Which two actions can help prevent malware infections? (choose two)

A CEO receives a fake email from their “IT department” asking to reset their password. This is an example of which type of attack?

A user notices unwanted pop-ups and advertisements while browsing. Which type of malware is likely responsible?

Which of the following are examples of malware? (Choose two)

Keyloggers are mainly used for tracking and advertising purposes

A worm needs user interaction to spread to other devices

A company notices that an unknown user has been attempting to connect to their servers using brute-force methods. What type of threat is this?

In SSL/TLS certificates, which encryption algorithm is commonly used to verify the server’s identity?

Which encryption algorithm is preferred for securing real-time video streaming due to its speed?

Which hashing algorithm would be appropriate for ensuring data integrity in blockchain transactions?

Which symmetric encryption algorithm uses a 128-bit block size and variable key lengths?

For securing IoT devices with limited processing power, which lightweight symmetric algorithm is often used?

 Which type of attack involves overwhelming a server with requests to make it unavailable?

What encryption method is often used to protect passwords stored in databases?

What is a common use of the Nmap tool in security?

 Which tool monitors network traffic for suspicious activity in real-time?

An antivirus software scans for and removes which type of the following threats?

Which of the following are common goals of ransomware attacks? (Choose two)

Which tools can a hacker use to scan a network for open ports? (Choose two)

An organization tracks and logs each entry into a data center. Reviewing these logs helps fulfill which security objective?

Which two tools or practices enhance data integrity?

A denial-of-service (DoS) attack mainly impacts which component of the CIA Triad?

An online store asks for a customer’s fingerprint in addition to their password. What security measure is this?

An organization uses VLANs to separate network traffic between its sales and HR departments. This primarily serves to _______

Which of the following practices help prevent data breaches? (Choose two)

Which two principles are most critical in a hospital’s electronic health record system?

Which of these combinations best illustrates two-factor authentication?

A retail chain faces frequent thefts and unauthorized access in its warehouse storage areas. Which two physical security solutions could help reduce these incidents? (Select two)

A company’s data center has biometric scanners and security guards in place to restrict access. What kind of security control is this?

An employee installs software that secretly records passwords entered on their device. What type of malware is this?

Ransomware is only found on Windows systems

Leaving software unpatched in a public network environment can result in what kind of vulnerability?

What type of attack targets an SQL database using the input field of a user?

Storing passwords in plain text within a database is an example of a ___________

Which encryption algorithm was replaced by AES due to vulnerabilities?

Which measure is most effective in preventing brute-force attacks on passwords?

Which encryption algorithm is commonly used to secure online transactions, such as credit card payments?

If a company wants to encrypt large volumes of data quickly without compromising security, which algorithm should they choose?

Zero-day vulnerabilities are immediately exploitable weaknesses unknown to the software vendor.

A bank installs anti-malware software on all employee computers to prevent infection. What is the main purpose of this security measure?

In a Man-in-the-Middle attack, what is the attacker attempting to do?

Which of these would be considered a vulnerability rather than a threat?

A hacktivist is a hacker who breaks into systems to expose information for political or social causes.

 Phishing emails often use social engineering to trick users into revealing sensitive information.

Which type of hacker is known for exploiting security weaknesses to improve security systems?

Which technology enhances confidentiality when accessing a public Wi-Fi network?

Which of the following best describes an SQL Injection attack?

Tools like John the Ripper are used for password cracking by systematically guessing passwords.

What is the main goal of a security guard stationed at the entrance of a restricted area in a corporate building?

What is the main purpose of CCTV in physical security?

A hospital wants to protect sensitive patient information stored in a physical records room. Which two measures should the hospital implement to secure the room? (Select two)

Which of the following actions can improve physical security at an office? (Choose two)

In a scenario where a company faces frequent power outages, which solution would help ensure continuous power to critical systems?

An organization creates daily backups of its customer database to an offsite location. This measure primarily protects against ___________

Which two of the following are common internal threats to information security?

Which of the following is a primary reason organizations require information security?

 What is considered a critical element of information security that ensures only authorized users can access certain resources?

What two elements support integrity in an online shopping platform’s payment system?

What are two effective ways to ensure data availability?

Confidentiality ensures that only authorized personnel can access sensitive data.

An organization uses VLANs to separate network traffic between its sales and HR departments. This primarily serves to __________

To prevent malware, an organization restricts employee access to only necessary data. Which principle is this?

Which document outlines an organization’s strategy for dealing with security breaches?

A company implements digital certificates for authenticating its servers to users. This helps achieve which security goal?

What are two primary methods used to deliver ransomware?

Which type of malware encrypts files on a computer and demands payment to decrypt them? 

An employee receives an email with an urgent message asking for their login credentials. This is an example of what kind of attack?

Allowing users to use easily guessable passwords, like “12345,” represents a vulnerability in ____________

A company network is slow and seems overloaded. The IT team suspects an attack. Which is likely?

Which hashing algorithm is currently recommended for secure data hashing due to its resistance to collision attacks?

Which symmetric encryption algorithm is currently the standard for protecting government data?

Which type of encryption uses separate keys for encryption and decryption?

A customer service employee receives an email claiming to be from a bank, requesting verification of account details. This is an example of __________

An anti-virus software scans for and removes which type of the following threats?

A disgruntled employee with access to sensitive data is considered as __________

What tool might a hacker use to capture and analyze network traffic?

A company installs fences, gates, and security guards at the entrance to its data center. What physical security strategy is this an example of?

What is the primary difference between passive and active attacks?

In the context of information security, what is a ‘threat’?

An attacker scans a company’s network for open ports and available services without attempting to breach it. This is an example of ____________

What measures support the confidentiality of customer data? (Choose two)

Which two are examples of human-made threats to information security?

Rootkits are easy to detect with standard antivirus software

Which of the following are common signs of a malware infection? (Choose two)

Which algorithm is best suited for generating digital signatures due to its support for key pair generation?

What encryption algorithm is commonly used to secure Wi-Fi networks in WPA2 encryption?

What are two common signs of a phishing email?

Which of the following describes a white-hat hacker?

What is a popular hacking tool for simulating network attacks on Windows environments?

Script kiddies are highly skilled hackers who create sophisticated tools.

Which type of hacker performs illegal activities for financial gain?

Keyloggers record every keystroke on a device to capture passwords and other data.

Ransomware attacks typically aim to impact which aspect of the CIA Triad?

Encryption ensures data integrity by preventing unauthorized access.

What two measures are important for network availability in a university? (choose two)

 Which malware types typically involve data theft? (Choose two)

 A hacker who discloses a security flaw to a company without expecting payment is known as a _______

 An organization implements a backup system to protect against data loss. Which principle of information security does this support?

An organization has adopted a policy where users are only granted access to data necessary for their roles. This approach is known as ___________

What is the primary difference between passive and active attacks?

An attacker sends a large number of requests to a website, causing it to slow down and become inaccessible. This is an example of what attack?

What is the purpose of using a firewall in a network?

A financial institution needs to safeguard its ATMs from physical tampering and vandalism. Which two security measures would be most effective? (Select two)

 What methods protect data availability during a server outage? (choose two)

An IT administrator configures an Access Control List (ACL) to allow only certain IP addresses to connect to a server. This measure primarily protects against _________

Which two principles are at risk when an employee downloads sensitive data onto an unsecured device?

Spyware is often used to collect user data without consent

What are the three main goals of information security?