1)

Main objective of cybersecurity is to prevent:

2)

Which CIA principle is most affected if hospital patient records are tampered with?

3)

Sending phishing emails to a target is:

4)

Attackers establishing communication with compromised systems is:

5)

Which organization would need cybersecurity the most?

6)

Which of the following is NOT in the scope of cybersecurity?

7)

Confidentiality ensures that:

8)

Ransomware blocking access to data affects:

9)

Encrypting customer data ensures:

10)

In 2024, LockBit ransomware affected approximately:

11)

Main role of an ethical hacker is:

12)

DDoS attacks primarily impact which CIA component?

13)

The biggest ethical rule in penetration testing is:

14)

How many phishing emails are estimated to be sent daily?

15)

In a 2024 attack, phishing was used in which kill chain stage?

16)

The cyber kill chain was developed by:

17)

Creating a malicious payload is part of which stage?

18)

Installing backdoors on victim systems is:

19)

Phishing emails are an example of:

20)

The “C” in CIA triad stands for:

21) A bank protecting customers from phishing is an example of:

22)

Integrity is violated when:

23) In 2025, how many internet users are estimated globally?

24)

The first stage of cyber kill chain is:

25)

Data breaches in 2024 exposed how many personal records approximately?

26) Cybersecurity primarily focuses on protecting:

27)

Which of the following is a popular ethical hacking certification?

28)

A checksum is used to protect which principle of the CIA triad?

29)

Who benefits from ethical hacking?

30)

Malware includes:

31)

APT stands for:

32)

Which role involves detecting and responding to cyber incidents in real time?

33)

Primary goal of malware is:

34)

Which attack demanded $10 million in 2024 from a retail chain?

35)

Exploiting unpatched software vulnerabilities occurs in:

36)

Phishing attacks target primarily:

37)

Penetration testing is also known as:

38)

Ethical hacking must always be performed with:

39)

Example of ethical hacking is:

40)

Which is an insider threat example?

41)

Which of these is an example of confidentiality protection?

42)

Which is the MOST dangerous due to persistence and sophistication?

43)

A financial analyst's salary is often dependent on:

44)

Installing ransomware on company servers relates to which kill chain stage?

1) What is “container orchestration” and which tool is most popular for it?

2) What is the primary goal of a disaster recovery plan?

3) What is a zero-day vulnerability?

4) Which system service in Windows is responsible for managing security policies?

5) Which of the following is a network layer attack?

6) Which protocol uses cryptographic methods to secure web communication?

7) What does the term 'cybersecurity' mean?

8) What does the “principle of defense in depth” advocate in cloud security?

9) What does “data carving” help recover?

10) What does “immutable infrastructure” mean in DevSecOps?

11) Which organization publishes the NIST Cybersecurity Framework?

12) What is “secrets management” in cloud security?

13) Which protocol is used to securely transfer files over the Internet?

14) Which of the following tools is used for penetration testing automation?

15) What is the best defense against SQL Injection attacks?

16) What is the role of “post-exploitation” in penetration testing?

17) Which encryption technique splits data into fixed-size blocks for processing?

18) What is the role of an Endpoint Detection and Response (EDR) system?

19) What is the first step in creating an incident response plan?

20) What does the term “red team” refer to in cybersecurity?

21) What is the primary function of SELinux?

22) What is the purpose of a “security baseline” in cloud environments?

23) Which of the following is an example of social engineering?

24) The OWASP Top 10 is updated approximately every:

25) What is the difference between a vulnerability scan and a penetration test?

26) Which cybersecurity principle ensures that data is not modified by unauthorized users?

27) What is the function of the tool “Snort”?

28) Which type of firewall filters traffic at the network layer?

29) Which one of the following is a sign of a broken authentication flaw?

30) What is a brute force attack in cryptography?

31) Which vulnerability involves the attacker forcing a logged-in user to perform unwanted actions?

32)  Which security technology helps protect against Distributed Denial of Service (DDoS) attacks?

33) What does the term “key length” influence in encryption?

34) Which tool is widely used for network traffic analysis during incident investigations?

35) What is the primary purpose of a firewall on an endpoint device?

36) What is the purpose of a honeypot in cybersecurity?

37) Which Windows feature isolates programs to prevent them from affecting the OS?

38) What type of security policy defines how an organization responds to security incidents?

39) Which of the following is an example of asymmetric key encryption?

40) Why is “documentation” crucial during incident response and digital forensics?

41) Which of the following is an example of a passive reconnaissance technique?

42) A ______ is an attack where the attacker tricks users into clicking malicious links.

43) Which Linux tool helps detect rootkits on a system?

44) Which type of evidence is considered volatile?

45) Which tool is commonly used for log management and analysis?

46) What does IDS stand for in network security?

47) What is the first step in the cyber kill chain model?

48) What is the purpose of penetration testing?

49) Which penetration testing phase includes validating security controls by exploiting vulnerabilities?

50) Which protocol is used to securely transfer files over the Internet?

51) What is the purpose of a digital certificate in cryptography?

52) What does a firewall do in a network?

53) What is the main purpose of a Public Key Infrastructure (PKI)?

54) What is “footprinting” in ethical hacking?

55) Which compliance requirement mandates breach notification within 72 hours?

56) Which service is commonly used to automate compliance checks in cloud environments?

57) What does “timeline analysis” refer to in digital forensics?

58) What is a “pivot” in penetration testing?

59) Which of the following is a layer 2 device in the OSI model?

60) Which cryptographic technique uses different keys for encryption and decryption?

61) What does the “containment” phase focus on during incident response?

62) Which one of these is considered a cyber threat?

63) What is a “buffer overflow” attack?

64) What does a Data Loss Prevention (DLP) system do?

65) What does the “principle of least privilege” help prevent?

66) Which legal document often grants permission to perform penetration testing?

67) What is the role of a security standard?

68) Which tool is used to exploit known vulnerabilities and automate attacks?

69) Which of the following helps mitigate sensitive data exposure?

70) Which OWASP vulnerability occurs when the system fails to protect API endpoints properly?

71) Which process involves verifying the identity of a user or system?

72) Which security feature protects cloud workloads from unauthorized network access?

73) What is “forensic triage”?

74) Which of the following prevents unauthorized access but does not detect it?

75) Which standard provides guidelines for IT governance and management?

76) What is the main drawback of symmetric encryption?

77) What is the purpose of “file carving” in digital forensics?

78) What is the function of a Network Access Control (NAC) system?

79) What does "sandboxing" refer to in endpoint security?

80) Which DevSecOps tool is used for static application security testing (SAST)?

81) Which OWASP vulnerability involves allowing attackers to access functions or data they shouldn’t be able to?

82) Which tool is primarily used for password cracking?

83) Which cloud service model provides the highest level of user control over the infrastructure?

84) Which one of these algorithms is a cryptographic hash function?

85) What kind of attack involves exploiting unpatched software vulnerabilities?

86) In the OWASP Top 10, what does A07:2021 refer to?

87) Which OWASP category includes flaws like missing security headers and misconfigured permissions?

88) What does “least privilege” mean in access control?

89) Which digital forensic tool can analyze Windows registry files?

90) Which device is used to segment a network and reduce traffic?

91) Which of these protocols operates over port 443?

92) What is a “data retention policy”?

93) Question

94)  What is a “policy exception” in cybersecurity?

95) What is the role of antivirus “heuristics”?

96) Which organization primarily develops standards for cybersecurity in the U.S.?

97) What is the difference between a virus and a worm?

98) What is the main focus of the Sarbanes-Oxley Act (SOX) in relation to cybersecurity?

99) What is the key benefit of using containers in DevSecOps?

100) Which of the following is used to ensure data integrity?