1) Which of the following is NOT a common cybersecurity threat?

2) Which of the following is an example of malware?

3) Which of the following is a secure version of HTTP?

4) Which phase of penetration testing involves gathering information about the target?

5) Which standard is widely used for information security management systems (ISMS)?

6) What does the alt attribute do in an <img> tag?

7) Which of the following is an example of a regulatory compliance standard?

8) What is a common vulnerability of the MD5 hashing algorithm?

9) Which law enforcement guideline helps maintain evidence integrity in digital forensics?

10) What is the main goal of container security in cloud environments?

11) What does a Security Information and Event Management (SIEM) system do?

12) Which technique is used to detect anomalies in network traffic?

13) Which cryptographic algorithm is widely used in securing internet communications (HTTPS)?

14) In public key cryptography, what is the public key used for?

15) Which cryptographic function is one-way and cannot be reversed?

16) Which tool is often used for web application penetration testing?

17) What is “Infrastructure as Code” (IaC) in DevSecOps?

18) What does IP spoofing involve?

19) What does a host-based intrusion detection system (HIDS) do?

20) Which term describes unsolicited or junk email?

21) What is the main purpose of ethical hacking?

22) What is the role of a “forensic image”?

23) What is the primary goal of cybersecurity?

24) What is a common method for ensuring file system security in operating systems?

25) What does the term “Insecure Deserialization” refer to in the OWASP Top 10?

26) What does “penetration testing” involve?

27) What is the function of endpoint encryption?

28) What is the function of a Cloud Access Security Broker (CASB)?

29) Question

30) Which Linux command is used to change file permissions?

31) What is “memory forensics” used to analyze?

32) What is the main function of a proxy server in a network?

33) What is port scanning used for in cybersecurity?

34)

1. Which type of data is characterized by being non-numeric and descriptive, often involving categories or labels?

35) During which phase are vulnerabilities patched and root causes eliminated?

36) Which security header helps protect against XSS attacks?

37) Which is the most basic type of cybersecurity attack?

38) What is the primary purpose of a security policy in an organization?

39) Which type of vulnerability can exploit trust in the user’s browser session?

40) What is a “chain of custody” in digital forensics?

41) What is the purpose of a proxy server in network security?

42) Which OWASP Top 10 vulnerability involves untrusted data being used to trick an interpreter?

43) Which of the following is not in the OWASP Top 10 list (as of 2021)?

44) Which layer of the OSI model does a router operate on?

45) What is the main goal of access control policies?

46) What is the primary function of a firewall?

47) What is the purpose of an endpoint protection platform (EPP)?

48) Which of the following is a core function of an operating system?

49) Which tool is commonly used for digital forensics and data recovery?

50) What is the role of compliance audits?

51) Which type of attack involves overwhelming a system with traffic to render it unavailable?

52) What is the final step in a penetration testing process?

53) What is the role of a firewall in cybersecurity?

54) Which tool is commonly used for network traffic analysis?

55) Which component is necessary for asymmetric encryption?

56) What is two-factor authentication (2FA)?

57) Which security practice is essential for continuous integration/continuous deployment (CI/CD) pipelines?

58) Which type of malware disguises itself as legitimate software?

59) Which tool is commonly used for network vulnerability scanning?

60) What is the purpose of a DMZ (Demilitarized Zone) in network architecture?

61) What does “A01:2021 – Broken Access Control” primarily refer to?

62) What is the role of antivirus software in endpoint security?

63) What is the main purpose of log analysis in incident response?

64) Which Windows security feature prevents unauthorized changes to the operating system?

65) How can you mitigate Cross-Site Scripting (XSS)?

66) Which type of encryption uses the same key for both encryption and decryption?

67) What is the full form of SSL in network security?

68) What does the principle of “least privilege” mean in cloud security?

69) Which vulnerability allows attackers to inject malicious scripts into web pages viewed by others?

70) What does DevSecOps stand for?

71) Which compliance framework is specifically designed for payment card data security?

72) What does GDPR primarily regulate?

73) Which tool is used for vulnerability scanning in networks?

74) Which document outlines the detailed procedures to enforce a security policy?

75) What is “privilege escalation” in ethical hacking?

76) What is an Advanced Persistent Threat (APT)?

77) Which of the following is a common vulnerability in cloud environments?

78)

1. What is the primary role of "data lineage" in data management?

79) What is the primary goal of incident response?

80) Which network device is used to connect different networks together?

81) What is “live forensics”?

82) What is the main purpose of cryptography?

83) Which phase of incident response involves identifying and verifying an incident?

84) What technology creates a secure, encrypted tunnel over the internet?

85) Which tool is popular for automated web application security testing?

86) What is the process of converting ciphertext back into readable form called?

87) What does the CIA triad stand for in cybersecurity?

88) What is a “white hat” hacker?

89) Which cloud security model shares responsibility between the cloud provider and the user?

90) Which of these best describes privilege escalation?

91) Which tool is commonly used for scanning container images for vulnerabilities?

92) What does OWASP stand for?

93) Why is patch management critical for endpoint security?

94) A broken authentication flaw can lead to which major risk?

95) What does AES stand for?

96) What is “social engineering” in penetration testing?

97) What does “shift-left security” mean in DevSecOps?

98) What does a “security baseline” refer to?

99) Which algorithm is known for producing digital signatures?

100) What does the term “zero-day vulnerability” mean?