wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Cybersecurity Quiz

Total questions: 45

Worksheet time: 34mins

Name
Class
Date
1.

Which of the following security measures is a form of biometrics?

a)

Fingerprint scanner

b)

Chassis intrusion detection

c)

TPM

d)

BIOS password

2.

You have purchased new computers and will be disposing of your old computers. Instead of recycling the computers, you decide to resell them by placing an ad on the Internet. These computers were previously used for storing sensitive information. To properly protect the accidental discovery of the company's sensitive information, which of the following steps MUST be completed prior to getting rid of the computers?

a)

Include the original operating system discs and product keys with the computers

b)

Use data wiping software to clear the hard drives

c)

Reformat the hard drives

d)

Delete user data and applications from the hard drives

3.

Which of the following protocols can be enabled so email is encrypted on a mobile device?

a)

SSL

b)

IMAP

c)

POP3

d)

SMTP

4.

Which Internet protocol is used to transmit encrypted data?

a)

FTP

b)

HTTP

c)

HTTPS

d)

DNS

5.

What is the surest way to prevent the loss of important information on your mobile device if it is lost, stolen, destroyed, or there is a natural disaster?

a)

Configure your device to remotely backup important data to the Cloud.

b)

Configure your device to backup important data to your personal computer.

c)

Don't put important information on your mobile device.

d)

Only use apps, such as email apps, that store data on the app provider's servers.

6.

Your company has surveillance cameras in your office, uses strong authentication protocols, and requires biometric factors for access control. These are all examples of what principle?

a)

Integrity

b)

Authentication

c)

Authorization

d)

Non-repudiation

7.

If a malicious user gains access to the system, which component of the framework lets administrators know how they gained access and what exactly they did?

a)

Authentication

b)

Access control

c)

Accounting

d)

Access control

8.

Which of the following would best prevent an unauthorized person from remotely accessing your computer?

a)

Lockdown device

b)

Firewall

c)

Anti-malware software

d)

Anti-spam software

9.

In which of the following situations should you expect total privacy?

a)

Instant messaging

b)

Email messages and attachments

c)

Social networking

d)

Financial transactions

10.

Ted, an employee in the Sales department has asked a coworker, Ann, in the Production department to update the product descriptions contained in a Sales document. Ann can open the file but, after making changes, can't save the file. Which of the following digital security methods is MOST likely preventing this?

a)

Directory permission

b)

Antivirus software

c)

Data loss prevention

d)

Multifactor authentication

11.

What is the best countermeasure against social engineering?

a)
Access auditing
b)

User awareness training

c)

Strong passwords

d)

Acceptable use policy

12.

Which of the following disaster recovery concepts applies when a server needs to be online and accessible at all times?

a)

Replication

b)

Backup

c)

Cloud storage

d)

Redundancy

13.

A user has opened a web browser and accessed a website where they are creating an account. The registration page is asking the user for their username (email address) and a password. The user looks at the URL and the protocol being used is HTTP. Which of the following describes how the data will be transmitted from the webpage to the webserver?

a)

Plain text

b)

Cipher text

c)

AES encrypted

d)

WPA2 encryption

14.

What is a disadvantage of using the cloud for data storage?

a)

Cloud storage can fulfill the requirements for offsite backups.

b)

Cloud storage backups require a reliable internet connection.

c)

Cloud storage allows you to save files to the internet.

d)

You can access files from any computer with an internet connection.

15.

You've just received an email message that indicates a new, serious malicious code threat is ravaging across the Internet. The message contains detailed information about the threat its source code and the damage it can inflict. the message states that you can easily detect whether or not you have already been a victim of this threat by the presence of three files in the \Windows\System32 folder. As a countermeasure, the message suggests that you delete these three files from you system to prevent further spread of the threat. Based on the email message, which of the following are the next BEST actions to complete? (Select two)

a)

Run a full anti-malware scan

b)

Delete the indicated files if present

c)

Verify the information on well-known malicious code threat management Web sites

d)

Perform a complete system backup

e)

Reboot the system

16.

You are configuring the local security policy of a Windows system. You want to prevent users from reusing old passwords. You also want to force them to use a new password for a least 5 days before changing it again.

a)

Minimum password age

b)

Maximum password age

c)

Password complexity

d)

Minimum password length

e)

Enforce password history

17.

A technician walks into the office with a UPS. What sort of threat will this device prepare a system for?

a)

Data redundancy

b)

Denial-of-service

c)

Power outage

d)

Wiretapping

18.

While configuring a wireless access point device, a technician is presented with several security mode options. Which of the following options will provide the most secure access?

a)

WPA2 and AES

b)

WPA2 and TKIP

c)

WPA and AES

d)

WEP 128

e)

WPA and TKIP

19.

A large number of compromised computers are infected with malware that allows an attacker (herder) to control them to spread email spam and launch denial-of-service attacks. Which of the following does this security threat describe?

a)

Phishing

b)

Man-in-the-middle

c)

Zombie/botnet

d)

Spoofing

20.

Your company wants to use multifactor authentication. Which of the following would you most likely suggest?

a)

Token and smartphone

b)

Password and passphrase

c)

PIN and smart card

d)

Fingerprint and retinal scan

21.

What do biometrics use to perform authentication of identity?

a)

Ability to perform tasks

b)

Knowledge of passwords

c)

Possession of a device

d)

Biological attributes

22.

You work for a company that offers their services through the Internet. Therefore, it is critical that your website performs well. As a member of the IT technician staff, you receive a call from a fellow employee who informs you that customers are complaining that they can't access your website. After doing a little research, you have determined that you are a victim of a denial-of-service attack. As a first responder, which of the following is the next BEST step to perform?

a)

Investigate how the attack occurred.

b)

Hire a forensic team to gather evidence.

c)

Prevent such an incident from occurring again.

d)

Contain the problem

23.

You have implemented a regular backup schedule for a Windows system, backing up data files every night and creating a system image backup once a week. For security reasons, your company has decided to not store a redundant copy of the backup media at an offsite location. Where would be the next best place to keep your backup media?

a)

On a shelf next to the backup device.

b)

In a locked room.

c)

In a locked fireproof safe.

d)

In a drawer in your office.

24.

A technician is installing a new SOHO wireless router. Which of the following is the FIRST thing the technician should do to secure the router?

a)

Change the router's default password

b)

Adjust the radio power levels

c)

Press the WPS button

d)

Disable SSID broadcast

25.

Which of the following access controls gives only backup administrators access to all servers on the network?

a)

Role-based

b)

Discretionary

c)

Authorization

d)

Mandatory

26.

Mark received an email from a software company claiming his account will be disabled soon. The email contains several spelling errors, an attachment, and states he should open the attachment for further instructions. What should Mark do?

a)

Open the attachment because he has anti-virus software installed.

b)

Delete the email without opening the attachment.

c)

Reply to the sender and ask if the attachment is safe.

d)

Forward the email to a friend and ask for advice.

27.

You are the PC technician for a company. An employee has gone to a meeting while you fix the computer in her office. She accidentally left a report open next to her computer which states that a friend of yours in accounting will be submitted for review if their poor work performance continues. Which of the following is the BEST action to take?

a)

Ignore the paper and tell no one of its contents

b)

Tell your friend about the report you saw and whose desk it was on

c)

Give your friend a heads up about what you found, but don't disclose from where you heard the information.

d)

Tell your friend about the report you saw and whose desk it was on.

28.

You are configuring the local security policy of a Windows system. You want to require users to create passwords that are at least 10 characters long. You also want to prevent log on after three unsuccessful logon attempts. Which of the following policies are BEST to configure? (Select TWO).

a)

Account lockout duration

b)

Password complexity

c)

Enforce password history

d)

Minimum password length

e)

Account lockout threshold

29.

Why is it better to use a credit card than a debit card for online purchases?

a)

Debit cards require you to pay additional fees

b)

Credit cards have better interest rates

c)

Credit cards keep track of all your transactions

d)

Credit cards have better fraud protection

30.

Your company has a disaster recovery plan that says the order to restore data is customer data, financial system, then email. This is an example of what?

a)

Cloud backups

b)

Prioritization

c)

Cloud backups

d)

Fault tolerance

31.

Gloria is concerned that her online banking transactions could be intercepted if she uses public WiFi. Which of the following could she use to prevent access to her online transactions?

a)

VPN

b)

Mandatory Access Control (MAC)

c)

Multifactor authentication

d)

Single sign-on

32.

After entering a user ID and password, an online banking user must enter a PIN that was sent as a text message to the user's mobile phone. Which of the following digital security methods is being used?

a)

Firewall

b)

Smart card

c)

DLP

d)

Multifactor authentication

33.

Which of the following components of a successful access control framework is the process of proving that you are who you say you are?

a)

Authorization

b)

Authentication

c)

Access control

d)

Accounting

34.

A technician is tasked to configure a mobile device to connect securely to the company network when the device is used at offsite locations where only internet connectivity is available. Which of the following should the technician configure?

a)

IMAP

b)

Hotspot

c)

Bluetooth

d)

VPN

35.

A technician assists Joe, an employee in the Sales department, who needs access to the client database by granting Joe administrator privileges. Later, Joe discovers he has access to the salaries in the payroll database. Which of the following security practices was violated?

a)

Principle of least privilege

b)

Multifactor authentication

c)

Strong password policy

d)

Entry control roster

36.

In which of the following should you expect some privacy?

a)

Personally identifiable information entered into a human resource database

b)

Sharing a photo through a mobile phone app

c)

Emailing an important document to a friend using an employer email system

d)

Metadata stored by a web browser

37.

Which of the following is not a form of biometrics?

a)

Retina scan

b)

Fingerprint

c)

Face recognition

d)

Smart Card

38.

The CEO of a small business travels extensively and is worried about having the information on their laptop stolen if the laptop is lost or stolen. Which of the following would BEST protect the data from being compromised if the laptop is lost or stolen?

a)

Full disk encryption

b)

Anti-malware

c)

Smart card

d)

Face recognition

e)

Anti-theft lock

39.

Which of the following are the BEST steps you can take to avoid having your mobile device exploited by a hacker or infected by a virus? (Select two.)

a)

Lock the screen with some form of authentication

b)

Avoid anti-virus apps

c)

Keep the operating system up to date

d)

Keep an up-to-date remote backup

e)

Turn off location services

40.

A small business wants to make sure their wireless network is using the strongest encryption to prevent unauthorized access. Which of the following wireless encryption standards should be used?

a)

WEP

b)

WPA2

c)

WPS

d)

WPA

41.

Which of the following describes a Man-in-the-Middle attack?

a)

A person over the phone convinces an employee to reveal their logon credentials.

b)

An IP packet is constructed which is larger than the valid size.

c)

An attacker intercepts communications between two network hosts by impersonating each host.

d)

Malicious code is planted on a system where it waits for a triggering event before activating.

42.

An accountant needs to send an email with sensitive information to a client and wants to prevent someone from reading the email if it is intercepted in transit. The client's email system does not allow them to receive attachments due to their company security policies. Which of the following should the accountant use to send the email?

a)

Cipher text

b)

Plain text

c)

File level encryption

d)

Host-based encryption

43.

A user reports that her system is running slow when saving files. You determine that you will need to upgrade her hard disk. You identify the components that are required and schedule the repair for later that afternoon. Which of the following steps have you forgotten in your troubleshooting process?

a)

Create an action plan.

b)

Implement the solution.

c)

Perform a backup.

d)

Verify system functionality.

44.

Unwanted, unsolicited emails containing advertisements, political rhetoric, hoaxes, or scams are collectively known as _______.

a)

Bloatware

b)

Cookies

c)

Illegal messages

d)

Spam

45.

Which software is Microsoft's anti-malware product that is preinstalled on most new computers?

a)

Windows Defender

b)

McAfee VirusScan

c)

Norton Antivirus

d)

ESET NOD32