1)

Integrity is violated when:

2)

Attackers establishing communication with compromised systems is:

3)

The “C” in CIA triad stands for:

4)

Which attack demanded $10 million in 2024 from a retail chain?

5)

Which role involves detecting and responding to cyber incidents in real time?

6)

Ethical hacking must always be performed with:

7)

Malware includes:

8)

How many phishing emails are estimated to be sent daily?

9)

Which is an insider threat example?

10)

In 2024, LockBit ransomware affected approximately:

11)

The cyber kill chain was developed by:

12)

A financial analyst's salary is often dependent on:

13)

APT stands for:

14)

Creating a malicious payload is part of which stage?

15)

DDoS attacks primarily impact which CIA component?

16) In 2025, how many internet users are estimated globally?

17)

Which of these is an example of confidentiality protection?

18)

In a 2024 attack, phishing was used in which kill chain stage?

19)

The first stage of cyber kill chain is:

20)

Penetration testing is also known as:

21)

A checksum is used to protect which principle of the CIA triad?

22) Cybersecurity primarily focuses on protecting:

23) A bank protecting customers from phishing is an example of:

24)

Installing ransomware on company servers relates to which kill chain stage?

25)

Phishing attacks target primarily:

26)

Confidentiality ensures that:

27)

Installing backdoors on victim systems is:

28)

Sending phishing emails to a target is:

29)

Example of ethical hacking is:

30)

Main role of an ethical hacker is:

31)

Encrypting customer data ensures:

32)

Which CIA principle is most affected if hospital patient records are tampered with?

33)

Exploiting unpatched software vulnerabilities occurs in:

34)

Which is the MOST dangerous due to persistence and sophistication?

35)

Which organization would need cybersecurity the most?

36)

Phishing emails are an example of:

37)

Primary goal of malware is:

38)

Data breaches in 2024 exposed how many personal records approximately?

39)

Which of the following is a popular ethical hacking certification?

40)

The biggest ethical rule in penetration testing is:

41)

Who benefits from ethical hacking?

42)

Which of the following is NOT in the scope of cybersecurity?

43)

Main objective of cybersecurity is to prevent:

44)

Ransomware blocking access to data affects:

1) Which type of evidence is considered volatile?

2) What is the first step in creating an incident response plan?

3) Which OWASP category includes flaws like missing security headers and misconfigured permissions?

4) Which digital forensic tool can analyze Windows registry files?

5) Which one of the following is a sign of a broken authentication flaw?

6) What is the role of an Endpoint Detection and Response (EDR) system?

7) Which tool is primarily used for password cracking?

8) Which Windows feature isolates programs to prevent them from affecting the OS?

9) Which security feature protects cloud workloads from unauthorized network access?

10) What is the main purpose of a Public Key Infrastructure (PKI)?

11) What does the term “red team” refer to in cybersecurity?

12) What does “data carving” help recover?

13) Which of the following prevents unauthorized access but does not detect it?

14) Which tool is commonly used for log management and analysis?

15) What is the best defense against SQL Injection attacks?

16) What does "sandboxing" refer to in endpoint security?

17) What is a “pivot” in penetration testing?

18) Which legal document often grants permission to perform penetration testing?

19) Which one of these algorithms is a cryptographic hash function?

20) Which of the following is a network layer attack?

21) What is the first step in the cyber kill chain model?

22) Which organization publishes the NIST Cybersecurity Framework?

23) Which service is commonly used to automate compliance checks in cloud environments?

24) Which device is used to segment a network and reduce traffic?

25) Which vulnerability involves the attacker forcing a logged-in user to perform unwanted actions?

26) In the OWASP Top 10, what does A07:2021 refer to?

27) What is the main focus of the Sarbanes-Oxley Act (SOX) in relation to cybersecurity?

28) Why is “documentation” crucial during incident response and digital forensics?

29) Which system service in Windows is responsible for managing security policies?

30) What does the “containment” phase focus on during incident response?

31) Which of the following is an example of social engineering?

32) Which of the following is used to ensure data integrity?

33) Which type of firewall filters traffic at the network layer?

34) What is the role of a security standard?

35) What does a Data Loss Prevention (DLP) system do?

36) What does the “principle of least privilege” help prevent?

37) What is the role of “post-exploitation” in penetration testing?

38) What is the function of the tool “Snort”?

39) What is the primary goal of a disaster recovery plan?

40) What is the purpose of “file carving” in digital forensics?

41) Which OWASP vulnerability involves allowing attackers to access functions or data they shouldn’t be able to?

42)  Which security technology helps protect against Distributed Denial of Service (DDoS) attacks?

43) What is “footprinting” in ethical hacking?

44) What does “least privilege” mean in access control?

45) Which protocol uses cryptographic methods to secure web communication?

46) Which of the following is an example of asymmetric key encryption?

47) What is the role of antivirus “heuristics”?

48) Question

49) What is the purpose of a digital certificate in cryptography?

50) Which of these protocols operates over port 443?

51) Which of the following is an example of a passive reconnaissance technique?

52) What is the difference between a virus and a worm?

53) What is the purpose of a “security baseline” in cloud environments?

54) Which tool is widely used for network traffic analysis during incident investigations?

55) Which cloud service model provides the highest level of user control over the infrastructure?

56) Which protocol is used to securely transfer files over the Internet?

57) What does the “principle of defense in depth” advocate in cloud security?

58) What is the function of a Network Access Control (NAC) system?

59) Which protocol is used to securely transfer files over the Internet?

60) What is a zero-day vulnerability?

61) What does the term “key length” influence in encryption?

62) What is a brute force attack in cryptography?

63) What is “container orchestration” and which tool is most popular for it?

64) What does “timeline analysis” refer to in digital forensics?

65) What is a “data retention policy”?

66) Which DevSecOps tool is used for static application security testing (SAST)?

67) What does the term 'cybersecurity' mean?

68) A ______ is an attack where the attacker tricks users into clicking malicious links.

69) Which Linux tool helps detect rootkits on a system?

70) Which tool is used to exploit known vulnerabilities and automate attacks?

71) What does a firewall do in a network?

72) What is the key benefit of using containers in DevSecOps?

73) What is a “buffer overflow” attack?

74) What is “forensic triage”?

75) Which process involves verifying the identity of a user or system?

76) What kind of attack involves exploiting unpatched software vulnerabilities?

77) Which OWASP vulnerability occurs when the system fails to protect API endpoints properly?

78) Which compliance requirement mandates breach notification within 72 hours?

79) Which of the following tools is used for penetration testing automation?

80) Which cybersecurity principle ensures that data is not modified by unauthorized users?

81) Which of the following is a layer 2 device in the OSI model?

82) What is the primary purpose of a firewall on an endpoint device?

83) What is the primary function of SELinux?

84) What does “immutable infrastructure” mean in DevSecOps?

85) What is “secrets management” in cloud security?

86) What is the difference between a vulnerability scan and a penetration test?

87) Which standard provides guidelines for IT governance and management?

88)  What is a “policy exception” in cybersecurity?

89) Which cryptographic technique uses different keys for encryption and decryption?

90) What is the purpose of penetration testing?

91) What does IDS stand for in network security?

92) Which encryption technique splits data into fixed-size blocks for processing?

93) Which organization primarily develops standards for cybersecurity in the U.S.?

94) Which penetration testing phase includes validating security controls by exploiting vulnerabilities?

95) Which of the following helps mitigate sensitive data exposure?

96) What is the main drawback of symmetric encryption?

97) Which one of these is considered a cyber threat?

98) What type of security policy defines how an organization responds to security incidents?

99) What is the purpose of a honeypot in cybersecurity?

100) The OWASP Top 10 is updated approximately every: