wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Cybersecurity & Information Technology Fundamentals Exam

Total questions: 201

Worksheet time: 2hrs 41mins

Name
Class
Date
1.

Why is explicit written permission required before using Nmap on a target system?

a)

To increase scan accuracy

b)

To ensure OS detection works

c)

To avoid legal violations and unauthorized access

d)

To reduce scan time

2.

Which term describes reconnaissance that directly interacts with the target system?

a)

Passive reconnaissance

b)

Active reconnaissance

c)

Shadow reconnaissance

d)

Closed reconnaissance

3.

Which is an example of passive reconnaissance?

a)

Using WHOIS and DNS records

b)

Running NSE scripts

c)

Performing an Nmap SYN scan

d)

Brute-forcing SSH

4.

What is the primary purpose of a Rules of Engagement (RoE) document?

a)

To hide the tester’s identity

b)

To define scope, permission, and testing limits

c)

To provide target passwords

d)

To reduce scan time

5.

Which CIA principle is most likely affected when aggressive scans disrupt services?

a)

Authentication

b)

Availability

c)

Integrity

d)

Confidentiality

6.

Why should testers start with non-aggressive scans on production systems?

a)

To bypass firewalls

b)

To speed up scanning

c)

To reduce the risk of crashing or interrupting services

d)

To avoid incomplete results

7.

Why should NSE scripts be tested in a lab before production use?

a)

They always require root access

b)

To increase OS detection accuracy

c)

Some scripts may disrupt or crash services

d)

They do not work on production systems

8.

How does a vulnerability scan differ from a penetration test?

a)

Vulnerability scans never produce false positives

b)

Pen tests are automated

c)

Pen tests demonstrate real impact; scanners primarily identify weaknesses

d)

Vulnerability scans show real exploitation chains

9.

What is a limitation of vulnerability scanners?

a)

They replace penetration tests entirely

b)

They never require configuration

c)

They may generate false positives or false negatives

d)

They cannot scan open ports

10.

What describes a black-box penetration test?

a)

Tester must avoid exploitation

b)

Tester is given full internal knowledge

c)

Tester has minimal knowledge and simulates an external attacker

d)

Tester only performs vulnerability scans

11.

In MITRE ATT&CK, identifying running services and host information falls under:

a)

Credential Access

b)

Persistence

c)

Discovery

d)

Impact

12.

If default credentials are found during a pentest, the tester should:

a)

Publish them online

b)

Always exploit fully

c)

Ignore them

d)

Use them only if allowed in the RoE

13.

Ethical reporting requires:

a)

Hiding details to avoid responsibility

b)

Providing complete findings privately to the client

c)

Selling findings for profit

d)

Sharing results publicly

14.

Why include a rollback plan in the RoE?

a)

To avoid documenting findings

b)

To enable fast escalation

c)

To increase scan performance

d)

To restore systems if scanning causes service issues

15.

What is the risk of scanning external systems without permission?

a)

Legal penalties under computer misuse laws

b)

Improved OS fingerprinting

c)

Faster learning

d)

Higher accuracy

16.

Why adjust timing/rate limits when scanning sensitive networks?

a)

To reduce risk of overwhelming production systems

b)

To bypass encryption

c)

To avoid IDS detection

d)

To increase scan power

17.

Which technique is least detectable?

a)

Passive OSINT

b)

SYN scan (-sS)

c)

Full connect scan (-sT)

d)

NSE script scan

18.

If a client forbids service disruption but requests deep exploitation testing, what should the tester do?

a)

Continue without notifying

b)

Renegotiate scope

c)

Fully exploit anyway

d)

Cancel the report

19.

Responsible disclosure during a contract means:

a)

Selling vulnerabilities to third parties

b)

Hiding critical vulnerabilities

c)

Posting the exploit online immediately

d)

Reporting findings privately and professionally to the client

20.

Which is a passive source of target information?

a)

UDP scan

b)

SSH enumeration scripts

c)

Job postings and publicly available DNS data

d)

SMB brute force

21.

Why keep detailed logs during testing?

a)

To confuse incident responders

b)

To enable repeat attacks

c)

To increase scan speed

d)

To provide evidence of permission and methodology

22.

Which statement best distinguishes a vulnerability scan from a penetration test?

a)

Pen tests avoid tools and only use manual steps

b)

Scans exploit systems to prove impact and persistence

c)

Pen tests only list missing patches without context

d)

Scans identify weaknesses with automation and breadth

23.

In a black-box penetration test, what information is typically provided to the tester at the start?

a)

Partial source code and test accounts provisioned

b)

Full network diagrams and admin credentials

c)

Only high-level scope and targets defined

d)

Detailed asset inventory and internal topology

24.

Which MITRE ATT&CK tactic best matches credential dumping?

a)

Credential Access tactic in ATT&CK matrix

b)

Persistence tactic for maintaining footholds

c)

Reconnaissance tactic for external scanning

d)

Discovery tactic for host enumeration

25.

Why might a penetration test uncover issues that a vulnerability scan missed?

a)

Testers chain findings creatively with validation

b)

Scanners always output perfectly accurate results

c)

Testers skip exploitation to reduce effort

d)

Scanners perform deep manual verification steps

26.

During an engagement, you detect clear signs of ongoing malicious activity on a client system. What is the most appropriate immediate action?

a)

Notify the client following the rules of engagement

b)

Ignore and proceed to preserve test timeline

c)

Attempt to attack the adversary to stop activity

d)

Post an urgent warning on social media platforms

27.

A routine scan unexpectedly degrades a production service. What should be your first response?

a)

Disconnect and leave without any coordination

b)

Notify the client per the communication plan

c)

Hide the event to avoid delaying the schedule

d)

Restart the scan to finish quickly for reporting

28.

Before publishing a pentest case study, what is required to remain ethical and professional?

a)

List all credentials used during exploitation

b)

Disclose public IP addresses used in testing

c)

Release the full exploit code for transparency

d)

Obtain client permission and anonymize details

29.

Cybersecurity is also called:

a)

Ethical Coding and Scripting

b)

Cloud Engineering and Architecture

c)

InfoSec, IA, or System Security

d)

Data Science, ML, or Analytics

30.

The main purpose of cybersecurity is to ensure:

a)

Automation, AI, Robotics

b)

User experience only

c)

Speed, cost, efficiency

d)

Confidentiality, Integrity, Availability

31.

Which of the following is NOT a cyber threat?

a)

Malware

b)

Phishing

c)

Debugging

d)

SQL Injection

32.

Phishing mainly targets:

a)

IoT devices primarily

b)

Users via deception

c)

Servers using protocols

d)

Cloud providers only

33.

A DDoS attack is most similar to:

a)

A thief breaking a lock

b)

Too many cars clogging a road

c)

A virus infecting a file

d)

Someone stealing passwords

34.

Ransomware works by:

a)

Exploiting SQL vulnerabilities directly

b)

Spying on emails silently

c)

Encrypting files and demanding payment

d)

Flooding the network with traffic

35.

Which attack inserts malicious code into databases?

a)

MITM

b)

DDoS

c)

SQL Injection

d)

Zero-day exploit

36.

An attacker secretly reading messages between two people is:

a)

SQL Injection

b)

Man-in-the-Middle

c)

Insider threat

d)

DoS

37.

What makes Zero-day exploits dangerous?

a)

They are insider-only threats

b)

They affect only old systems

c)

No patch exists yet

d)

They are predictable

38.

Network Security protects against:

a)

Unauthorized access to networks

b)

Data encryption only

c)

Malware in applications

d)

Employee errors primarily

39.

Which tool belongs to Network Security?

a)

Word Processor

b)

Text Editor

c)

Photoshop

d)

VPN

40.

A safe approach to scanning production environments is to:

a)

Start with aggressive full-range scans

b)

Begin with limited, slow scans and monitor impact

c)

Disable monitoring tools entirely

d)

Only use UDP flooding always

41.

Why is documenting scope and exclusions in a Rules of Engagement critical?

a)

It lets testers do anything outside scope

b)

It protects both sides by defining boundaries and risks

c)

It is only useful for billing purposes

d)

It makes tests less effective by preventing exploitation

42.

Which cyber threat primarily relies on social engineering to steal credentials?

a)

Ransomware encrypting user files

b)

Phishing through deceptive messages

c)

DDoS exhausting bandwidth resources

d)

SQL Injection altering database queries

43.

During a Man-in-the-Middle attack, the attacker can:

a)

Encrypt files for ransom

b)

Modify messages between parties

c)

Overload servers with traffic

d)

Exploit unknown vulnerabilities

44.

A primary defense against SQL Injection is to:

a)

Use parameterized queries

b)

Increase network bandwidth

c)

Rely on antivirus scans

d)

Disable user authentication

45.

Using fake apps to steal user data is an example of failing:

a)

Endpoint Security

b)

Application Security

c)

Network Security

d)

IoT Security

46.

Which best protects laptops and smartphones?

a)

SQL Injection filters

b)

DDoS mitigation

c)

Endpoint Security tools

d)

Firewalls only

47.

IoT Security mainly addresses:

a)

Servers in data centers

b)

Firewalls

c)

Connected smart devices

d)

Software coding bugs

48.

Which is part of Operational Security (OpSec)?

a)

Employee training & access control

b)

VPN installation

c)

Mobile device encryption

d)

DDoS filtering

49.

Cloud Security deals with:

a)

Insider misuse only

b)

AWS, Azure, GCP

c)

MS Word

d)

SQL Injection

50.

Which of these showed the early need for digital protection?

a)

Creeper virus & Reaper antivirus

b)

WannaCry ransomware

c)

Zeus Trojan

d)

Stuxnet worm

51.

Today, hackers exploit mostly:

a)

Strong passwords

b)

Weak passwords & outdated systems

c)

Firewalls

d)

Up-to-date software

52.

A company suffers data breach → loses trust & money. This is:

a)

Availability issue

b)

Malware installation

c)

Business consequence

d)

Integrity risk only

53.

For individuals, the top cyber-attack consequences include:

a)

Identity theft & fraud

b)

High CSAT

c)

Free software

d)

Increased storage

54.

Which tool tracks insider misuse patterns?

a)

VPN

b)

UEBA

c)

Antivirus

d)

Load Balancer

55.

SIEM platforms are for:

a)

Detecting phishing emails

b)

Collecting & analyzing security logs

c)

Encrypting files only

d)

Password generation

56.

VPN is mainly used for:

a)

Replacing firewalls

b)

Managing insider threats

c)

Encrypted internet traffic

d)

Faster internet

57.

Best practice for passwords:

a)

Short, simple password

b)

Use one password everywhere

c)

Share with IT staff

d)

Strong & unique, use password manager

58.

Which is NOT a safety step?

a)

2FA

b)

Software updates

c)

Clicking unknown links

d)

Awareness training

59.

Cybersecurity challenges include:

a)

Declining internet use

b)

Decreasing reliance on digital data

c)

Sophisticated evolving attacks

d)

Static threats

60.

Confidentiality ensures:

a)

Only authorized users access data

b)

Data is always accurate

c)

Systems always available

d)

Files backed up

61.

Which example shows confidentiality?

a)

Counting apples to check box size

b)

End-to-end encrypted WhatsApp chat

c)

Firewall load balancer

d)

Cloud backup server

62.

Outdated DES encryption threatens:

a)

Redundancy

b)

Integrity

c)

Availability

d)

Confidentiality

63.

Insider emailing trade secrets = breach of:

a)

Disaster recovery

b)

Integrity

c)

Confidentiality

d)

Availability

64.

In Windows, what is the main purpose of Active Directory (AD)?

a)

To manage printers and scanners

b)

To centralize user and device management across a network

c)

To store files across different drives

d)

To back up system files automatically

65.

Which Windows tool is used to manage Group Policy Objects (GPOs)?

a)

taskmgr.exe

b)

regedit.exe

c)

gpedit.msc

d)

msconfig

66.

What is the function of the “Administrators” group in Windows?

a)

Full control over system settings and configurations

b)

Perform basic user tasks

c)

Limited access to files and folders

d)

Access shared drives only

67.

The “Users” group in Windows has:

a)

Access to system registry files

b)

Permission to modify GPOs

c)

Limited permissions; cannot install software

d)

The same privileges as Administrators

68.

The “Guests” group is typically used for:

a)

Permanent user accounts

b)

Network administration

c)

Installing new software

d)

Temporary or one-time access

69.

In an organization, what does a “Group” represent in Windows?

a)

A single administrator

b)

A shared drive

c)

A type of application

d)

A collection of user accounts

70.

In the analogy, if Users = Employees, then Groups = ?

a)

Passwords

b)

Devices

c)

Buildings

d)

Departments

71.

Which default group can back up and restore files without full system access?

a)

Power Users

b)

Network Configuration Operators

c)

Backup Operators

d)

Administrators

72.

Which command lists local groups in PowerShell?

a)

netstat

b)

ipconfig

c)

net users

d)

net localgroup

73.

What is the purpose of GPOs (Group Policy Objects)?

a)

To configure network cabling

b)

To enforce policies for users and computers

c)

To manage IP addressing

d)

To create new user accounts

74.

Which of the following is not a default Windows group?

a)

Administrators

b)

Guests

c)

Power Users

d)

Network Engineers

75.

Active Directory accounts usually follow what format?

a)

name.domain@work

b)

admin.root@network

c)

company@user.net

d)

user@company.local

76.

A user is able to log in to any office computer using one account. This is possible because of:

a)

Local Users and Groups

b)

Active Directory domain integration

c)

Manual user replication

d)

Remote Desktop access

77.

What is the purpose of “Network Configuration Operators”?

a)

To change network settings without being admin

b)

To configure and test applications

c)

To manage Active Directory users

d)

To create new domains

78.

In Windows, where can you view all local groups?

a)

Device Manager

b)

Control Panel → Network Settings

c)

Computer Management → Local Users and Groups → Groups

d)

Services.msc

79.

The function of a GPO includes all except:

a)

Modifying DNS records

b)

Setting startup/shutdown scripts

c)

Restricting software installation

d)

Enforcing password policies

80.

In an organization, IT changes Vera’s department. Her access automatically updates because:

a)

She has a static IP

b)

Local policy overrides AD

c)

AD updates her group membership

d)

Her GPO is disabled

81.

Which group allows a user to connect remotely to a PC?

a)

Remote Desktop Users

b)

Administrators

c)

Backup Operators

d)

Users

82.

“Everyone” group in Windows includes:

a)

Only local users

b)

Guest accounts only

c)

All users with network access

d)

Only administrators

83.

What is the relationship between Users, Groups, and Permissions?

a)

Users belong to permissions; groups manage files

b)

Users belong to groups; groups are assigned permissions

c)

Permissions control users directly without groups

84.

Which tool allows centralized management of password policies in Windows?

a)

GPO

b)

Firewall

c)

Device Manager

d)

Event Viewer

85.

Why is Active Directory important in security?

a)

It increases internet speed

b)

It blocks internet access

c)

It enforces consistent access control and identity management

d)

It prevents hardware failure

86.

In the AD analogy, who acts as the “security guard at the gate”?

a)

The system firewall

b)

The domain controller

c)

The AD service itself

d)

The DNS server

87.

What would happen if GPOs were misconfigured?

a)

Users could lose access or gain excessive permissions

b)

DNS records would update faster

c)

Network speed would increase

d)

IP conflicts would disappear

88.

What does the “Power Users” group signify?

a)

A group for network management only

b)

A group limited to guest access

c)

A group with full admin rights

d)

Outdated group with privileges between Users and Administrators

89.

Which of the following tasks can a Backup Operator perform?

a)

Change registry entries

b)

Restore files even without permission

c)

Edit GPOs

d)

Add users to AD

90.

Vera’s password policy requires complexity rules and 90-day expiration. This is enforced via:

a)

Registry tweaks only

b)

Local security policy only

c)

User account properties

d)

GPO settings

91.

Vera’s office uses the address 192.168.10.5 for her laptop. When she tries to access a public website, her router translates this private address to 41.210.55.12 before sending it out. What process is responsible for this translation?

a)

DNS Resolution

b)

NAT

c)

DHCP

d)

ARP

92.

Kofi is configuring a small home Wi‑Fi network. He wants all devices to share one internet connection using a single public IP. Which feature allows this?

a)

Subnetting

b)

NAT

c)

DHCP

d)

DNS

93.

A network administrator notices that internal computers have addresses like 172.20.15.7 and 172.18.4.5. Which class of private IPs are these computers using?

a)

Class C

b)

Class B

c)

Class A

d)

Class D

94.

An IT department needs to assign 50 IPs to a subnet. Which CIDR notation would best fit their need with minimal waste?

a)

/28

b)

/25

c)

/26

d)

/27

95.

Vera observes the IP address 2001:0db8::1 on her smart thermostat. What can she conclude about the protocol being used?

a)

It’s IPv4 using NAT

b)

It’s a public IPv4 address

c)

It’s IPv6 using hexadecimal format

d)

It’s IPv4 in binary form

96.

A network device shows the address 192.168.1.10 with subnet mask 255.255.255.0. How many usable hosts can exist in this subnet?

a)

254

b)

253

c)

256

d)

255

97.

Your ISP assigns you a public IP 41.210.55.12. Which of the following statements is TRUE about this address?

a)

It’s only used within your local network

b)

It’s assigned by your router

c)

It’s globally routable and visible on the internet

d)

It belongs to a private address space

98.

During network troubleshooting, Emmanuel sees an IP 10.0.5.25. Which environment is most likely using it?

a)

A web hosting service

b)

A multinational company network

c)

A DNS server farm

d)

A small home router

99.

A system administrator notices that devices with private IPs like 192.168.0.100 are communicating online without having public IPs. Which mechanism makes this possible?

a)

Subnetting

b)

NAT

c)

DNS

d)

IPv6 Tunneling

100.

A company uses 192.168.10.0/24 and needs to allocate IPs to three departments: HR (10 hosts), IT (50 hosts), and Finance (20 hosts). According to VLSM, which subnet mask will IT use?

a)

/26

b)

/25

c)

/28

d)

/27

101.

Fatima converts the IP 192.168.1.1 into binary and gets 11000000.10101000.00000001.00000001. How many bits in total are represented?

a)

8

b)

32

c)

64

d)

16

102.

You are given 192.168.1.0/27. What is the maximum number of usable IP addresses in this subnet?

a)

62

b)

32

c)

30

d)

16

103.

Christabel configures an IPv4 network and runs out of available IPs. She decides to upgrade to IPv6. What key advantage will she gain?

a)

Lower latency

b)

Better broadcast control

c)

Virtually unlimited address space

d)

Simpler addressing format

104.

Nabil notices his office PCs have IPs like 192.168.0.5 and 192.168.0.50, but both access the internet using the same public IP. Which concept explains this?

a)

Subnetting

b)

DNS

c)

CIDR

d)

NAT

105.

A router receives a packet from 192.168.1.100 destined for 142.250.190.78 (Google). Before forwarding, it changes the source IP to 41.210.55.12. What must it record in its NAT table?

a)

Only public IP

b)

Private IP and corresponding public IP with ports

c)

Only DNS entry

d)

Destination and source MAC address

106.

Vera is tasked with converting an IPv4 address like 182.168.1.2 into binary. How many total bits will the binary form contain?

a)

24

b)

16

c)

32

d)

8

107.

An IPv6 address supports 2^128 possible combinations. Which analogy best represents this scale?

a)

A small village directory

b)

A mega city with infinite houses

c)

A city with fixed postcodes

d)

A limited street with a few houses

108.

Kobby configures the subnet 192.168.10.0/28 for HR. How many usable host addresses are available in this subnet?

a)

32

b)

30

c)

16

d)

14

109.

To handle a large number of devices, IPv6 primarily relies on which feature instead of IPv4’s NAT?

a)

Port forwarding

b)

Expanded address space

c)

CIDR only

d)

DNS caching

110.

A network engineer creates the subnet 192.168.1.0/26 for a branch office. How many total IP addresses (including network and broadcast) are in this subnet?

a)

64

b)

62

c)

32

d)

128

111.

What is the primary purpose of Nmap?

a)

To assign IP addresses

b)

To encrypt communications

c)

To scan networks and discover open ports

d)

To manage users

112.

Who created Nmap?

a)

Vint Cerf

b)

Fyodor (Gordon Lyon)

c)

Linus Torvalds

d)

Tim Berners-Lee

113.

Which of the following is a common use of Nmap?

a)

Editing videos

b)

Managing DNS zones

c)

Network discovery and auditing

d)

Creating websites

114.

Which protocol uses a three-way handshake?

a)

ICMP

b)

TCP

c)

UDP

d)

ARP

115.

UDP is best described as:

a)

Connection-oriented and reliable

b)

Connectionless and faster

c)

Slow and guaranteed

d)

Secure and encrypted

116.

How many total ports exist per transport protocol?

a)

65,536

b)

1024

c)

4096

d)

256

117.

What command performs a default Nmap scan?

a)

nmap target

b)

nmap -sU target

c)

nmap -A target

d)

nmap --script target

118.

What does the port state “open” mean in Nmap?

a)

No service is listening

b)

The port is blocked by a firewall

c)

The application is actively accepting connections

d)

Nmap cannot reach the host

119.

Which Nmap flag is used for OS detection?

a)

-A

b)

-p

c)

-O

d)

-V

120.

Which Nmap option displays help information?

a)

-T

b)

-h

c)

-H

d)

-v

121.

What does “-A” enable in Nmap?

a)

Aggressive scan with OS and version detection

b)

Access restriction

c)

Auto script update

d)

Anonymous scan mode

122.

The command nmap -sV is used for:

a)

Version detection of services

b)

Vulnerability scanning

c)

OS detection

d)

Port blocking

123.

What does the -p flag specify in Nmap?

a)

Packet capture

b)

Ports to scan

c)

Proxy list

d)

Permissions

124.

Which of the following Nmap states means “firewall interference”?

a)

Unfiltered

b)

Filtered

c)

Closed

d)

Open

125.

What is the purpose of NSE scripts?

a)

Speed up DNS resolution

b)

Block suspicious ports

c)

Encrypt scan traffic

d)

Automate vulnerability checks and scanning tasks

126.

Which command brute-forces DNS subdomains?

a)

nmap -sS -p 80

b)

nmap -O

c)

nmap --script=dns-brute

127.

Which port does DNS typically use?

a)

53

b)

80

c)

22

d)

443

128.

Which protocol does DHCP use to assign IPs dynamically?

a)

FTP

b)

HTTP

c)

TCP/IP

d)

UDP

129.

How many steps are in the DHCP handshake (DORA)?

a)

3

b)

2

c)

5

d)

4

130.

What does DNS translate?

a)

MAC addresses into URLs

b)

Usernames into passwords

c)

Domain names into IP addresses

d)

IP addresses into MACs

131.

What does the Nmap timing option “-T5” do?

a)

Disables aggressive mode

b)

Enables passive scanning

c)

Slows the scan

d)

Speeds up the scan but may be noisy

132.

What does “open|filtered” indicate in Nmap results?

a)

Port is closed

b)

Nmap failed completely

c)

Firewall blocks traffic, uncertain state

d)

The port is open

133.

Why are UDP scans harder to interpret?

a)

UDP encrypts packets

b)

UDP doesn’t respond when ports are closed

c)

Nmap doesn’t support UDP

d)

They require root privileges

134.

What risk does a “DNS Spoofing” attack create?

a)

It changes router passwords

b)

It scans DNS ports

c)

It redirects users to fake sites

d)

It blocks UDP traffic

135.

Which command performs a DNS UDP scan on Google’s server?

a)

nmap --script vulnrs.nse

b)

nmap -A -p 80 8.8.8.8

c)

nmap -sU -p 53 8.8.8.8

d)

nmap -sS -p 53 8.8.8.8

136.

In DHCP, what does the “Offer” message represent?

a)

The client asking for IP

b)

The server suggesting an IP lease

c)

The final confirmation

d)

The client rejection

137.

Which DNS attack uses small queries to produce large responses for DDoS?

a)

DNS Poisoning

b)

DNS Amplification

c)

DNS Spoofing

d)

DNS Tunneling

138.

What is the correct order of the DHCP DORA process?

a)

Discover → Offer → Request → Acknowledge

b)

Discover → Acknowledge → Offer → Request

c)

Request → Offer → Discover → Acknowledge

d)

Offer → Request → Discover → Acknowledge

139.

Which tool command shows DNS open on both TCP and UDP?

a)

nmap -O 8.8.8.8

b)

nmap -A -T5

c)

nmap -sS -p 443 8.8.8.8

d)

nmap -sV -p 53 8.8.8.8

140.

DHCP lease refers to:

a)

Manual configuration of IP

b)

Temporary IP assignment for a duration

c)

Permanent IP assignment

141.

A financial firm segments its network into VLANs: one for HR, one for Finance, and one for Guest Wi‑Fi. However, a misconfigured switch trunk allows traffic from the Guest VLAN to pass into Finance VLAN for 3 minutes before being blocked. No data was stolen, but traffic flowed where it should not. What was primarily violated?

a)

Proper network segmentation

b)

DNS configuration

c)

Physical security

d)

Encryption standards

142.

A company uses Wi‑Fi protected with WPA2. An attacker performs a Man‑in‑the‑Middle attack by setting up an identical SSID with stronger signal strength, causing users to connect unknowingly. The attacker captures login credentials before sending traffic to the real router. Which network weakness enabled this attack?

a)

Lack of certificate‑based authentication

b)

Limited VLAN support

c)

Incorrect subnet mask

d)

Router not supporting IPv6

143.

A streaming service experiences sudden service failure. Logs show millions of requests from multiple distributed IP sources, overwhelming the server. The internal network remains intact and data is untouched, but legitimate users cannot access the service. Which attack type is occurring?

a)

DNS Spoofing

b)

DDoS

c)

Man‑in‑the‑Middle

d)

ARP Poisoning

144.

A security analyst notices packet traces where the source and destination IP addresses remain unchanged, but packet payloads are subtly altered. This results in incorrect data being displayed to the receiving device without users realizing it. Which attack is most likely?

a)

Port Scanning

b)

MITM Data Injection

c)

DDoS Flooding

d)

Rogue DHCP Assignment

145.

A network admin uses traceroute to examine packet paths to a remote server. The results show unexpected hops passing through a foreign country’s network infrastructure. No service outage occurs. What is the likely issue?

a)

DHCP lease expiration

b)

Border gateway protocol (BGP) routing manipulation

c)

VLAN mis‑tagging

d)

Wi‑Fi interference

146.

An enterprise router is configured to allow remote management for IT staff. An attacker discovers the port is open over the internet and brute‑forces login credentials. No firewall rules blocked access. Which oversight enabled the attack?

a)

Misconfigured DNS caching

b)

Improper firewall access control

c)

Wrong subnet mask

d)

Duplicate IP address conflict

147.

During an investigation, analysts find that internal traffic between employees’ computers was not segmented, allowing lateral movement after one machine was compromised. Only one employee fell for phishing, yet the attacker spread to 12 systems. Which network control was missing?

a)

DNS recursion

b)

IPv6 tunneling support

c)

VLAN separation

d)

Static routing

148.

A business uses a public Wi‑Fi network at a café to access corporate servers through HTTP instead of HTTPS. An attacker eavesdrops and copies login session cookies. Why was the attack successful?

a)

DNS records were outdated

b)

Switch did not support spanning tree

c)

Data was not encrypted in transit

d)

Traffic was routed through fiber optic cables

149.

A server remains online but begins responding extremely slowly. Packet captures show frequent retransmissions, dropped packets, and congestion across multiple hops. The organization’s internal network is operating normally. Where is the problem most likely located?

a)

Local subnet addressing

b)

External routing path congestion

150.

An employee connects an unauthorized wireless access point to the company switch port to “extend Wi‑Fi.” Unknown devices begin connecting through it, bypassing corporate authentication. What type of device has been introduced?

a)

VLAN Trunk Bridge

b)

Fiber Media Converter

c)

DNS Forwarder

d)

Rogue Access Point

151.

What is the primary purpose of using Wireshark in network analysis?

a)

To configure network devices

b)

To monitor system performance

c)

To capture and analyze network packets

d)

To create network diagrams

152.

Which protocol can be analyzed using Wireshark to troubleshoot web traffic?

a)

HTTP

b)

All of the above

c)

SMTP

d)

FTP

153.

In Wireshark, what does the term 'filter' refer to?

a)

A feature for exporting captured data

b)

A method to enhance packet capture speed

c)

A tool for editing packet data

d)

A way to limit displayed packets based on criteria

154.

What is the primary purpose of using Nmap in network security?

a)

To perform network mapping and discovery

b)

To encrypt data transmissions

c)

To exploit vulnerabilities

d)

To monitor user activity

155.

Which Nmap option is used to perform a version detection scan?

a)

-O

b)

-sV

c)

-sS

d)

-A

156.

What does the Nmap command 'nmap -sP 192.168.1.0/24' accomplish?

a)

Runs a full TCP connect scan

b)

Detects the operating system of devices

c)

Scans for open ports on a single host

d)

Performs a ping scan on the specified subnet

157.

What is the primary function of Cisco Packet Tracer?

a)

Network simulation and visualization

b)

Data encryption

c)

Malware detection

d)

Web hosting

158.

Which of the following devices can be simulated using Cisco Packet Tracer?

a)

Firewalls only

b)

Only switches

c)

Only routers

d)

Routers and switches

159.

In Cisco Packet Tracer, what feature allows users to visualize network traffic?

a)

Simulation mode

b)

Real-time mode

c)

Design mode

d)

Debug mode

160.

What is the primary purpose of Cisco Packet Tracer?

a)

Malware analysis

b)

Network simulation and visualization

c)

Data encryption

d)

Web development

161.

Which feature allows users to create and save network topologies in Cisco Packet Tracer?

a)

Simulation mode

b)

Workspace

c)

Device manager

d)

Packet capture

162.

In Cisco Packet Tracer, which device is used to connect multiple networks?

a)

Hub

b)

Access Point

c)

Router

d)

Switch

163.

What is the primary function of Cisco Packet Tracer?

a)

Data encryption

b)

Cloud storage management

c)

Network simulation and visualization

d)

Web development

164.

Which of the following devices can be simulated using Cisco Packet Tracer?

a)

Only firewalls

b)

Only IoT devices

c)

Only servers

d)

Routers and switches

165.

In Cisco Packet Tracer, how can you test network connectivity?

a)

By using the ping command

b)

By changing the device color

c)

By adding more devices

d)

By increasing bandwidth

166.

What is the primary function of Wireshark?

a)

To encrypt network traffic

b)

To analyze and capture network packets

c)

To manage network devices

d)

To create firewalls

167.

Which protocol can Wireshark capture and analyze?

a)

All of the above

b)

TCP

c)

FTP

d)

HTTP

168.

What feature of Wireshark allows users to filter captured packets?

a)

Export options

b)

Packet coloring

c)

Statistics overview

d)

Display filters

169.

What is the primary goal of a penetration test?

a)

To identify vulnerabilities in a system

b)

To create software documentation

c)

To increase system performance

d)

To improve user experience

170.

Which of the following is a common method used in social engineering attacks?

a)

SQL Injection

b)

Phishing emails

c)

Network scanning

d)

Malware distribution

171.

What does the term 'zero-day vulnerability' refer to?

a)

A vulnerability that is fixed on the same day it is discovered

b)

A vulnerability that is exploited before a patch is available

c)

A vulnerability that has been publicly disclosed

d)

A vulnerability that affects only outdated software

172.

What is the primary function of Cisco Packet Tracer?

a)

Web development

b)

Data encryption

c)

Database management

d)

Network simulation and visualization

173.

Which of the following devices can be simulated using Cisco Packet Tracer?

a)

Firewalls only

b)

Only switches

c)

Only routers

d)

Routers and switches

174.

How can users share their Cisco Packet Tracer projects?

a)

By exporting to PDF only

b)

By uploading to social media

c)

By sharing .pkt files

d)

By printing directly from the application

175.

What protocol does Wireshark primarily use to capture network traffic?

a)

All of the above

b)

UDP

c)

TCP

d)

HTTP

176.

Which feature in Wireshark allows you to filter packets based on specific criteria?

a)

Coloring Rules

b)

Packet Analysis

c)

Capture Filters

d)

Display Filters

177.

What is the purpose of the 'Follow TCP Stream' feature in Wireshark?

a)

To view all packets in a capture

b)

To reconstruct the data flow of a TCP connection

c)

To analyze packet loss

d)

To filter out non-TCP packets

178.

Which of the following is NOT a component of the CIA triad?

a)

Integrity

b)

Availability

c)

Confidentiality

d)

Authentication

179.

What does the 'Integrity' aspect of the CIA triad primarily ensure?

a)

Data is accessible when needed

b)

Data is accurate and unaltered

c)

Data is kept secret from unauthorized users

d)

Data is encrypted during transmission

180.

In the context of the CIA triad, which of the following best describes 'Availability'?

a)

Ensuring data can be accessed when required

b)

Ensuring data is not lost

c)

Maintaining data accuracy over time

d)

Preventing unauthorized access to data

181.

What is the primary benefit of running Kali Linux in a virtual machine?

a)

It eliminates the need for a host operating system

b)

It allows for easier updates

c)

It provides a secure environment for testing

d)

It requires less hardware resources

182.

Which virtualization software is commonly used to run Kali Linux?

a)

Notepad

b)

VMware

c)

Microsoft Word

d)

Adobe Photoshop

183.

What is a common use case for Kali Linux running in a virtual machine?

a)

Web browsing

b)

Gaming

c)

Penetration testing and security assessments

d)

Office productivity

184.

What is the primary benefit of using a ticketing system in customer support?

a)

To track and manage customer inquiries efficiently

b)

To reduce the number of employees needed

c)

To automate marketing campaigns

d)

To eliminate the need for customer feedback

185.

Which feature is essential for a ticketing system to enhance team collaboration?

a)

Automated email responses

b)

Customizable ticket categories

c)

Real-time chat functionality

d)

Integration with social media

186.

How can a ticketing system improve response times for customer issues?

a)

By limiting the number of tickets submitted

b)

By prioritizing tickets based on urgency and impact

c)

By providing a single point of contact for all inquiries

d)

By allowing customers to resolve issues independently

187.

What is the primary purpose of using Cisco Packet Tracer?

a)

To simulate and visualize network configurations

b)

To perform real-time network attacks

c)

To monitor network traffic in real-time

d)

To manage physical network devices

188.

Which feature of Cisco Packet Tracer allows users to create complex network topologies?

a)

Network visualization

b)

Multi-user collaboration

c)

Simulation mode

d)

Device configuration

189.

How can users test their networking skills using Cisco Packet Tracer?

a)

By participating in online competitions

b)

By creating and completing custom labs

c)

By accessing real-world network devices

d)

By reading documentation only

190.

What is the consequence of failing to secure sensitive data?

a)

Increased customer trust

b)

Legal repercussions and fines

c)

Improved system performance

d)

Enhanced user experience

191.

Which of the following is a common method for preventing phishing attacks?

a)

Using outdated software

b)

Using multi-factor authentication

c)

Disabling firewalls

d)

Ignoring suspicious emails

192.

What is the main goal of a penetration test?

a)

To exploit vulnerabilities for personal gain

b)

To identify and fix security weaknesses

c)

To disrupt business operations

d)

To sell vulnerabilities to competitors

193.

What is the primary goal of a firewall?

a)

To monitor network traffic

b)

To block unauthorized access

c)

To encrypt data transmissions

d)

To improve network speed

194.

Which of the following is a common method of social engineering?

a)

Network scanning

b)

Malware installation

c)

Phishing emails

d)

SQL Injection

195.

What does the term 'zero-day vulnerability' refer to?

a)

A vulnerability that has been publicly disclosed

b)

A vulnerability that is exploited before a patch is available

c)

A vulnerability that is fixed on the same day it is discovered

d)

A vulnerability that affects only outdated software

196.

What is a primary benefit of using virtual machines in a development environment?

a)

Reduced software compatibility

b)

Increased hardware costs

c)

Limited resource allocation

d)

Isolation of applications

197.

Which hypervisor type runs directly on the host's hardware?

a)

Container Hypervisor

b)

Cloud Hypervisor

c)

Type 2 Hypervisor

d)

Type 1 Hypervisor

198.

What is a common use case for virtual machines in enterprise environments?

a)

Running legacy applications

b)

Creating physical servers

c)

Storing large databases

d)

Enhancing network speed

199.

What does SLA stand for in the context of service agreements?

a)

Service Level Agreement

b)

Systematic Log Analysis

c)

Service Level Assessment

d)

Standardized License Agreement

200.

Which of the following is typically included in an SLA?

a)

Company financial statements

b)

Employee personal information

c)

Performance metrics

d)

Marketing strategies

201.

What is a common consequence of failing to meet SLA requirements?

a)

Increased customer satisfaction

b)

Improved employee morale

c)

Financial penalties

d)

Enhanced service features