WorksheetsCompre
Total questions: 120
Worksheet time: 40mins
What is cybersecurity?
Protection against unauthorized physical access
Techniques to secure digital components, networks, and data
An antivirus software
Preventing hardware malfunctions
Which of the following is NOT a core pillar of cybersecurity?
Confidentiality
Integrity
Availability
Affordability
What is the purpose of the CIA triad in cybersecurity?
To define operational costs
To guide data security principles
To improve user experience
To establish firewall rules
What is the main feature of a Distributed Denial of Service (DDoS) attack?
Sending phishing emails
Monitoring user passwords
Injecting malicious SQL code
Flooding a network with excessive traffic
In a man-in-the-middle attack, what does the hacker do?
Sends malware to a user
Encrypts a user's data and demands ransom
Gains access to the communication path between two systems
Sends phishing emails to steal credentials
What is a firewall used for?
Blocking unauthorized traffic based on rules
Encrypting all network traffic
Creating user passwords
Scanning for malware
What is a honeypot in cybersecurity?
A tool to encrypt data
A dummy system to attract attackers
A software for password management
A type of malware
What additional layer of security does two-factor authentication provide?
Increased password length
Enhanced user accessibility
Verification through an additional device or code
Simplified login processes
What was the purpose of the Stuxnet malware?
To disrupt global internet traffic
To damage Iran's nuclear infrastructure
To steal financial information
To disable antivirus software
The WannaCry ransomware attack was propagated through:
An exposed SMB vulnerability
Phishing emails
DNS poisoning
SQL injection
Which cybersecurity professional identifies and exploits system vulnerabilities to provide solutions to fix them and ensure safety?
Black hat hacker
Ethical hacker
Malware analyst
SOC analyst
Which type of attack can be mitigated by using multifactor authentication?
Phishing attacks
Brute force attacks
Denial-of-service attacks
SQL injection attacks
What does an ethical hacker do?
Exploits systems for financial gain
Identifies and resolves system vulnerabilities
Develops malware to test antivirus software
Performs denial-of-service attacks
Which role is responsible for overall enterprise security?
Network Engineer
Security Architect
Chief Information Security Officer (CISO)
Information Security Analyst
Why is backing up data regularly considered a good cybersecurity practice?
It prevents data breaches
It ensures data availability during ransomware attacks or hardware failures
It speeds up network performance
It automatically encrypts all files
What does antivirus software primarily protect against?
Unauthorized physical access
Data loss due to hardware failure
Network intrusions
Malware such as viruses, worms, and trojans
What is the main purpose of encryption in cybersecurity?
To speed up data transmission
To prevent unauthorized access to data
To reduce file size
To enhance network connectivity
What is the purpose of a security awareness program?
To train employees to recognize and avoid potential threats
To install firewalls on employee devices
To encrypt all company data
To reduce software development costs
What is the function of a Virtual Private Network (VPN)?
To create an encrypted tunnel for secure communication
To block malicious websites
To filter emails
To scan for malware
Which cybersecurity principle ensures that data is not altered by unauthorized parties?
Confidentiality
Availability
Integrity
Scalability
Which of the following is an example of a strong password?
12345678
Password1
M0n3y@2024!
abcdefg
Which type of malware disguises itself as legitimate software?
Ransomware
Trojan Horse
Spyware
Adware
What is a common indicator of a denial-of-service (DoS) attack?
Slow or unresponsive services
Sudden malware alerts
Unauthorized data access logs
Frequent software crashes
What kind of malware is designed to secretly monitor user activity and steal sensitive data?
Spyware
Ransomware
Worm
Adware
What is the goal of social engineering attacks?
To exploit software vulnerabilities
To disable network hardware
To trick individuals into revealing sensitive information
To compromise antivirus programs
What is the function of a digital certificate?
To encrypt user files
To authenticate the identity of websites or users
To store passwords securely
To create a backup of encrypted data
What is multifactor authentication (MFA)?
A) A password system with multiple words
B) A network encryption protocol
C) A tool for managing multiple devices
D) A security method that requires two or more verification factors
What is the primary objective of a SQL injection attack?
Encrypt data in transit
Manipulate databases by injecting malicious SQL queries
Flood servers with excessive traffic
Disguise malware as legitimate software
What does a keylogger do?
Encrypt data for secure transmission
Monitor and record user keystrokes
Block access to malicious websites
Perform network scans for vulnerabilities
What is a brute force attack?
A method of guessing passwords by trying all possible combinations
An attack that crashes a server
An attempt to inject malicious code into software
A phishing attempt using email
What is pharming in cybersecurity?
Redirecting users from legitimate websites to fraudulent ones
Sending malicious emails to collect user data
Injecting malicious scripts into a database
Blocking access to specific websites
What is an APT (Advanced Persistent Threat)?
A short-term malware attack
An outdated threat model
A social engineering technique
A continuous and targeted cyber attack
What is the primary goal of data masking?
To encrypt data in transit
To hide sensitive information with altered values
To compress large data files
To back up critical data
What is a key feature of "zero trust" architecture?
Trusting all devices within a network
Verifying every user and device before granting access
Using antivirus software only
Enabling open access to shared resources
What does "patch management" refer to in cybersecurity?
Installing software updates to address vulnerabilities
Backing up data regularly
Encrypting network traffic
Conducting penetration tests
Which cybersecurity risk is associated with IoT devices?
Weak authentication protocols
High cost of deployment
Limited availability
Excessive data encryption
What is the purpose of behavioral analytics in cybersecurity?
Monitoring user activities to detect anomalies and threats
Encrypting sensitive data
Accelerating network speed
Testing software vulnerabilities
Which technology ensures secure communication over the internet?
HTTPS
FTP
DNS
SMTP
What is a major challenge in securing cloud environments?
Limited storage capacity
Shared responsibility for security between providers and users
High costs of data migration
Slow access to resources
What does a "sandbox" environment do?
Accelerates software updates
Encrypts sensitive files
Blocks phishing emails
Isolates suspicious programs to study their behavior
What does PCI DSS compliance regulate?
Encrypting email communications
Protecting payment card information
Monitoring physical access to devices
Training employees in cybersecurity awareness
What does "ethical hacking" aim to achieve?
Identifying vulnerabilities to strengthen defenses
Spreading awareness about malware risks
Developing malicious software
Encrypting sensitive user data
What is the main purpose of phishing simulations in organizations?
To improve system performance
To test employee awareness and preparedness against phishing attacks
To increase network speed
To reduce software vulnerabilities
Which practice helps protect against ransomware attacks?
Regularly updating software and systems
Using weak passwords for convenience
Sharing login credentials with trusted individuals
Disabling all firewalls
What should be done to secure physical devices against unauthorized access?
Encrypt hard drives
Use strong passwords and biometric locks
Keep devices in locked and secure locations
All of the above
Which of the following is an example of multifactor authentication?
Logging in with a username and password only
Logging in with a password and a onetime code sent to a phone
Using a PIN for access
Relying solely on biometric data
What is the most effective way to manage software vulnerabilities?
Regular patching and updates
Using older, proven software versions
Avoiding cloud services
Disabling antivirus software
What is the role of a Data Loss Prevention (DLP) tool?
Preventing unauthorized access to networks
Monitoring and protecting sensitive data from being leaked
Encrypting email communications
Detecting phishing emails
Which of the following is an example of biometric authentication?
Retina scanning
Fingerprint recognition
Facial recognition
All of the above
Why should public WiFi networks be avoided for sensitive transactions?
They are often unsecured and vulnerable to eavesdropping
They slow down transaction speeds
They frequently disconnect
They block encrypted connections
What is the benefit of using a password manager?
It generates and securely stores strong, unique passwords for all accounts
It encrypts files on a device
It blocks phishing attempts automatically
It improves internet speed
What is an insider threat?
A hacker outside the organization breaching its system
An employee misusing access to harm the organization
A security misconfiguration in the organization’s systems
A social engineering attempt via phishing
What is the primary method used by spyware?
Flooding networks with traffic
Encrypting user files
Monitoring and collecting user activity and data without consent
Sending malicious emails
What is the main purpose of a digital signature?
To encrypt data for transmission
To increase network speed
To block unauthorized access
To authenticate the sender of a message
What does "cyber resilience" refer to?
The ability of an organization to recover quickly from cyber incidents
The strength of an organization’s firewalls
The reliability of antivirus software
The scalability of cybersecurity tools
What should you do if you suspect your device has been compromised?
Disconnect from the internet immediately
Delete random files
Restart the device repeatedly
Ignore warning messages
What type of attack occurred in Estonia in 2007, targeting its government and financial institutions?
Phishing attack
Distributed Denial-of-Service (DDoS) attack
SQL injection
Spyware attack
Which company faced a massive data breach in 2014, resulting in the theft of 56 million payment cards?
Target
Home Depot
Sony Pictures
TJX
The 2015 cyber attack on Ukraine’s power grid was executed through:
SQL injection attacks
Phishing emails containing malware
A man-in-the-middle attack
DNS spoofing
What is the primary goal of artificial intelligence in cybersecurity?
To automate threat detection and response
To encrypt user data
To create malicious software
To bypass firewalls
Which technology enhances security by storing data in decentralized networks?
Blockchain
VPN
Cloud computing
Firewalls
Which of the following is an ethical concern in cybersecurity?
Installing firewalls on user devices
Developing encryption algorithms
Testing system vulnerabilities ethically
Selling user data without consent
Which of the following is a common vulnerability in cloud environments?
Overuse of encryption
Insufficient identity and access management
Use of private networks
Excessive software patches
What is the first step in an incident response plan?
Containment of the attack
Identification of the security incident
Recovery of affected systems
Communication with stakeholders
Which of the following best describes ransomware?
Software that monitors user activity
A virus that spreads through networks automatically
Malware that encrypts data and demands payment for decryption
Communication with stakeholders
What is a botnet?
A network of infected computers controlled by a hacker
A group of servers hosting malicious websites
A secure network for government communication
A tool used to prevent cyber attacks
Which of the following is a key characteristic of phishing attacks?
Exploiting software vulnerabilities
Sending fraudulent messages to trick individuals into revealing sensitive information
Installing hardware keyloggers on a target system
Blocking access to websites
Which of the following is NOT a common motive behind cybercrimes?
Financial gain
Espionage
Revenge or personal grievances
Improving cybersecurity measures
How does a phishing attack typically trick users?
By exploiting unpatched software vulnerabilities
By sending fraudulent messages and redirecting users to fake websites
By launching automated brute force password attacks
By encrypting user data without their knowledge
What distinguishes a DoS attack from a DDoS attack?
DoS uses multiple sources, while DDoS uses a single source
DoS is easier to mitigate, while DDoS is harder to trace due to multiple sources
DoS encrypts files, while DDoS overloads servers
DoS spreads through networks, while DDoS targets applications
In supervised learning, a model predicts values based on:
Raw unlabeled data only
Historical labeled examples
Neural hardware chips
Random number generation
A transformer model is made up of:
Encoder and Decoder
Classifier and Regressor
Predictor and Generator
Input and Output layers only
Text-to-video models can take as input:
Only images
Only code
Text scripts or sentences
Only numbers
Generative AI is a subset of:
Physics
Deep learning
Robotics
Classical programming
Which is NOT a common application of LLMs?
Text classification
Question answering
Weather forecasting
Document summarization
When a model compares predicted and actual values, the difference is called:
Accuracy
Error
Bias
Training loss only
“Zero-shot” learning means:
Recognizing tasks without explicit prior training
Training with zero data
Failing to learn new tasks
Using no hyperparameters
Which requires more resources and expertise?
Few-shot learning
LLM development
Prompt design
Traditional machine learning
One cause of hallucinations is:
Too much labeled data
Noisy or insufficient training data
High optimization accuracy
Excessive supervision
In generative QA with LLMs:
Domain knowledge is always required
Only structured data is accepted
Answers are limited to yes/no
Models generate free text based on context
If a model classifies “dog vs cat,” it is:
Discriminative
Generative
Semi-supervised
Reinforcement-based
In LLMs, “pre-training” refers to:
Training for specific tasks
Training on large, general-purpose datasets
Tuning parameters manually
Only training with domain-specific data
Fine-tuning involves:
Adjusting every model weight with new data
Using zero data
Only modifying prompts
Reducing hyperparameters
Generative AI is a type of artificial intelligence technology that can produce:
Only text
Only numbers
Text, imagery, audio, and synthetic data
Only numerical predictions
Google believes responsible AI equals:
Faster AI
Successful AI
Free AI
Automated AI
What does LLM stand for?
Limited Learning Machine
Large Language Model
Logical Language Mapping
Linguistic Learning Module
Predicting tip amount from bill totals and delivery type is an example of:
Unsupervised learning
Traditional programming
Reinforcement learning
Supervised learning
Which of the following is a benefit of LLMs?
Require large training data for every use case
Must always be retrained from scratch
Can be used for multiple tasks with little additional data
Work only for one domain
Artificial Intelligence (AI) is best described as:
A. A single algorithm
B. A discipline of computer science creating intelligent agents
C. A hardware system for robots
D. Only neural networks
Chain-of-thought reasoning improves LLMs by:
Explaining reasoning before giving an answer
Reducing dataset size
Removing irrelevant prompts
Limiting responses
Responsibility by design means:
Responsibility is added after product launch
Responsibility is built into products and organizations
Only management is responsible
Responsibility is optional
Intelligent agents in AI are systems that can:
Only calculate numbers
Work only with labeled data
Reason, learn, and act autonomously
Function only with human guidance
What is the role of prompt design?
Building neural networks
Removing irrelevant parameters
Training LLMs from scratch
Creating clear and concise prompts for tasks
Machine Learning is a __________ of AI.
Replacement
Subfield
Opposite
Hardware component
Responsible development and deployment means:
Pursuing AI responsibly across its lifecycle
Building AI without testing
Limiting AI to research only
Avoiding user input
What does the term “large” in LLMs refer to?
Large number of developers
Training dataset size and parameter count
Physical computer size
Large company budgets
Organizations are developing their own AI principles that reflect their mission and values. What are the common themes among these principles?
A. A consistent set of ideas about transparency, fairness, and equity.
B. A consistent set of ideas about fairness, accountability, and inclusion.
C. A consistent set of ideas about transparency, fairness, accountability, and privacy.
D. A consistent set of ideas about transparency, fairness, and diversity.
Gemini and LaMDA are examples of:
Generative AI models
Discriminative AI models
Unsupervised models
Optimization algorithms
Bold innovation means:
Avoiding risks completely
Using AI to empower people and solve big challenges
Focusing only on business profits
Ignoring social impact
Which type of LLM predicts the next word in a sequence?
Generic language model
Instruction-tuned model
Dialog-tuned model
Transformer-free model
A discriminative model is mainly used for:
Generating new data
Writing text
Creating new images
Classifying or predicting labels
Who makes AI-related decisions?
Only machines
Only customers
AI systems alone
Humans who design, deploy, and apply AI
Deep learning is a type of machine learning that uses:
Randomized algorithms
Artificial neural networks
Manual programming only
Probability tables only
Common themes across responsible AI principles include:
Profit, control, competition
Transparency, fairness, accountability, privacy
Speed, automation, scale, innovation
None of these
Large Language Models are a subset of which field?
Robotics
Data Mining
Deep Learning
Cognitive Psychology
Fine-tuning in LLMs means:
Removing parameters
Using small domain-specific datasets to adapt a model
Pre-training again from scratch
Reducing dataset size
The process of learning from existing content is called:
Hallucination
Prompting
Labeling
Training
Clustering employees by tenure and income is an example of:
Supervised learning
Reinforcement learning
Unsupervised learning
Foundation models
Prompt engineering differs from prompt design in that it:
Focuses on clarity only
Uses strategies to improve performance
Avoids domain-specific knowledge
Does not require testing
AI principles serve as:
A foundation for responsible decisions
Direct instructions for coding
Legal requirements
Optional guidelines
Prompts are:
Long codes
Short text inputs guiding model output
Neural connections
Random tokens
Which of these is correct with regard to applying responsible AI practices?
Only decisions made by the project owner at any stage in a project make an impact on responsible AI.
Decisions made at an early stage in a project do not make an impact on responsible AI.
Decisions made at a late stage in a project do not make an impact on responsible AI.
Decisions made at all stages in a project make an impact on responsible AI.
LLMs are mostly based on which type of model?
Convolutional Neural Networks
Transformer models
Decision Trees
Support Vector Machines
Why is responsible AI practice important to an organization?
Responsible AI practice can help build trust with customers and stakeholders.
Responsible AI practice can help improve operational efficiency.
Responsible AI practice can improve communication efficiency.
Responsible AI practice can help drive revenue.
If AI is developed responsibly, its main benefit is:
Human flourishing
Profit maximization
Self-preservation
Stronger machines
What ensures rigor and consistency in Google’s AI decisions?
Marketing campaigns
Assessments and reviews
Customer feedback only
Random testing
Collaborative progress means:
Working alone on AI
Empowering others to harness AI for collective benefit
Restricting AI access
Eliminating competition
Which is NOT one of Google’s three guiding AI principles?
Bold innovation
Responsible development and deployment
Collaborative progress
Maximizing short-term profits
Which of the following is an ethical challenge in AI?
High internet cost
Short battery life
Weak algorithms
Misaligned goals between AI and humans
What makes supervised learning different from unsupervised learning?
Amount of data used
Use of labeled data
Use of synthetic data
Model speed
