1)

Confidentiality ensures that:

2)

DDoS attacks primarily impact which CIA component?

3)

Which of the following is NOT in the scope of cybersecurity?

4)

Sending phishing emails to a target is:

5)

Which of these is an example of confidentiality protection?

6)

Installing backdoors on victim systems is:

7)

Ransomware blocking access to data affects:

8)

How many phishing emails are estimated to be sent daily?

9)

Example of ethical hacking is:

10)

Phishing emails are an example of:

11)

The first stage of cyber kill chain is:

12)

Primary goal of malware is:

13)

APT stands for:

14)

Encrypting customer data ensures:

15)

Which role involves detecting and responding to cyber incidents in real time?

16)

Ethical hacking must always be performed with:

17)

Main role of an ethical hacker is:

18)

Integrity is violated when:

19)

Main objective of cybersecurity is to prevent:

20)

Which CIA principle is most affected if hospital patient records are tampered with?

21) In 2025, how many internet users are estimated globally?

22)

Which is an insider threat example?

23)

Data breaches in 2024 exposed how many personal records approximately?

24)

Exploiting unpatched software vulnerabilities occurs in:

25)

Penetration testing is also known as:

26)

The biggest ethical rule in penetration testing is:

27)

Attackers establishing communication with compromised systems is:

28) A bank protecting customers from phishing is an example of:

29)

In 2024, LockBit ransomware affected approximately:

30)

Malware includes:

31)

The cyber kill chain was developed by:

32)

Which is the MOST dangerous due to persistence and sophistication?

33)

Who benefits from ethical hacking?

34) Cybersecurity primarily focuses on protecting:

35)

A checksum is used to protect which principle of the CIA triad?

36)

Creating a malicious payload is part of which stage?

37)

Which of the following is a popular ethical hacking certification?

38)

Which organization would need cybersecurity the most?

39)

Phishing attacks target primarily:

40)

Installing ransomware on company servers relates to which kill chain stage?

41)

A financial analyst's salary is often dependent on:

42)

The “C” in CIA triad stands for:

43)

In a 2024 attack, phishing was used in which kill chain stage?

44)

Which attack demanded $10 million in 2024 from a retail chain?

1) Which of the following tools is used for penetration testing automation?

2) Which tool is used to exploit known vulnerabilities and automate attacks?

3) Which Windows feature isolates programs to prevent them from affecting the OS?

4) Which standard provides guidelines for IT governance and management?

5) Which protocol uses cryptographic methods to secure web communication?

6) Which of the following is an example of social engineering?

7)  Which security technology helps protect against Distributed Denial of Service (DDoS) attacks?

8) What is the first step in the cyber kill chain model?

9) Which legal document often grants permission to perform penetration testing?

10) Which one of these is considered a cyber threat?

11) What is a “pivot” in penetration testing?

12) What does the term “red team” refer to in cybersecurity?

13) What does the term “key length” influence in encryption?

14) Which device is used to segment a network and reduce traffic?

15) Which process involves verifying the identity of a user or system?

16) What is the purpose of a “security baseline” in cloud environments?

17) What does the “principle of least privilege” help prevent?

18) What is the role of an Endpoint Detection and Response (EDR) system?

19) What does the term 'cybersecurity' mean?

20) What does “timeline analysis” refer to in digital forensics?

21) What is a “buffer overflow” attack?

22) Which of the following is an example of asymmetric key encryption?

23) What is the difference between a vulnerability scan and a penetration test?

24) Which DevSecOps tool is used for static application security testing (SAST)?

25) Which protocol is used to securely transfer files over the Internet?

26) What is the role of antivirus “heuristics”?

27) Which organization primarily develops standards for cybersecurity in the U.S.?

28) In the OWASP Top 10, what does A07:2021 refer to?

29) What does “data carving” help recover?

30) Which tool is widely used for network traffic analysis during incident investigations?

31) Which of the following is a layer 2 device in the OSI model?

32) What is the main focus of the Sarbanes-Oxley Act (SOX) in relation to cybersecurity?

33) Which system service in Windows is responsible for managing security policies?

34) What is “container orchestration” and which tool is most popular for it?

35) Which vulnerability involves the attacker forcing a logged-in user to perform unwanted actions?

36) What is a brute force attack in cryptography?

37) What does a Data Loss Prevention (DLP) system do?

38) What is “forensic triage”?

39) Which of the following is an example of a passive reconnaissance technique?

40) What is the first step in creating an incident response plan?

41) Which Linux tool helps detect rootkits on a system?

42) Which of the following helps mitigate sensitive data exposure?

43) What does the “containment” phase focus on during incident response?

44) What is the primary goal of a disaster recovery plan?

45) Which of these protocols operates over port 443?

46) Which cybersecurity principle ensures that data is not modified by unauthorized users?

47) What is the purpose of a digital certificate in cryptography?

48) Which of the following prevents unauthorized access but does not detect it?

49) What is “secrets management” in cloud security?

50) What is a “data retention policy”?

51) What is the best defense against SQL Injection attacks?

52) Which one of these algorithms is a cryptographic hash function?

53) What is the role of “post-exploitation” in penetration testing?

54) What type of security policy defines how an organization responds to security incidents?

55) What is “footprinting” in ethical hacking?

56) Which type of evidence is considered volatile?

57) Which security feature protects cloud workloads from unauthorized network access?

58) What is the key benefit of using containers in DevSecOps?

59) What is the function of the tool “Snort”?

60) What is the primary function of SELinux?

61) Which tool is commonly used for log management and analysis?

62) What does the “principle of defense in depth” advocate in cloud security?

63) The OWASP Top 10 is updated approximately every:

64) What does “least privilege” mean in access control?

65) Question

66) What is the primary purpose of a firewall on an endpoint device?

67) Which digital forensic tool can analyze Windows registry files?

68) Which tool is primarily used for password cracking?

69) What is the difference between a virus and a worm?

70) A ______ is an attack where the attacker tricks users into clicking malicious links.

71) Which of the following is a network layer attack?

72) What kind of attack involves exploiting unpatched software vulnerabilities?

73) Which organization publishes the NIST Cybersecurity Framework?

74) What is a zero-day vulnerability?

75) Why is “documentation” crucial during incident response and digital forensics?

76) Which encryption technique splits data into fixed-size blocks for processing?

77) Which penetration testing phase includes validating security controls by exploiting vulnerabilities?

78) What does a firewall do in a network?

79) What does “immutable infrastructure” mean in DevSecOps?

80) What is the main drawback of symmetric encryption?

81) What is the purpose of “file carving” in digital forensics?

82)  What is a “policy exception” in cybersecurity?

83) Which cryptographic technique uses different keys for encryption and decryption?

84) What is the purpose of penetration testing?

85) What is the role of a security standard?

86) Which service is commonly used to automate compliance checks in cloud environments?

87) Which OWASP vulnerability involves allowing attackers to access functions or data they shouldn’t be able to?

88) Which one of the following is a sign of a broken authentication flaw?

89) What is the main purpose of a Public Key Infrastructure (PKI)?

90) Which OWASP vulnerability occurs when the system fails to protect API endpoints properly?

91) Which type of firewall filters traffic at the network layer?

92) What is the function of a Network Access Control (NAC) system?

93) Which compliance requirement mandates breach notification within 72 hours?

94) Which of the following is used to ensure data integrity?

95) What does IDS stand for in network security?

96) What does "sandboxing" refer to in endpoint security?

97) Which cloud service model provides the highest level of user control over the infrastructure?

98) Which protocol is used to securely transfer files over the Internet?

99) What is the purpose of a honeypot in cybersecurity?

100) Which OWASP category includes flaws like missing security headers and misconfigured permissions?