Question 1
What does malware mean?
-
Malicious software
-
Main memory hardware
-
Manual web repair
-
Managed local network
Question 2
What is phishing?
-
Fake messages that steal user data
-
Fake websites that redirect domain requests
-
Repeated guesses against a password
-
Malicious queries sent to a database
Question 3
What does a brute-force password attack do?
-
Tries many possible character combinations
-
Tries words from a prepared list
-
Steals a password through a fake message
-
Records a password with spyware
Question 4
What is the aim of a DoS attack?
-
Overloading a service until it is unavailable
-
Encrypting files until a ransom is paid
-
Copying data until an account is cloned
-
Guessing passwords until one of them works
Question 5
What is SQL injection?
-
Injecting SQL through insecure input fields
-
Encrypting a SQL database
-
Backing up SQL logs
-
Converting SQL to HTML
Question 6
What do social engineering attacks target?
-
People
-
Routers
-
Hard drives
-
Source code compilers
Question 7
Which password is strongest?
-
A long, unique mix of character types
-
A short word with one digit
-
A birthdate reused on several sites
-
A common phrase shared with friends
Question 8
What does salting a password hash do?
-
Makes identical passwords produce different hashes
-
Makes passwords shorter
-
Stores passwords in plain text
-
Replaces encryption keys
Question 9
Which is an example of biometric authentication?
-
Fingerprint scan
-
PIN code
-
Username
-
Security question
Question 10
What does two-step verification require?
-
Two different kinds of security check
-
Two passwords of the same type
-
Two usernames
-
Two devices on one network
Question 11
What does encryption change plaintext into?
-
Ciphertext
-
Checksum
-
Metadata
-
Source code
Question 12
Which key arrangement is used in symmetric encryption?
-
One shared secret key encrypts and decrypts the data
-
A public key encrypts and a private key decrypts
-
A new public key is created for every message
-
No key is needed to decrypt the data
Question 13
In public-key encryption, which key decrypts data encrypted with a public key?
-
The matching private key
-
The same public key
-
Any public key
-
A MAC address
Question 14
What does a firewall do?
-
Filters network traffic
-
Stores all passwords
-
Assigns IP addresses
-
Repairs corrupted files
Question 15
What does spyware do?
-
Secretly collects user data
-
Encrypts files and demands payment
-
Replicates by attaching to host files
-
Overloads a server with requests
Question 16
Why should security updates be installed?
-
They patch known software weaknesses
-
They encrypt every stored file
-
They replace weak user passwords
-
They block every phishing message
Question 17
Which control best protects data from ransomware loss?
-
Regular offline backups
-
A backup on the same mounted drive
-
A stronger screen-lock password
-
A firewall with no backup
Question 18
What does least privilege mean for users?
-
Only the access needed for their role
-
Full admin access
-
No access at all
-
Access to every shared folder
Question 19
What is CAPTCHA designed to distinguish?
-
Human users from automated bots
-
Administrators from standard users
-
Encrypted files from plaintext files
-
Trusted networks from public networks
Question 20
What is a security risk of open public Wi-Fi?
-
Attackers may intercept unencrypted data
-
The router may assign a private IP address
-
The device may use a slower connection
-
Web pages may load from a distant server
Question 21
What is a dictionary attack?
-
Trying common passwords and word lists
-
Trying every IP address in order
-
Replacing letters with symbols once
-
Encrypting files with a public key
Question 22
Which are the three authentication-factor categories?
-
Knowledge, possession and inherence
-
Username, password and email
-
Encryption, hashing and salting
-
Firewall, backup and antivirus
Question 23
What is social engineering?
-
Tricking people into revealing information
-
Exploiting a buffer overflow
-
Installing anti-virus software
-
Encrypting data on a disk
Question 24
What distinguishes a computer virus?
-
It attaches to a host file and replicates when run
-
It replicates across networks without a host file
-
It encrypts files and demands a ransom
-
It secretly records user activity
Question 25
What is ransomware?
-
Malware that locks data and demands payment
-
Software that improves encryption
-
A tool for testing networks
-
A backup stored off-site
Question 26
Which pair provides two-factor authentication?
-
Password and fingerprint
-
Password and security question
-
PIN and memorable word
-
Fingerprint and face scan
Question 27
Which control directly limits online brute-force attempts?
-
Temporary lockout after failed logins
-
Password hints after failed logins
-
Automatic username completion
-
A public list of password rules
Question 28
What is penetration testing?
-
Authorised attacks used to find system weaknesses
-
Unauthorised attacks used to steal system data
-
Automated backups used to restore system data
-
Encryption used to hide system data
Question 29
What can anti-malware software do after detecting a malicious file?
-
Quarantine it from the system
-
Patch the software weakness it used
-
Restore files from an earlier backup
-
Filter the network port it contacted
Question 30
Why is an unexpected email attachment risky?
-
Opening it may execute malware
-
Reading it may reveal your public IP address
-
Saving it may change the email subject
-
Deleting it may notify the sender