During an SSL handshake, asymmetric encryption is used to:

Which best explains why HTTPS still relies on both asymmetric and symmetric encryption?

To enhance SSL/TLS security in a banking application, which combination of actions is most effective?

What is the main reason organizations prefer TLS 1.3 over earlier SSL versions?

A financial firm upgrades all servers to TLS 1.3 to improve web security. During testing, they notice connections establish faster with fewer round trips. What technical change in TLS 1.3 enables this improvement?

While accessing a banking website, the browser warns “certificate not trusted.” The certificate appears valid but signed by an unknown issuer. What is the most probable cause?

A company evaluates SSL 3.0 versus TLS 1.2 for secure communications. After analysis, they decide TLS 1.2 is more secure. Which main factor supports this decision?

In the Secure Electronic Transaction (SET) protocol, which parties must exchange digital certificates to ensure authentication and secure payment flow?

An e-commerce site tested both TLS and SET for online payments. SET ensured layered verification but added delay and complexity. Why would the company choose TLS instead?

A system admin enables SSH key-based login, but users can still access servers using passwords. Which configuration option must be modified to enforce key-only access?

A web developer is unsure whether to use TLS or SSH. TLS protects the website's customer transactions, while SSH secures remote administration. Which mapping of purpose is correct?

Security logs reveal repeated brute-force login attempts on an SSH server from foreign IPs. Which preventive step best strengthens protection?

You are designing an e-commerce security model that requires safe online payments and protected administrative access. Which combination provides end-to-end security?

A site enforces both TLS and HSTS policies. Even when users manually type “http://”, the browser automatically redirects to “https://”. What added protection does HSTS provide?

An organization’s cloud VMs experience repeated infections even after antivirus cleanup. Logs show malware spreading automatically across networked machines. Which strategy best prevents further spread?

A user downloads what seems to be a PDF reader update, but it installs backdoor access to the attacker. Which malware type fits this scenario?

A malicious code attaches itself to legitimate files and activates when users open them, causing slowdowns in a shared cloud workspace. Identify the malware type.

In a cloud environment, which configuration most effectively limits the damage from self-replicating worms?

You are designing a multi-tenant cloud system. How can you prevent a Trojan from compromising multiple tenants if one VM is infected?

An admin finds a process sending sensitive data to an unknown IP from a trusted application binary. What does this imply?

A company uses cloud antivirus that failed to detect a new worm variant. What next step shows higher security maturity?

You are tasked to strengthen malware defenses in a SaaS platform. Which combined approach provides layered protection?

A Trojan hides as a cloud management plugin and steals API tokens. Which preventive control would best detect such behavior early?

A company notices that some unauthorized inbound connections are blocked, but some malicious traffic still passes through. Which firewall type is most likely in use?

A network admin must choose a firewall type to monitor traffic for specific applications like HTTP and SMTP. Which firewall is most effective for this requirement?

An organization implements an IDS that alerts on abnormal login attempts but does not block them. Which IDS type is this?

A bank wants to automatically block traffic that shows known attack signatures in real time. Which system should they implement?

During a network audit, the admin finds high CPU usage on the firewall. It performs both stateful packet inspection and deep application inspection. What is a probable cause?

You are designing a hybrid security system for a corporate network. Which combination provides both prevention and monitoring?

Alerts show multiple failed SSH login attempts on the network. The system blocks IPs automatically after 5 attempts. Which system feature is being demonstrated?

A company is considering a next-generation firewall that can detect and block malware in HTTPS traffic. Why is this firewall better than a traditional packet-filtering firewall?

Design a secure network segment for a DMZ with web servers. Which approach ensures attackers cannot access internal servers directly?

An IPS generates frequent false positives, blocking legitimate traffic. What is the best corrective action?

A cloud-hosted server starts generating excessive outbound traffic to random IPs without user activity. What type of malware behavior does this indicate?

SSL/TLS protocols are commonly used in websites that handle sensitive data such as banking or e-commerce. What does this protocol primarily ensure during data transmission?

During an SSL handshake, which component is mainly responsible for verifying the identity of a website?

The TLS protocol improved upon SSL by adding stronger encryption algorithms and better handshake mechanisms. What version of TLS is currently considered secure for use?

In the Secure Electronic Transaction (SET) protocol, which cryptographic method is mainly used to secure credit card details?

SSH is often used by system administrators to access servers remotely. Which feature makes SSH secure compared to Telnet?

A virus needs user intervention to spread, while a worm spreads automatically. Which of the following best describes a Trojan horse?

Which of the following best describes a stateful inspection firewall?

In cloud computing, multi-tenancy introduces a major security risk. What does multi-tenancy mean in this context?

What is the main advantage of using an Intrusion Prevention System (IPS) over an IDS?

Which statement correctly differentiates a Trojan horse from a virus?

What is the main function of a firewall in network security?

Which type of firewall filters traffic based on source and destination IP address, port, and protocol?

What distinguishes an Intrusion Detection System (IDS) from an Intrusion Prevention System (IPS)?

Which of the following is a key security concern in cloud services and applications?

A company suffered a DDoS attack, what is the first line of defense?