A bank detects that transaction logs were altered by an internal employee. What CIA aspect was breached?

A government service portal crashed during peak hours due to insufficient server capacity. Which CIA element is affected?

A company encrypts all emails to avoid data leakage. What CIA component is being protected?

A file hash changed after a network transfer. What does this imply?

A business implements a backup generator to continue operations during power outages. Which CIA principle is upheld?

A school restricts editing access to grade records to only teachers. This ensures:

A malware encrypted all company files, making them unreadable until ransom is paid. Which CIA attribute is affected first?

Sending sensitive files over an HTTPS connection ensures:

A user cannot access their account after three login attempts. Which security principle applies?

A company performs routine database validation to ensure data accuracy. Which CIA principle?

A system logs all access attempts for auditing. Which CIA-related property is this?

A webserver uses a failover server during downtime. This improves:

An employee accidentally deletes critical files. Integrity is preserved through:

A messaging app ensures messages are readable only by sender and receiver.

Digital signatures ensure:

A system verifies that a software update has not been tampered with before installation.

A DDoS attack targets a server, making it unreachable. Which CIA pillar is attacked?

A business segments data by role (HR, finance, ops). This protects:

A checksum mismatch during file download indicates loss of:

Your IDS reports repeated failed login attempts from an unknown IP. What type of attack is suspected?

A company wants a device that blocks malicious traffic automatically. Which is appropriate?

An IDS detects abnormal outbound traffic from a workstation. What does this likely indicate?

A firewall rule blocks all traffic except whitelisted ports. This is known as:

A company receives frequent false-positive security alerts. Which IDS type is likely used?

A firewall blocking packets based on IP, port, and protocol is called:

A stateful firewall examines:

A company wants to monitor security inside virtual machines. What solution is suitable?

A signature-based IDS cannot detect:

Which firewall type filters based on user identity?

A system compares network traffic to known attack patterns. What is this?

A fake machine deployed to lure attackers is called:

A company wants to block SQL injection. Which solution?

An NIDS cannot inspect encrypted traffic because:

A firewall blocks incoming traffic but allows outgoing email. This is an example of:

A firewall tracks packets belonging to existing connections. This is:

A company notices very high CPU usage on IDS during peak hours. Likely cause:

What device protects against both external and internal threats?

A firewall configured to block outbound traffic containing credit card numbers enforces:

Traffic spikes from a single IP on port 80. This likely indicates:

A company uses VPN for remote employees. What does the firewall need to allow?

An attacker sends fragmented packets to bypass firewall rules. This is an example of:

A firewall rule misconfiguration exposed an internal server. The issue is related to:

Your IDS frequently triggers on a legitimate application. This is known as:

A company wants to drop packets from countries unrelated to operations. Which feature?

A company wants two users to securely exchange data without sharing a private key. Which encryption type?

An attacker captures encrypted traffic but cannot break AES-256. This is due to:

A digital certificate is mainly used to:

Which algorithm is commonly used for hashing passwords?

A company stores one-way encrypted passwords. This method is known as:

A system uses two keys: a public and private key. This is:

A company needs fast encryption for large files. What is ideal?

An email is encrypted with the receiver’s public key. Who can decrypt it?

A public Wi-Fi network uses WPA3. This secures the network by:

A company uses a VPN. VPN encryption protects:

An attacker alters a message in transit. What protects against this?

A developer hides data inside an image. This technique is:

You need to verify that a downloaded file is legitimate. What do you check?

A company uses HMAC to secure API calls. What does HMAC ensure?

RSA performance is slow for large messages because:

A session key is generated during SSL handshake for:

A user receives a certificate warning in the browser. Cause?

A company wants to encrypt data at rest. Recommended?

A hash collision means:

A digital signature verifies:

A website uses HTTPS. Which protocols are involved?

A company needs lightweight encryption for mobile apps. Best choice?

Encrypted messages output twice the size of input. This describes:

A user wants to ensure only the intended receiver opens a file. They should:

To ensure privacy on cloud storage, a user encrypts files before uploading. This is known as: