NEW
Font size
WorksheetsCybersecurity Quiz
Total questions: 66
Worksheet time: 33mins
How does SIEM support forensic investigations?
By automatically encrypting compromised systems
By providing a centralized, immutable log trail and event correlation
By physically locking down server room access
By deleting suspicious files before they are opened
By replacing the need for a human investigator
What is the main function of PKI in secure communications?
To optimize network bandwidth for encrypted traffic
To manage digital certificates and establish identity trust
To provide physical security tokens for data centers
To act as a secondary backup for private keys
To increase the speed of symmetric key generation
Which IDS/IPS approach is best for detecting zero-day attacks?
Signature-based detection
Anomaly-based detection
Rule-based filtering
Blacklist-based detection
Heuristic-only file scanning
Which cryptographic method provides both confidentiality and integrity of data?
MD5 Hashing
Base64 Encoding
RSA without a hashing algorithm
Authenticated Encryption (e.g., AES-GCM)
Simple Caesar Cipher
How can automated patch management reduce risk exposure?
By increasing the software's functional complexity
By shortening the window of vulnerability between discovery and remediation
By eliminating the need for a network firewall
By automatically backing up user documents
By reducing the power consumption of the servers
Which policy model ensures that users cannot read or write information at unauthorized levels?
Bell-LaPadula / Biba
Waterfall Software Model
Agile Project Management
ISO 9001
Spiral Model
In penetration testing, what does a 'pivot' refer to?
Changing the testing scope mid-project
Using a compromised system to attack other internal network segments
Switching between different testing tools
Rotating encryption keys daily
Reporting a bug directly to the developer
What is the primary goal of implementing SIEM correlation rules?
To reduce the total volume of logs stored
To identify complex attack patterns by linking separate events
To increase the CPU clock speed of the log server
To bypass the need for an incident response team
To encrypt data at rest in the database
What is the primary function of network firewalls in modern enterprise networks?
To store and cache employee emails
To filter traffic based on a defined set of security rules
To detect hardware failures in the server rack
To automatically update workstation operating systems
To manage the physical temperature of the data center
Which approach ensures secure software development?
Post-production testing only
Rapid application prototyping
Secure Development Lifecycle (SDLC)
Using third-party libraries without verification
Outsourcing all coding to unknown vendors
How does anomaly-based IDS detect advanced persistent threats?
By searching for known virus signatures
By identifying deviations from established baseline behavior
By blocking all traffic from specific geographic regions
By requiring manual password entry for every packet
By checking the physical serial numbers of devices
How does multi-cloud strategy impact security governance?
It simplifies governance by dividing risks
It increases complexity and requires unified policy management
It removes the requirement for data encryption
It eliminates the possibility of data breaches
It makes the cloud provider solely responsible for all data
Which technique improves threat intelligence in a corporate network?
Disconnecting all systems from the public internet
Using external threat feeds and data sharing (ISACs)
Relying solely on default OS settings
Reducing the number of security analysts
Disabling all logging to increase system speed
Which cryptographic method supports digital signatures for authenticity verification?
Symmetric key encryption
Asymmetric (Public Key) encryption
Hashing without a key
Stream ciphers
XOR-based encoding
How does multifactor authentication mitigate credential theft?
By making the password longer
By requiring an additional factor an attacker likely doesn't have
By encrypting the keyboard input
By preventing the user from visiting phishing sites
By changing the username every 30 days
What is the main advantage of hardware-based security modules (HSM)?
They are cheaper than software
They provide physically isolated, tamper-resistant crypto-processing
They make the internet connection faster
They update all firmware automatically
They allow users to share the same private key
How does the principle of least privilege enhance security?
It gives all users administrative rights
It limits access rights to the bare minimum needed for a job
It reduces the number of employees required
It simplifies the login process
It allows users to access any data they find
Which metric is critical when evaluating risk exposure in enterprise systems?
Annual Loss Expectancy (ALE)
Total number of lines of code
Frequency of physical hardware cleanings
Number of social media followers
The age of the office building
What is the main benefit of implementing DLP solutions?
To increase storage capacity
To prevent the unauthorized transfer or leakage of sensitive data
To improve video conferencing quality
To automate the employee payroll process
To find and delete duplicate files
How does blockchain technology enhance information security?
By making all private data public
By providing data immutability and decentralized verification
By replacing the need for firewalls
By speeding up encryption of large files
By preventing physical theft of hardware
Which network defense strategy can prevent lateral movement?
Strong password policies
Micro-segmentation / Zero Trust Architecture
Using a single, powerful perimeter firewall
Increasing the frequency of backups
Disabling the guest Wi-Fi
What is the main threat mitigated by network segmentation?
High electricity consumption
Lateral movement of attackers across the network
Slow database performance
Loss of physical hardware
Software licensing issues
In incident response, what is the first step after detecting a security breach?
Formatting the affected hard drives
Identification and verification of the incident
Notifying the media immediately
Hiring a new security team
Increasing the insurance policy
Which technique is used to assess the resilience of a network against DoS/DDoS attacks?
Static code analysis
Stress testing / Load testing
Social engineering
Physical cable inspection
Hashing the database
In cloud security, what is the key legal and technical measure to mitigate data leakage risks?
Turning off the cloud service at night
Encryption and Identity & Access Management (IAM)
Using only one cloud provider
Using only public Wi-Fi
Deleting all logs
Which control is essential to prevent SQL injection in web applications?
Stronger passwords
Parameterized queries / Input validation
Increasing RAM
Closing all open ports
Disabling JavaScript
How does virtual patching protect web applications?
By rewriting the source code
By blocking exploits at the WAF level before a real patch is applied
By deleting the database
By reinstalling the OS
By physically unplugging the server
What is the main legal requirement when handling personal data under GDPR?
Data must be kept forever
Lawful basis for processing and transparency
Data must never be encrypted
All data must be public
No backups are allowed
What is the main advantage of using TLS 1.3 over older versions?
It is older and more tested
Faster handshakes and improved security/privacy
It works without the internet
It uses weaker encryption for speed
It requires more CPU power
How does multi-factor authentication improve the security of a system?
By making the password longer
By adding layers of defense against compromised credentials
By reducing the number of users
By encrypting the local hard drive
By increasing network speed
Which control ensures compliance with multi-jurisdictional data protection laws?
Data localization and GRC frameworks
Standard antivirus
Which control ensures compliance with multi-jurisdictional data protection laws?
Data localization and GRC frameworks
Standard antivirus
Using local servers only
Increasing the marketing budget
Disabling the firewall
What is the primary objective of security auditing?
To find new customers
To verify compliance and effectiveness of controls
To develop new software
To increase server speed
To reduce employee salaries
How does SIEM improve incident response efficiency?
By reducing the number of logs
By automating alerting and aggregating data for faster analysis
By preventing all attacks automatically
By deleting all suspicious emails
By replacing the firewall
What is the main function of a Certificate Authority (CA) in PKI?
To store backups
To issue and verify digital certificates
To filter spam emails
To manage office passwords
To monitor network traffic
Which encryption algorithm is considered quantum-resistant?
RSA-2048
Lattice-based cryptography (e.g., Crystals-Kyber)
DES
MD5
SHA-1
What is the primary objective of conducting a DPIA (Data Protection Impact Assessment)?
To measure network speed
To identify and minimize risks to personal data
To calculate company profit
To hire new developers
To monitor employee lunch breaks
Which approach is most effective for mitigating ransomware attacks?
Changing the wallpaper
Offline/immutable backups and EDR
Increasing bandwidth
Disabling the antivirus
Paying the ransom immediately
Which network control is crucial for protecting virtualized environments?
Physical locks
Micro-segmentation and Hypervisor-based firewalls
USB blocking
Increasing RAM
Using CRT monitors
Which metric is used to quantify and prioritize security risks?
Risk Rating (Likelihood x Impact)
Number of installed apps
Age of the hardware
Number of employees
Office square footage
What is the primary goal of a SIEM system in an enterprise environment?
Centralized visibility and real-time security monitoring
To replace the IT department
To host the company website
To increase download speeds
To manage payroll
How does the Clark-Wilson model ensure data integrity?
By encrypting all data
Through well-formed transactions and separation of duties
By hiding data from users
By deleting data after 30 days
By using only biometric access
What is the main purpose of cybersecurity hygiene practices?
To keep the office clean
To reduce risk through basic, repetitive practices (patching, passwords)
To increase software prices
To speed up the internet
To track employee hours
Which approach ensures data integrity in transit over untrusted networks?
Base64
Hashing and Digital Signatures (HMAC) / TLS
Compression
Deleting the data
Using a proxy
Which method best evaluates the effectiveness of a company's DLP solution?
Reading the manual
Attempting to exfiltrate dummy sensitive data
Checking the server temperature
Asking employees if they like the software
Increasing the cloud storage size
Which principle is fundamental for minimizing insider threats?
Separation of Duties / Least Privilege
Unlimited access for senior staff
Remote work for everyone
Sharing passwords for efficiency
Eliminating all background checks
In cloud security, what is the key advantage of Identity and Access Management (IAM)?
It makes the cloud faster
Centralized control over access to specific resources
It lowers the cost of storage
It replaces the need for a firewall
It manages the physical keys to the data center
Which type of attack can bypass standard signature-based antivirus?
Old viruses
Fileless malware and Zero-days
Plain text files
Corrupted images
Encrypted zip files (without a payload)
What is the primary benefit of using AES over DES encryption?
It is older
Significantly stronger security due to larger key sizes
It is easier to crack
It uses more power
It requires a physical key
What is the main purpose of implementing honeypots in a network?
To store actual company secrets
To distract attackers and gather threat intelligence
To improve network speed
To serve as a main database
To block all traffic
How does SIEM dashboards help in monitoring security events?
By playing music during alerts
By visualizing security events for quick monitoring
By acting as a screensaver
By managing employee calendars
By reducing power consumption
Which control is crucial for mitigating insider threats?
User Behavior Analytics (UBA)
Faster hard drives
More monitors for staff
Using only laptops
Disabling the intranet
What is the main function of stress testing for DoS/DDoS attacks?
To see if the staff is stressed
To determine system limits and resilience under load
To check the internet bill
To update the antivirus
To test the fire alarm
Which network measure can prevent lateral movement by attackers inside a corporate LAN?
Micro-segmentation
Changing the Wi-Fi name
Using a single firewall at the edge
Increasing the number of switches
Disabling the printer
How does role-based access control enhance enterprise security?
By giving everyone the same permissions
By mapping permissions to job roles rather than individuals
By requiring daily password changes
By allowing users to pick their own roles
By encrypting all email traffic
Which policy ensures proper separation of duties within an IT security team?
Dual control / Split knowledge
Bringing your own device (BYOD)
Open door policy
Shared admin accounts
Remote access for everyone
What is the primary objective of penetration testing?
To repair broken hardware
To proactively find and exploit vulnerabilities
To train employees on Excel
To increase server speed
To replace the security team
Which approach improves threat intelligence in a corporate network?
Ignoring external reports
Participating in Information Sharing and Analysis Centers (ISACs)
Reinstalling Windows daily
Decreasing the number of logs
Blocking the IT team's access
Which cryptographic algorithm supports digital signatures?
AES
ECDSA / RSA
SHA-256 (alone)
ROT13
Base64
What is the main benefit of implementing Secure Development Lifecycle (SDLC)?
It makes software development faster
It integrates security into every phase of development
It removes the need for testing
It lowers the cost of hardware
It makes the UI better
How does anomaly-based detection identify advanced persistent threats?
By looking for a specific file name
By identifying long-term deviations from normal user/network behavior
By blocking all overseas traffic
By using a dictionary attack
By checking the server's CPU temperature
How can multi-cloud environments affect security governance?
They make it easier to follow one law
They create visibility gaps and inconsistent policy application
They eliminate the risk of downtime
They remove the need for IAM
They simplify the audit process
How does multifactor authentication mitigate credential theft?
It deletes the stolen password
It renders stolen passwords useless without the second factor
It alerts the police immediately
It prevents the user from typing
It encrypts the user's brain
Which control is essential for securing virtualized environments?
Hypervisor-based security / Micro-segmentation
Desktop wallpapers
Mechanical keyboards
Physical tokens for every VM
Disabling the internet
Which practice mitigates ransomware attacks most effectively?
Increasing storage size
Regular, isolated (air-gapped/immutable) backups
Paying the ransom quickly
Disabling the firewall
Using only one laptop
Which legal and technical measures are key in cloud security to prevent data leakage?
Strong encryption and Cloud Access Security Brokers (CASB)
Using a private browser
Deleting the cloud account
Limiting the cloud to one country
Using public clouds only
