NEW
Font size
WorksheetsDomains 1-2 Sec+
Total questions: 25
Worksheet time: 13mins
A hacker at CyberThreat Inc. sends an email with a malicious link that, when clicked, downloads malware onto the victim's system. What type of attack is this?
SQL Injection
Phishing
Man-in-the-middle
Cross-site scripting
Which of the following is an administrative control?
Antivirus software
Security awareness training
Biometric authentication
Intrusion prevention system
Which type of threat intelligence provides real-time alerts about current attack trends?
Tactical
Strategic
Operational
Technical
What makes a zero-day vulnerability especially dangerous?
It can only be exploited in specific conditions
It is patched within 24 hours
It has no available fix at the time of discovery
It only affects open-source software
Which security framework is commonly used for managing risk in U.S. government organizations?
ISO 27001
NIST Cybersecurity Framework
PCI DSS
ITIL
SecureBank Ltd. detects multiple failed login attempts from different IP addresses on an employee account. Which attack is likely occurring?
Phishing
Brute force attack
SQL Injection
DNS Spoofing
An attacker at DataSafe Inc. exploits a software bug to gain administrator rights on a system. What type of attack is this?
SQL Injection
Privilege Escalation
Cross-site scripting
Session Hijacking
A hidden program at TechSecure Corp. records keystrokes and sends them to an attacker. What type of malware is this?
Rootkit
Ransomware
Keylogger
Worm
Which attack involves inserting malicious SQL statements into a web form to access a database?
Cross-Site Scripting (XSS)
SQL Injection
DNS Poisoning
Session Hijacking
What security method should XYZ Wireless Corp. use to prevent evil twin attacks?
WPA2-PSK
VPN
Captive portal
MAC filtering
What is the primary purpose of a firewall in network security?
To block unauthorized access
To encrypt data
To monitor network traffic
To provide VPN services
Which type of malware disguises itself as legitimate software to trick users into installing it?
Spyware
Trojan Horse
Adware
Worm
What is the main function of a honeypot in cybersecurity?
To encrypt communications
To provide backup for critical systems
To store sensitive data securely
To attract and analyze potential attackers
Which type of attack involves intercepting and altering communication between two parties without their knowledge?
Phishing
Man-in-the-middle
SQL Injection
Denial of Service
What is the primary purpose of implementing a DMZ (Demilitarized Zone) in network architecture?
To encrypt sensitive information
To provide a backup for data
To monitor employee activity
To isolate internal networks from external threats
Which of the following is a physical security measure?
Firewall
Biometric access control
Antivirus software
Encryption
Which protocol is primarily used to secure communications over a computer network?
HTTP
SSL/TLS
FTP
SMTP
What is the main purpose of two-factor authentication (2FA) in cybersecurity?
To enhance security by requiring two forms of verification
To provide a backup for passwords
To monitor network traffic
To encrypt data
Which type of malware replicates itself to spread to other computers?
Adware
Spyware
Worm
Trojan Horse
What is the primary function of an intrusion detection system (IDS) in cybersecurity?
To encrypt sensitive data
To detect and alert on suspicious activities
To manage user identities
To prevent unauthorized access
Which type of attack involves overwhelming a system with traffic to make it unavailable to users?
SQL Injection
Man-in-the-middle
Denial of Service (DoS)
Phishing
What is the main purpose of encryption in data security?
To monitor data access
To compress data for storage
To hide data from unauthorized users
To backup data
What is the primary goal of implementing a VPN in a corporate network?
To block malware
To monitor employee productivity
To provide secure remote access
To increase internet speed
Which of the following is a common method used to protect against phishing attacks?
Using strong passwords
Implementing email filtering
Installing antivirus software
Encrypting data
What is the main function of a security information and event management (SIEM) system?
To encrypt sensitive data
To provide real-time analysis of security alerts
To manage user identities
To prevent unauthorized access
