NEW
Font size
WorksheetsInformation Security Quiz
Total questions: 75
Worksheet time: 38mins
What does the acronym "CIA" stand for in the context of information security?
Confidentiality, Integrity, Availability
Central Intelligence Agency
Computing Interface Application
Continuous Internal Assessment
Which component of the CIA Triad focuses on preventing unauthorized access to information?
Integrity
Availability
Confidentiality
Authentication
What aspect of the CIA Triad ensures that information is accurate and free from unauthorized modifications?
Confidentiality
Integrity
Availability
Encryption
Which part of the CIA Triad is concerned with ensuring reliable access to information by authorized users?
Confidentiality
Integrity
Availability
Non-repudiation
What is the primary purpose of confidentiality in data security?
To ensure data is always available
To keep data private and restrict access from unauthorized users
To make data easily accessible to everyone
To corrupt data for unauthorized users
Which of the following is NOT an example of a means to ensure confidentiality?
Firewall
Credentials (username & password)
Public Wi-Fi access
Encryption
What is encryption in the context of data security?
The physical locking of data storage devices
The process of making data unreadable to everyone
The encoding of data to be decoded by the intended user(s)
The transfer of data over secure networks only
What is required to encrypt and decrypt data in an encryption algorithm?
A password
A firewall
A key
A user agreement
Which type of encryption uses different keys for encryption and decryption?
Symmetric Encryption
Asymmetric Encryption
Single-Key Encryption
Dual-Key Encryption
How many keys are required for symmetric encryption according to the image?
One key
Two keys
Three keys
No keys
Which type of encryption is described as less secure due to one key?
Symmetric Encryption
Asymmetric Encryption
Both
None
What is a characteristic of asymmetric encryption not shared with symmetric encryption?
Fast encryption
Confidentiality
Non-Repudiation
Uses DES, 3DES, AES, RC4
Which of the following algorithms is associated with asymmetric encryption?
AES
RC4
RSA
DES
What is a common feature of symmetric encryption?
Slow encryption
Requires public and private keys
Fast encryption
Non-Repudiation
Which encryption standard is described as using a 56-bit key?
AES
DES
RSA
ECC
What does the acronym PGP stand for in the context of encryption?
Pretty Good Privacy
Public General Protocol
Private Gateway Protection
Personal Guarded Password
Which of the following is not a symmetric encryption algorithm?
3DES
AES
RSA
DES
Which algorithm uses public key infrastructure for authentication and encryption?
Diffie-Hellman
RSA
ECC
El Gamal
What type of encryption does ECC represent?
Elliptical Curve Cryptography
Encrypted Code Communication
Enhanced Cybersecurity Cipher
Essential Cloud Cryptography
What is the role of the "Secret Key" in the diagram of Symmetric Encryption?
It is used to convert the cipher text back to plain text only.
It is used to encrypt the plain text and decrypt the cipher text using the same key.
It generates different keys for encryption and decryption.
It is not necessary for the encryption process.
In the Symmetric Encryption process, what does the "Cipher Text" represent?
The original unencrypted information.
The format in which the key is written.
The encrypted version of the plain text.
The process of converting encrypted text into plain text.
What is the primary function of asymmetric encryption as depicted in the diagram?
To compress plain text into a smaller format
To convert plain text into cipher text using two different keys
To verify the authenticity of a digital document
To create a backup of the original data
In the process of asymmetric encryption, what is the role of the public key?
It is used to decrypt the cipher text back into plain text
It is used to encrypt the plain text into cipher text
It is used to generate the secret key
It is used to authenticate the sender
What does the cipher text represent in the context of asymmetric encryption?
The original unencrypted data
The format in which data is stored for efficiency
The encrypted version of the plain text
A digital signature of the document
Which key is used for decryption in asymmetric encryption?
The public key
The private key
The secret key
Any of the above
What is the primary purpose of data integrity in information security?
To ensure data is accessible at all times
To confirm data has not been modified in transit
To encrypt data for secure storage
To speed up data transfer rates
Which algorithm is used to guarantee data integrity by using a secret key?
MD5 Message Digest
SHA-1 Secure Hash Algorithm
HMAC Hashed Message Authentication Code
RSA Encryption Algorithm
What is the bit length of the MD5 hashing algorithm?
128 bit
160 bit
256 bit
512 bit
Which of the following is NOT a hashing algorithm mentioned in the material?
MD5
SHA-1
SHA-256
AES
What is the primary purpose of comparing hash digests in the context of data security?
To increase the data size
To verify the integrity of data
To encrypt the data
To speed up data transfer
What happens if the recalculated hash digest does not match the original hash stored on the servers?
Access is granted
Data is rehashed
Login is denied
Data is deleted
According to the image, how can hashes be altered?
By changing the hashing algorithm
By modifying the data
By deleting the hash
By compressing the data
What does the term "availability" in data security refer to?
The protection of data from unauthorized access
The measure of how often data is accessible when needed
The encryption level of data
The physical security of data storage devices
What is meant by the term "five nines availability"?
Data is available 99.999% of the time
Data is available 95% of the time
Data is available 90% of the time
Data is available 99.9% of the time
Which of the following is NOT a component of the CIA triad in cybersecurity as shown in the image?
Confidentiality
Integrity
Availability
Authentication
What is the definition of threats in the context of cybersecurity?
Actions that lead to unauthorized data access
The potential possibility of a negative event
Software tools used by cybercriminals
Protocols to prevent data breaches
Which of the following is considered an internal threat?
Cybercriminals
Employees
Nation state-sponsored attackers
Hacktivists
What type of threat do 'Contractors' represent?
External
Internal
Virtual
Physical
Which category does 'Nation state-sponsored attackers' fall under?
Insider threats
Outsider threats
Accidental threats
Natural threats
What distinguishes 'Hacktivists' in the context of threat sources?
They are primarily motivated by profit.
They are typically government agents.
They are driven by ideological beliefs.
They operate only within internal systems.
What is described as a vulnerability due to poor practices in user verification and identity confirmation?
Misconfigured system components
Inadequate authentication
Sensitive data exposure
Insider threat
Which type of vulnerability arises from errors within the programming code itself?
Psychological vulnerability
Injection flaws
Vulnerabilities in the source code
Trust configurations
What type of security vulnerability is associated with the improper handling and protection of sensitive data?
Weak credentialing practices
Sensitive data exposure
Lack of strong encryption
Shared tenancy vulnerabilities
Which vulnerability is related to the potential risks from individuals within the organization?
Insider threat
Misconfigured system components
Psychological vulnerability
Inadequate authentication
What is a Zero Day Attack in the context of cybersecurity?
An attack that occurs on the same day a vulnerability is disclosed to the public.
A type of malware that self-replicates by copying itself to other programs.
Vulnerabilities that have not yet been discovered or disclosed.
An attack that disables security software on the day of its release.
According to the Zero Day Vulnerability Timeline, what is the first step after a vulnerability is discovered?
Vendor releases a fix.
Vulnerability disclosed to vendor.
Vendor works on a fix.
Vulnerability is exploited by attackers.
What does the 'Windows of Vulnerability' in the diagram represent?
The period when a vulnerability is actively being exploited.
The time frame from the discovery of a vulnerability to the release of a fix.
The operating systems affected by zero day attacks.
The duration for which a vendor is aware of the vulnerability.
What does CVE stand for in cybersecurity contexts?
Common Vulnerability Enumeration
Common Vulnerability and Exposures
Common Virus Exposure
Critical Vulnerability and Exposure
What is the purpose of the CVSS?
To provide a list of all known viruses
To score the impact of computer viruses
To score the severity of vulnerabilities from 0 to 10
To track the number of security breaches
What is an exploit in the context of cybersecurity?
A tool to detect vulnerabilities
The act of fixing vulnerabilities
The act of exposing vulnerabilities, leading to a security breach
A software update
Refer to the diagram explaining the process of an exploit affecting a PC. What is the first step in the depicted exploit process?
The exploit page chooses specific exploits
Your PC is infected
You visit a compromised webpage
The webpage contacts a malicious exploit kit page
What does the principle of "least privilege" in cybersecurity entail?
Users are granted all the permissions they request
Users are assigned minimal access or permission
Users are monitored by advanced tracking systems
Users are given temporary access that expires every hour
What is the main idea behind the "Zero trust" security model?
Trusting all network devices by default
Minimal verification of identities
Trusting nothing and requiring strict identity verification
Using traditional security measures without updates
Which of the following is NOT an example of role-based access?
Guest
Employee
Vendor
Anonymous
What does the phrase "Never trust, always verify" suggest in the context of cybersecurity?
Trust is necessary for effective security
Verification is optional in network security
Trust is considered a vulnerability in network security
Trust should be given after proper training
Refer to the diagram below. What does it primarily illustrate about network security?
The effectiveness of no security measures
The layout of a typical corporate network
The concept of Zero Trust architecture in preventing unauthorized access
The process of granting permissions based on roles
What is the primary focus of the "Defense-in-depth" strategy as depicted in the diagram?
Focusing solely on physical security measures
Using a single security method for protection
Implementing multiple layers of security controls
Prioritizing only network security
Which of the following is NOT listed as a component of Defense-in-depth in the diagram?
Application and Data Security
Host Security
Biometric Security
Physical Security
According to the diagram, what does "Host Security" specifically emphasize?
Firewall and sandboxing
ID cards and CCTV
Timely patching of AV and restricting unwanted services
Risk management and incident response
What is the role of "Network Security" in the Defense-in-depth strategy as shown in the diagram?
Monitoring and alerting
Encrypting sensitive data
Incident response management
CCTV surveillance
What does a triple-homed firewall, also known as a screened subnet or DMZ, utilize in its network architecture?
Two network interfaces
Three network interfaces
Four network interfaces
No network interfaces
What is the primary purpose of a DMZ (Demilitarized Zone) in network architecture?
To provide a secure area for servers that need to be accessible from the internet
To increase the speed of the internal network
To serve as the only access point for internal users
To monitor data usage and limit bandwidth
What is the purpose of implementing separation of duties in cybersecurity?
To ensure that multiple people are responsible for a single task
To prevent any single person from having complete control over a transaction
To allow one person to control all aspects of a transaction
To make the system less secure
What is a honeypot primarily used for in cybersecurity?
To increase the efficiency of internal network servers
To serve as the main defense against external attacks
To attract, detect, and deflect cybercriminals from legitimate targets
To store large amounts of data securely
According to the diagram, what role does the firewall play in the network security setup involving a honeypot?
It acts as the primary storage for data
It serves as a barrier between the attacker and the internal network
It is used to directly attract cybercriminals
It replaces the need for a honeypot
What is required for Multi-Factor Authentication (MFA) to verify identity?
Passcode, Biometrics, Smart Card, VPN Connection
Username, Password, Security Questions
Email Verification, Phone Call, Security Token
Fingerprint, Eye Scan, Voice Recognition
What does SSO stand for in authentication systems?
Single Sign-On
Secure Socket Layer
System Sign-Out
Server-Side Operations
What is the primary use of LDAP in network environments?
Encrypting data transmissions
Accessing and maintaining directory information
Monitoring network traffic
Filtering spam emails
What port number is used by LDAP for directory access?
443
389
80
25
Which protocol uses port number 636 for secure directory access?
HTTPS
LDAPS
FTPS
SMTPS
What protocol does RADIUS use at the transport layer?
TCP
SSL
UDP
HTTP
Which port does RADIUS use for authentication?
49
1812
1813
80
What does TACACS+ use to encrypt data?
Encrypts passwords only
Encrypts the entire packet
Does not encrypt data
Encrypts using SSL only
Which of the following is a characteristic of TACACS+?
It is a lightweight protocol
It uses UDP
It is a Cisco proprietary protocol
It mainly uses for Network Access
What unique feature does RADIUS protocol combine?
Authentication and Encryption
Authentication and Authorization
Encryption and Compression
Authorization and Accounting
