WorksheetsUnit 8 Review
Total questions: 42
Worksheet time: 21mins
Ava has just purchased a new laptop and wants to make sure it is protected from unauthorized access and malware while she uses it at home and on public Wi-Fi. Which firewall type is designed to protect individual endpoints like laptops or desktops?
Cloud-managed web application firewall
Host-based firewall software
Network perimeter firewall device
Hardware IDS inline appliance
Aiden is setting up security for his company's network. He is considering two options: an Intrusion Detection System (IDS) and an Intrusion Prevention System (IPS). What is the key difference between an IDS and an IPS?
IDS detects, IPS can block
IDS blocks traffic automatically
IPS only generates alerts
Both ignore suspicious traffic
Maya is launching a website that will be accessed by users around the world. She wants to ensure that her site loads quickly for everyone, regardless of their location. What is a key advantage of using a Content Delivery Network (CDN) for Maya's website?
Blocks malicious attachments
Increases local Wi‑Fi range
Caches content near users
Replaces enterprise routers
Rohan wants to securely access his company's internal network while working from a coffee shop. Which benefit does using a Virtual Private Network (VPN) mainly provide to Rohan?
Encrypted private tunneling
Automatic malware removal
Public hotspot acceleration
Unrestricted bandwidth caps
Grace is sending a message across a network, and she wants to make sure that the message doesn't circulate endlessly if something goes wrong. What is the purpose of the Time to Live (TTL) field in a packet header?
Guarantee delivery without loss
Encrypt source IP address values
Limit packet lifetime hops
Measure throughput speed value
Emma is responsible for managing the security of her company's data. She needs to ensure that sensitive information is only accessible to authorized users, that the data remains accurate and unaltered, and that the information is available whenever needed. List and define the three core components of the CIA Triad that Emma should focus on:
• C (Confidentiality):
• I (Integrity):
• A (Availability):
Confidentiality, Integrity, Availability definitions
Compliance, Inspection, Audit purposes
Authentication, Authorization, Accounting roles
Confidentiality, Identification, Assurance meanings
Abigail is responsible for ensuring the integrity of important company files. Which tool should she use to help maintain the integrity of data? Explain how.
Checksums verify changes in data
Backups restore lost information
Encryption hides content from readers
Firewalls block unauthorized access
Samuel owns a small business and is concerned about potential financial losses from cyber attacks. He decides to purchase cyber insurance so that if an attack occurs, the insurance company will cover the costs. In risk management, what does Samuel’s action of “transferring the risk” usually mean?
Eliminating all vulnerabilities
Shifting impact to a third party
Accepting potential losses internally
Delaying decisions indefinitely
Benjamin is driving to work. Give one example of each from his everyday life: • Risk example: • Threat example: • Vulnerability example:
Risk car crash, threat icy roads, vulnerability bald tires
Risk data breach, threat malware, vulnerability firewall
Risk rainstorm, threat sunshine, vulnerability umbrella
Risk theft, threat password, vulnerability encryption
Aria is setting up a secure website for her online store. She wants to make sure that customers' data, like credit card information, is protected while being sent over the internet. What encryption method should Aria use to protect data in transit over the web (like HTTPS), and what does it protect?
SSH protects local file storage
AES protects database schemas
PGP protects printer queues
TLS protects confidentiality and integrity
David is setting up computers in his office and wants to ensure they are protected from malware. He learns about worms and viruses. What is the key difference between a worm and a virus?
Worm self-propagates; virus needs host
Neither spreads between systems
Virus self-propagates; worm needs host
Both require user interaction
Zoe is entering her office building, which requires a key card for access. As she opens the door, someone she doesn't recognize closely follows her inside without using their own key card. What is this security breach called?
Following someone into a secure area
Scanning devices for vulnerabilities
Spoofing email sender addresses
Sharing passwords with coworkers
William works as a cybersecurity analyst for a large company. One day, he discovers that computers all over the world are being remotely controlled to launch cyber attacks against his company's servers. How does this network of compromised machines operate?
Peer-to-peer chat among users
A single server storing backups
Manual scripts executed by admins
Many infected hosts controlled remotely
William is working as a network administrator and suspects that someone is trying to bypass VLAN security in his organization. He learns that VLAN hopping often uses a specific technique. Which technique name is most commonly associated with VLAN hopping?
DNS zone transfer
ARP cache spoofing
Double-tagging frames
Beacon frame forging
Benjamin is working in an office network and notices suspicious activity. He suspects that someone is using ARP poisoning to intercept network traffic. Which broader attack does ARP poisoning commonly facilitate?
Password spraying campaigns
Cross-site scripting chains
SQL injection exploitation
Man-in-the-Middle interception
Jackson tries to visit his bank's website, but he notices that the site looks suspicious and asks for unusual information. Which user-visible symptom most commonly indicates DNS poisoning?
Legitimate domains resolve to fake sites
CPU usage spikes without reason
Browser cache refuses to clear
Wi‑Fi SSID disappears unexpectedly
Emma is responsible for managing user accounts and permissions in her company's IT system. What is the primary purpose of Identity and Access Management (IAM) in this scenario?
Ensure the right users have proper access
Encrypt data at rest on all servers
Monitor network latency and jitter
Optimize database query performance
Emma logs into her company's portal once and then is able to access the email system, HR platform, and project management tool without having to enter her credentials again. What technology enables this?
Single Sign-On across trusted services
Local account cached on the device
Password manager autofilling fields
Guest access with temporary tokens
Anika is setting up a secure network for her company and needs a protocol that primarily handles centralized authentication, authorization, and accounting for network devices. Which protocol should she use?
TACACS+ for AAA on infrastructure
LDAP for email address lookups
SAML for browser-based identity
RADIUS for certificate enrollment
Avery is configuring single sign-on (SSO) for their company's enterprise applications. During the setup, Avery needs to choose a protocol that will allow users to authenticate once and access multiple applications securely. Which statement describes how SAML is used in this workflow?
Exchanges authentication assertions for SSO
Stores hierarchical objects in directories
Provides device-level command authorization
Performs remote dial-in authentication
Abigail is responsible for managing her company's cybersecurity program. She wants to ensure that the controls in place are working effectively. Why are audits important in cybersecurity programs?
Reduce CPU usage on servers
Provide evidence of control effectiveness
Replace user training requirements
Eliminate all software vulnerabilities
Maya is setting up a secure website for her company and needs to ensure that users can trust the site’s identity. What is the role of a Certificate Authority (CA) in PKI for Maya’s website?
Detect malware on endpoints
Issue and validate certificates
Manage physical access badges
Encrypt all network traffic
Liam wants to secure his online banking account. How does multifactor authentication (MFA) enhance his account's security compared to just using a password?
Requires multiple independent factors
Makes passwords longer automatically
Eliminates the need for encryption
Blocks all phishing attempts always
Samuel is setting up a single sign-on system for his company's web applications. He wants employees to log in once and access multiple services without re-entering their credentials. In this context, what does SAML primarily do?
Scans networks for vulnerabilities
Encrypts hard drives entirely
Facilitates federated authentication
Manages physical door locks
Kai is responsible for managing a company's office building. What is the primary goal of physical security in this real-world scenario?
Protect people and assets
Speed up wireless networks
Improve software usability
Reduce electricity consumption
At Lincoln High School, the security team wants to install cameras that can be remotely moved and zoomed in to monitor different areas. Which camera type allows for this PTZ (pan-tilt-zoom) functionality, and how might it be used at the school?
Thermal camera, encrypt databases
PTZ camera, monitor hallways actively
Fixed camera, prevent user logins
IP camera, store analog footage
Maya is responsible for managing the keys to secure areas in her company. Why is key management important for physical security?
Controls access and audits use
Increases camera resolution
Speeds up network routing
Prevents software vulnerabilities
Benjamin is setting up a cybersecurity system for his company. He wants to create a setup that attracts potential attackers so he can study their methods without risking the real network. What should Benjamin implement?
Backup server for production
Tool that blocks all malware
Encrypted storage for passwords
Decoy system to lure attackers
David is setting up Wi‑Fi at his office and wants to allow guests to use the internet without risking the security of his internal network. Why is maintaining a separate guest Wi‑Fi network recommended?
It disables all firewall functions automatically
It guarantees unlimited internet bandwidth
It makes printers always print faster
It isolates untrusted devices from internal LAN
Charlotte is responsible for managing a plant that uses sensors connected to an ICS network. Which approach best limits a malware outbreak from spreading to business systems?
Share admin accounts across all devices
Use a single flat network for simplicity
Enable universal plug‑and‑play everywhere
Segment ICS from corporate with firewalls
Olivia is setting up a Wi-Fi network for her coffee shop and wants to ensure that only paying customers can access it. Which security protocol should she use to protect wireless communications, and what does it help prevent?
WEP prevents password reuse
FTP encrypts web traffic
SMTP blocks malware downloads
WPA2 secures wireless data from eavesdropping
Priya leaves her house unlocked while she is away. Which concept does this scenario best illustrate?
Driving on a busy highway
Wearing a helmet while cycling
Leaving your house unlocked while you are away
Having a strong password for your email
When entering a secure area, an employee notices someone tailgating behind them without proper identification. What is the recommended action to prevent this type of security breach?
Hold the door open for everyone
Politely ask the person to present their access credentials
Ignore and continue walking
Share your key card with the person
Lucas is setting up a new wireless network for his company's office. He wants to make sure that only authorized employees can connect to the Wi-Fi and that their data is protected with strong encryption. Which protocol should Lucas implement to provide strong encryption and authentication for Wi-Fi connections?
WPA3 for enhanced security and encryption
WEP for basic password protection
HTTP for secure web browsing
POP3 for email retrieval
Sophia is configuring her company's firewall to protect sensitive data from external threats. What is the main function of a firewall in network security?
Monitor employee productivity
Manage user passwords
Increase internet speed
Block unauthorized access to the network
David is setting up a secure login system for his company's web portal. Which technology allows users to authenticate once and gain access to multiple applications without re-entering their credentials?
Multi-factor authentication
VPN tunneling
Single Sign-On (SSO)
Firewall filtering
Evelyn works in an office building. One day, she notices someone she does not recognize trying to enter the building without proper authorization. Which of the following is an example of a threat to physical security in this office environment?
An unauthorized person attempting to enter the building
Leaving confidential documents on a desk overnight
Installing security cameras
Using strong encryption for emails
At a corporate office, employees use secure doors to access sensitive areas. Sometimes, attackers try to enter these areas by following authorized personnel through the doors without proper authentication. Which method helps prevent such unauthorized access?
Disabling all security alarms
Using outdated passwords
Increasing Wi-Fi bandwidth
Implementing tailgating prevention measures
David needs to securely access his company's internal network from home over the internet. Which protocol is commonly used to provide secure remote access in this situation?
FTP (File Transfer Protocol)
SMTP (Simple Mail Transfer Protocol)
VPN (Virtual Private Network)
HTTP (Hypertext Transfer Protocol)
Olivia is setting up access controls for her company's sensitive data. Which principle helps ensure that users only have the permissions necessary to perform their job functions?
Share passwords between teams
Disable all user accounts
Universal access for all employees
Least privilege limits unnecessary access
Jacob is setting up a new office for his company and wants to ensure that only authorized devices can access the company's network. He needs a device that will monitor and control all incoming and outgoing network traffic according to security rules. Which device should Jacob use?
Printer manages document output
Monitor tracks employee attendance
Firewall enforces network boundaries
Router increases internet speed
Sophia manages the IT systems for her company and regularly schedules backups of important business documents. What is the main benefit of having regular backups in a cybersecurity program?
Increase server CPU performance
Encrypt passwords automatically
Restore data after loss or corruption
Block all network traffic
