bootloader
Baiting
Bit
Bandwidth
What does bandwidth refer to in a network?
The default shell in most Linux distributions
The maximum data transmission capacity over a network
A collection of computers infected by malware
The unique physical characteristics used to verify a person's identity
What is a baseline configuration also known as?
Baseline image
Basic auth
BIOS
Bracket notation
What is the default shell in most Linux distributions called?
Bit
Bootloader
Bash
Botnet
What is the purpose of a bootloader?
It is a microchip that contains loading instructions for the computer
It is a software program that boots the operating system
It is a tactic used in social engineering
It is the smallest unit of data measurement on a computer
What is a botnet?
A function that exists within Python
A software program that boots the operating system
A collection of computers infected by malware under the control of a single threat actor
The trial and error process of discovering private information
What does the term "brute force attack" refer to?
A documented set of specifications within a system for future builds
A social engineering tactic
The trial and error process of discovering private information
A function that exists within Python
What is a built-in function?
A function that exists within Python and can be called directly
A software program that boots the operating system
The smallest unit of data measurement on a computer
The maximum data transmission capacity over a network
What is the purpose of a Business Continuity Plan (BCP)?
To maintain an organization's productivity by establishing risk disaster recovery plans
To document evidence possession and control during an incident lifecycle
To encrypt information using an algorithm
To analyze, retain, and search data using a cloud-native tool
What does BEC stand for in cybersecurity?
Business Email Compromise
Business Enterprise Computing
Basic Encryption Code
Business Enhanced Cybersecurity
What is CentOS?
A cloud-native tool designed to analyze data
A type of phishing attack
An open-source distribution closely related to Red Hat
A collection of servers or computers that store resources and data
What is the role of a Central Processing Unit (CPU) in a computer?
To encrypt information
To host software firewalls
To perform general computing tasks
To ensure cloud security
What is the purpose of cloud-based firewalls?
To document evidence possession during an incident lifecycle
To host software firewalls by the cloud service provider
To provide instructions to the computer
To maintain communications with compromised systems
What is cloud computing?
The process of documenting evidence possession and control
The practice of using remote servers, applications, and network services hosted on the internet
The process of ensuring that assets stored in the cloud are properly configured
The techniques used by malicious actors to maintain communications with compromised systems
What is a cloud network?
An algorithm that encrypts information
A computer's main processor
A collection of servers or computers that store resources and data in remote data centers
A type of phishing attack
What is the focus of cloud security?
Ensuring that assets stored in the cloud are properly configured and access is limited to authorized users
Encrypting information using an algorithm
Documenting evidence possession and control during an incident lifecycle
Telling the computer to do something
What does the term "Command" refer to in computing?
An instruction telling the computer to do something
A cloud-native tool designed to retain, analyze, and search data
An open-source distribution that is closely related to Red Hat
The process of documenting evidence possession and control during an incident lifecycle
What is Command and Control (C2) in the context of cybersecurity?
The process of ensuring that assets stored in the cloud are properly configured
The techniques used by malicious actors to maintain communications with compromised systems
A computer's main processor, which is used to perform general computing tasks
An algorithm that encrypts information
What is the purpose of a Command-line interface (CLI)?
A graphical user interface that uses icons to interact with the computer
A text-based user interface that uses commands to interact with the computer
A programming language used for creating operating systems
A tool for measuring the severity of computer vulnerabilities
What does the Common Vulnerability Scoring System (CVSS) provide?
A log format that uses key-value pairs to structure data
A text-based user interface for computers
A measurement system that scores the severity of a vulnerability
A specialized group of security professionals
What is the role of Computer security incident response teams (CSIRT)?
To write malicious software
To configure the settings of an application
To manage and respond to computer security incidents
To protect the internal network from the uncontrolled zone
What does the Confidentiality, Integrity, Availability (CIA) triad model help organizations with?
Configuring the settings of an application
Structuring log data using key-value pairs
Informing risk considerations when setting up systems and security policies
Training specialized groups of security professionals
What is the purpose of a containment strategy in cybersecurity?
To configure the settings of an application
To limit and prevent additional damage caused by an incident
To provide a measurement system for vulnerabilities
To create a log format for data structuring
What is a cross-site scripting (XSS) attack?
An attack that affects secure forms of communication between a sender and an intended recipient.
A practice of gathering information using public input and collaboration.
An injection attack that inserts code into a vulnerable website or web application.
A malware that installs software to illegally mine cryptocurrencies.
What is crowdsourcing?
An attack that affects secure forms of communication between a sender and an intended recipient.
A practice of gathering information using public input and collaboration.
An injection attack that inserts code into a vulnerable website or web application.
A malware that installs software to illegally mine cryptocurrencies.
What is a cryptographic attack?
An attack that affects secure forms of communication between a sender and an intended recipient.
A practice of gathering information using public input and collaboration.
An injection attack that inserts code into a vulnerable website or web application.
A malware that installs software to illegally mine cryptocurrencies.
What is a cryptographic key?
A tool for locking and unlocking cryptographic functions
A password for internet access
A method for digital signatures only
A type of software that manages digital communication
What is cryptography?
The study of planets
The art of writing or solving codes
The science of numbers
The process of making software
What is cryptojacking?
A mechanism that decrypts encrypted text.
A process that transforms information into a form that readers cannot understand.
A malware that installs software to illegally mine cryptocurrencies.
An organization that analyzes and distributes information about eligible CVEs.
What is the CVE Numbering Authority (CNA)?
A malware that installs software to illegally mine cryptocurrencies.
A process that transforms information into a form that readers cannot understand.
An organization that volunteers to analyze and distribute information about eligible CVEs.
The practice of ensuring the confidentiality, integrity, and availability of information.
What is cybersecurity?
The practice of ensuring the confidentiality, integrity, and availability of information.
A malware that installs software to illegally mine cryptocurrencies.
An organization that volunteers to analyze and distribute information about eligible CVEs.
Information that is translated, processed, or stored by a computer.
What is "Data at rest"?
Data traveling from one point to another.
Data that is being accessed by one or more users.
Data not currently being accessed.
Unauthorized data transmission from a system.
What is a database?
A person who determines the procedure and purpose for processing data.
Anyone or anything that is responsible for the safe handling, transport, and storage of information.
An organized collection of information or data.
Unauthorized transmission of data from a system.
What is a data controller?
A person who determines the procedure and purpose for processing data.
Anyone or anything that is responsible for the safe handling, transport, and storage of information.
An organized collection of information or data.
Unauthorized transmission of data from a system.
What is a data custodian?
A person who determines the procedure and purpose for processing data.
Anyone or anything that is responsible for the safe handling, transport, and storage of information.
An organized collection of information or data.
Unauthorized transmission of data from a system.
What is data exfiltration?
Data traveling from one point to another.
Data being accessed by one or more users.
Data not currently being accessed.
Unauthorized transmission of data from a system.
What does "Data in transit" mean?
Data traveling from one point to another.
Data that is being accessed by one or more users.
Data not currently being accessed.
Unauthorized transmission of data from a system.
What is "Data in use"?
Data traveling from one point to another.
Data that is being accessed by one or more users.
Data not currently being accessed.
Unauthorized data transmission from a system.
Who is responsible for deciding who can access, edit, use, or destroy their information?
Data processor
Data protection officer (DPO)
Data owner
Data point
What is a data packet?
A file that organizes where other files are stored
A specific piece of information
A basic unit of information that travels from one device to another within a network
A software tool that helps to locate the source of an error
What is the role of a Data protection officer (DPO)?
Responsible for processing data on behalf of the data controller
Monitors compliance of an organization's data protection procedures
Identifies and fixes errors in code
Collects and analyzes data to determine what happened after an attack
What does 'Defense in depth' refer to?
A plan to minimize the impact of a security incident
A basic unit of information transfer within a network
A layered approach to vulnerability management that reduces risk
The practice of collecting and analyzing data after an attack
What is a Denial of Service (DoS) attack?
A file that verifies the identity of a public key holder
An attack that targets a network or server and floods it with network traffic
A practice of identifying and fixing errors in code
A core function related to identifying potential security incidents
What is the purpose of a Digital certificate?
To organize where other files are stored
To verify the identity of a public key holder
To collect and analyze data to determine what happened after an attack
To identify and fix errors in code
What is the main focus of Digital forensics?
Monitoring compliance of data protection procedures
Collecting and analyzing data to determine what happened after an attack
Identifying potential security incidents
Managing vulnerabilities in a layered approach
What is a Distributed Denial of Service (DDoS) attack?
A type of malware that comes packed with malicious code
A networking protocol that translates internet domain names into IP addresses
A type of denial of service attack that uses multiple devices or servers to flood the target network with unwanted traffic
An application that monitors an endpoint for malicious activity
What are Distributions in the context of Linux?
The different versions of Linux
A type of malware
A process performed by a VPN service
An application that monitors for malicious activity
What is the purpose of Documentation?
To convert data from a readable format to an encoded format
To provide a brief summary of your experience, skills, and background
To record content that is used for a specific purpose
To monitor an endpoint for malicious activity
What does DOM-based XSS attack refer to?
A networking protocol that translates internet domain names into IP addresses
An instance when malicious script exists in the webpage a browser loads
The complete removal of the incident elements from all affected systems
A set of actions that outline how an incident should be handled
What is the Domain Name System (DNS)?
A type of malware
A process performed by a VPN service
A networking protocol that translates internet domain names into IP addresses
An application that monitors an endpoint for malicious activity
What is a Dropper in the context of malware?
A brief summary of your experience, skills, and background
A process performed by a VPN service
A type of malware that comes packed with malicious code which is delivered and installed onto a target system
An application that monitors an endpoint for malicious activity
What is an exclusive operator?
A network security device
A variable that is available through the entire program
An operator that does not include the value of comparison
A section of code that can be reused in a program
What does the term 'exploit' refer to in cybersecurity?
A state where the presence of a threat is not detected
A way of taking advantage of a vulnerability
Selecting data that match a certain condition
A server that regulates and restricts a person’s access to the internet
What is a false positive in the context of network security?
An alert that incorrectly detects the presence of a threat
Malware that does not need to be installed by the user
The location of a file or directory
A variable that is available through the entire program
What is the purpose of a firewall?
To document a comprehensive review of an incident
To monitor traffic to or from a network
To store data consisting of a number with a decimal point
To regulate and restrict a person’s access to the internet
What is a foreign key in a database?
A column in a table that is a primary key in another table
A section of code that can be reused in a program
A variable that is available through the entire program
An operator that does not include the value of comparison
What is a global variable in programming?
A variable that is available through the entire program
A network security device that monitors traffic
An operator that does not include the value of comparison
A server that regulates and restricts a person’s access to the internet
What is a Graphical User Interface (GUI)?
A user interface that uses icons on the screen to manage different tasks on the computer.
A network protocol that provides a secure method of communication between clients and web servers.
A hardware component used for long-term memory.
A federal law in the U.S. that protects patients' health information.
What is a hacker?
Anyone who uses computers to gain access to computer systems, networks, or data.
An application that monitors the host's activity on which it is installed.
An algorithm that produces a code that cannot be deciphered.
A network device that transmits information to every device on the network.
What is a hacktivist?
A person who uses hacking to achieve a political goal.
A system or resource created as a vulnerable decoy to attract potential intruders.
A hardware component used for long-term memory.
A federal law in the U.S. that protects patients' health information.
What is a hard drive?
A hardware component used for long-term memory.
A layer application protocol that provides a method of communication between clients and web servers.
A system or resource created as a vulnerable decoy to attract potential intruders.
An instance in which different inputs produce the same hash value.
What is hardware?
The physical components of a computer.
An algorithm that produces a code that cannot be deciphered.
An application that monitors the activity of the host on which it is installed.
A network protocol that provides a secure method of communication between clients and web servers.
What is a hash collision?
An instance where different inputs produce the same hash value.
An algorithm that produces a code that cannot be deciphered.
A data structure that is used to store and reference hash values.
A federal law in the U.S. that protects patients' health information.
What is a hash function?
An algorithm that produces a code that cannot be deciphered.
A data structure that is used to store and reference hash values.
A network protocol that provides a secure method of communication between clients and web servers.
An application that monitors the activity of the host on which it is installed.
What is a hash table?
A data structure that is used to store and reference hash values.
A federal law in the U.S. that protects patients' health information.
A network protocol that provides a secure method of communication between clients and web servers.
A system or resource created as a vulnerable decoy to attract potential intruders.
What is the Health Insurance Portability and Accountability Act (HIPAA)?
A federal law in the U.S. that protects patients' health information.
A network protocol that provides a secure method of communication between clients and web servers.
An algorithm that produces a code that cannot be deciphered.
A data structure that is used to store and reference hash values.
What is a honeypot?
A system or resource created as a vulnerable decoy to attacks with the purpose of attracting potential intruders.
A network protocol that provides a secure method of communication between clients and web servers.
A hardware component used for long-term memory.
A federal law in the U.S. that protects patients' health information.
What is a host-based intrusion detection system (HIDS)?
An application that monitors the activity of the host on which it is installed.
A network protocol that provides a secure method of communication between clients and web servers.
An algorithm that produces a code that cannot be deciphered.
A network device that transmits information to every device on the network.
What is a hub?
A network device that transmits information to every device on the network.
An application that monitors the activity of the host on which it is installed.
An algorithm that produces a code that cannot be deciphered.
A data structure that is used to store and reference hash values.
What is the Hypertext Transfer Protocol (HTTP)?
An application layer protocol that provides a method of communication between clients and web servers.
A federal law in the U.S. that protects patients' health information.
An algorithm that produces a code that cannot be deciphered.
A network device that transmits information to every device on the network.
What is the Secure Hypertext Transfer Protocol (HTTPS)?
A network protocol that provides a secure method of communication between clients and web servers.
A federal law in the U.S. that protects patients' health information.
An algorithm that produces a code that cannot be deciphered.
A network device that transmits information to every device on the network.
What does "Identify" mean in the context of cybersecurity risk management according to NIST?
A core function of NIST related to cybersecurity risk management and its effect on an organization's people and assets.
A network protocol that provides a secure method of communication between clients and web servers.
An algorithm that produces a code that cannot be deciphered.
A network device that transmits information to every device on the network.
What is the purpose of Identity and access management (IAM)?
A set of standards for wireless communication
A process for managing digital identities
A security procedure for incident response
A method for data encryption
What does IEEE 802.11 refer to?
A security breach protocol
A type of security incident
A set of standards for wireless LAN communication
A data encryption method
What is the meaning of 'Immutable' in the context of this document?
A type of security incident
A process in incident response
An object that cannot be changed after creation
A method for data encryption
What is 'Incident escalation'?
The process of documenting a security incident
The process of identifying and handling a potential security incident
The process of adding space at the beginning of a line of code
The process of protecting unauthorized access and distribution of data
What is an 'Indicator of compromise (IoC)'?
A document that outlines incident response procedures
Observable evidence that suggests signs of a potential security incident
A series of observed events indicating a real-time incident
A number assigned to every element in a sequence
What is the purpose of 'Information privacy'?
To include the value of comparison in operations
To add space at the beginning of a line of code
To protect against unauthorized access and distribution of data
To assign a number to every element in a sequence
What is the practice of keeping data in all states away from unauthorized users known as?
Input validation
Information security (InfoSec)
Internal hardware
IP spoofing
What does an Injection attack involve?
Validating inputs from users and other programs
Malicious code inserted into a vulnerable application
Translating Python code into runnable instructions
Monitoring system activity for possible intrusions
What is an Integrated development environment (IDE) used for?
Keeping data secure from unauthorized users
Inserting malicious code into applications
Writing code that provides editing assistance and error correction tools
Translating code into runnable instructions
