The principle that guarantees data has not been altered or tampered with is known as:

A DDoS attack, which prevents legitimate users from accessing a service, is a direct violation of which CIA Triad component?

What is the primary purpose of authentication in a security system?

A password or a PIN code is an example of which authentication factor?

Using a physical key card or a security token to log in is an example of:

Biometric verification, such as a fingerprint scan or facial recognition, falls under which category of authentication?

An attack that attempts to guess a password by systematically trying every possible combination of characters is called a:

Which type of password attack uses a precompiled list of common words and phrases?

An attacker attempts to log in to many different accounts using a single, commonly used password (like "Password123"). This technique is known as:

What is the primary purpose of password hashing?

A precomputed table used for reversing cryptographic hash functions to crack passwords is a:

In password security, what is the purpose of a "salt"?

Which of these best describes Multi-Factor Authentication (MFA)?

All Two-Factor Authentication (2FA) is MFA, but not all MFA is 2FA. This statement is true because:

Which malware requires a host program to spread and works by inserting its code into other programs?

A standalone malicious program that replicates itself to spread to other computers is called a:

Malware disguised as a legitimate program, like a free game that secretly contains malicious code, is an example of a:

A Remote Access Trojan (RAT) provides an attacker with unauthorized administrative control, which is a type of:

What is the key difference between a computer virus and a worm?

What type of malware is designed to execute a malicious action when a specific condition is met, such as on a particular date or after a certain number of logins?

A clandestine computer program designed to provide continued privileged access to a computer while actively hiding its presence is known as a:

An attack that exploits a previously unknown vulnerability in a computer application or operating system is called a:

Which term describes a prolonged and targeted cyberattack in which an intruder gains access to a network and remains undetected for an extended period?

A type of malware that encrypts a victim’s files and demands payment to restore access is called:

What is the name for malware that secretly observes the user’s computer activities without permission and reports it to the software’s author?

A program that automatically delivers advertisements to a computer, often in the form of pop-ups, is known as:

Software that a user may perceive as unwanted, which is often installed alongside a desired program, is referred to as a:

Unsolicited and unwanted email messages, often sent in bulk to a large list of recipients, are commonly known as:

Which of the following best distinguishes a rootkit from other types of malware like viruses or trojans?

Which of the following best describes a Command Line Interface (CLI)?

What is the primary role of an operating system (OS)?

The process of creating a software-based, or “virtual,” version of a computer, with dedicated amounts of CPU, memory, and storage that are “borrowed” from a physical host computer is known as:

An emulation of a computer system that operates based on the computer architecture and functions of a real or hypothetical computer is called a:

What is the primary purpose of a firewall in network security?

Which of the following is an example of multi-factor authentication (MFA)?

What does the CIA Triad stand for in cybersecurity?

What is the main purpose of encryption in cybersecurity?

Encrypting a laptop’s hard drive primarily protects which aspect of the CIA Triad?

What is phishing in the context of cybersecurity?

Which two of the following steps of hacking are most likely to involve the use of social engineering? (pick 2)

What is the goal of social engineering?

What is the main method used in social engineering?

Which is NOT a reason that Social Engineering is so successful?

Which of the following Social Engineering techniques are best protected against by use of a security guard or turnstile?

Which of the following is NOT a technique of social engineering?

Which is considered the single biggest threat in the digital world and was used in 67% of cyber attacks last year?

Which of the following is NOT an indication that the email might be a phishing email?

Which of the following is a phishing attack that targets a specific individual or organization?

In order for data to be considered OSINT, it must satisfy which of the two conditions below? (Pick two)

Which of the following would NOT be considered OSINT?

Which of the following is NOT part of the steps in mitigating human risk when pertaining to cybersecurity?

Phishing is one of the top 4 most dangerous types of malware

Which of the following is NOT a type of phishing?

How can humans pose a risk to an organization's security?

Which of the following is an example of unauthorized software installation?

How can hoaxes pose a threat to an organization?

What is the primary goal of mitigating human risk factors?

How does a policy differ from a procedure?

How does spam mail differ from phishing?

Vulnerabilities can be found in technology products including operating systems, software applications and hardware devices.

Anyone can access the Common Vulnerabilities and Exposures (CVE)?

Common Vulnerabilities and Exposures are given a severity score of 1-100.

Should you install updates?

Updates are the least important thing you can do to secure a system.

You can help to secure your system by removing unneeded or unnecessary services.

A ________ is a tweak to the OS code that will fix an issue in how it runs or compatibility with devices and applications.

Which of the following is the MOST effective way for an administrator to determine what security holes reside on a network?

Before deciding on hardening procedures for your organization, it is a good idea to use _______________ as a reference for best practices.

You are visiting a website and accidentally click on a link to accept free software. Which tool will keep the software from installing on your PC?

The single most important thing you can do to secure a system is:

Administrator privileges on a system provide the user with ________.

Best practice is to strictly limit how many users are in the Administrators Group.

The best way to survive a Ransomware attack is ______.

For back ups the 3-2-1 rule is the best practice.

An ISO file is the same thing as a System image.

Applications are _____.

Actions we should take to secure devices like computers or smartphones are referred to as ________________.

IOT attacks usually do not target a specific person.

Hackers use a special online tool called __________ to scan the Internet for open devices.

You should never change the default username for the admin account.

To minimize the risk or lessen the force or intensity of something unpleasant.

A security flaw, glitch, or weakness found in software code that could be exploited by an attacker.

A tweak to the OS code that will fix an issue in how it runs or compatibility with devices and applications.

Having several copies