Cybersecurity
27 free questions with worked answers, and 599 more in the full bank.
Free questions
The hospital management system is experiencing issues with data encryption and security due to a compromised encryption key. What is the best approach to resolve this issue while ensuring data protection and minimizing downtime?
1 mark · Easy
A user reports that they are unable to access the hospital management system due to a certificate expiration issue. What steps would you take to troubleshoot and resolve the issue while ensuring system availability?
1 mark · Easy
The hospital management system is experiencing issues with user authentication due to a compromised authentication token. What is the best approach to resolve this issue while minimizing disruption to patient care?
1 mark · Easy
What is the main purpose of a firewall?
1 mark · Easy
What type of malware disguises itself as legitimate software?
3 marks · Medium
What is a common method for securing user passwords?
3 marks · Medium
A user reports that they are unable to access the hospital management system due to a denial-of-service (DoS) attack. What steps would you take to mitigate the attack and restore system availability?
3 marks · Medium
What is the main purpose of antivirus software?
3 marks · Medium
Which of the following is an example of two-factor authentication?
3 marks · Medium
When setting up a new user account, what is an important first step?
3 marks · Medium
Which of the following is considered a strong password?
3 marks · Medium
Which of the following is an example of a phishing attack?
4 marks · Hard
A receptionist receives a call from someone claiming to be the CEO, demanding a password reset immediately because they are about to start a critical board meeting. This BEST describes which attack?
1 mark · Easy
An employee receives an SMS on their corporate phone stating their multi-factor authentication app needs a critical update, including a link to download an APK. What type of attack is occurring?
3 marks · Medium
A contractor holding a large box of networking equipment waits by the secure datacenter door until an authorized employee scans their badge and opens it, then follows them inside. This is known as...
3 marks · Medium
The CFO of a logistics company receives a highly customized email claiming a wire transfer for a known vendor has failed. The email contains a link to a fake banking portal. This attack is an example of...
1 mark · Easy
An attacker leaves several USB drives labeled "Q3 Layoffs & Bonuses" in the company parking lot, hoping curious employees will plug them into corporate workstations. This technique is called...
3 marks · Medium
A threat actor creates a fake LinkedIn profile claiming to be an IT recruiter. They spend weeks chatting with a systems administrator before asking them to run a "skills assessment" executable. This scenario heavily utilizes...
4 marks · Hard
During a penetration test, an assessor sits in the break room and watches an employee type their complex password into a laptop. The assessor then uses these credentials later. What occurred?
3 marks · Medium
A hospital's patient records system suddenly displays a red screen demanding payment in Bitcoin within 48 hours to decrypt the database. What type of malware has infected the system?
1 mark · Easy
A security analyst discovers that a compromised workstation has software installed that allows an attacker to remotely open the CD-ROM tray, turn on the webcam, and browse the filesystem without user knowledge. This is a...
3 marks · Medium
After a suspected breach, administrators notice that standard operating system commands like 'ls' and 'ps' are not showing a malicious process that is consuming CPU resources. The malware has likely installed a...
4 marks · Hard
An employee unknowingly downloads a malicious browser extension that records every keystroke made on banking websites and sends the text to an external server. This malware is a...
3 marks · Medium
Users complain that their web browsers are constantly redirecting to search engines they did not set, and pop-up ads appear even when the browser is closed. The systems are likely infected with...
3 marks · Medium
A piece of malware exploits a vulnerability in SMBv1 to spread rapidly across a corporate network without any user interaction, infecting hundreds of machines in minutes. This behavior characterizes a...
1 mark · Easy
An end-user downloads what appears to be a legitimate free PDF editor from a third-party site. Once installed, it edits PDFs but also silently installs a backdoor. This is an example of a...
3 marks · Medium
An endpoint detection system flags unusual PowerShell activity. Investigation reveals a malicious script running entirely in RAM, heavily obfuscated, leaving no executable footprint on the hard drive. This is...
4 marks · Hard
More Cybersecurity questions (page 3 of 10)
Answers and explanations are in the full bank.
- In a highly secure environment, the IT team deploys a solution that continually evaluates a user's behavior (typing speed, typical working hours, application usage) during an active session to ensure the user has not been compromised. This is an example of... · 4 marks
- In Cybersecurity (Threats and attacks), which statement about phishing is correct? · 1 mark
- A supervisor tests your knowledge of authentication. Which answer is best? · 4 marks
- In Cybersecurity (Network and application security), a supervisor tests your knowledge of firewall. Which answer is best? · 4 marks
- A supervisor tests your knowledge of encryption at rest. Which answer is best? · 4 marks
- A supervisor tests your knowledge of security information and event management. Which answer is best? · 1 mark
- A supervisor tests your knowledge of recovery time objective. Which answer is best? · 1 mark
- A certification question asks about spear phishing. Which answer is correct? · 3 marks
- A certification question asks about authorization. Which answer is correct? · 3 marks
- A certification question asks about intrusion detection system. Which answer is correct? · 3 marks
- A certification question asks about encryption in transit. Which answer is correct? · 4 marks
- A certification question asks about security orchestration, automation, and response. Which answer is correct? · 4 marks
- A certification question asks about recovery point objective. Which answer is correct? · 4 marks
- In Cybersecurity (Threats and attacks), which statement about smishing is correct? · 1 mark
- A supervisor tests your knowledge of multi-factor authentication. Which answer is best? · 4 marks
- A supervisor tests your knowledge of intrusion prevention system. Which answer is best? · 4 marks
- A supervisor tests your knowledge of symmetric encryption. Which answer is best? · 4 marks
- A supervisor tests your knowledge of incident response plan. Which answer is best? · 1 mark
- A certification question asks about password salt. Which answer is correct? · 4 marks
- A certification question asks about vulnerability assessment. Which answer is correct? · 4 marks
- In Cybersecurity (Threats and attacks), which statement about password spraying is correct? · 1 mark
- A supervisor tests your knowledge of privileged access management. Which answer is best? · 4 marks
- A supervisor tests your knowledge of web application firewall. Which answer is best? · 4 marks
- A supervisor tests your knowledge of digital signature. Which answer is best? · 4 marks
- In Cybersecurity (Security operations), which statement about penetration test is correct? · 3 marks
- Which option best describes phishing? · 3 marks
- During routine technical work, which statement about confidentiality should guide the technician? · 3 marks
- During routine technical work, which statement about integrity should guide the technician? · 3 marks
- During routine technical work, which statement about availability should guide the technician? · 3 marks
- During routine technical work, which statement about least privilege should guide the technician? · 3 marks
- During routine technical work, which statement about multi-factor authentication should guide the technician? · 3 marks
- During routine technical work, which statement about password hashing with a salt should guide the technician? · 3 marks
- During routine technical work, which statement about encryption at rest should guide the technician? · 3 marks
- During routine technical work, which statement about a digital signature should guide the technician? · 3 marks
- During routine technical work, which statement about public key infrastructure should guide the technician? · 3 marks
- During routine technical work, which statement about a network firewall should guide the technician? · 3 marks
- During routine technical work, which statement about an intrusion detection system should guide the technician? · 3 marks
- During routine technical work, which statement about an intrusion prevention system should guide the technician? · 3 marks
- During routine technical work, which statement about endpoint detection and response should guide the technician? · 3 marks
- During routine technical work, which statement about security information and event management should guide the technician? · 3 marks
- During routine technical work, which statement about phishing should guide the technician? · 3 marks
- During routine technical work, which statement about ransomware should guide the technician? · 3 marks
- During routine technical work, which statement about a vulnerability scan should guide the technician? · 3 marks
- During routine technical work, which statement about a penetration test should guide the technician? · 3 marks
- During routine technical work, which statement about incident containment should guide the technician? · 3 marks
- Which protocol and port should be used for collecting log messages centrally from network devices? · 3 marks
- Which protocol and port should be used for keeping clocks aligned across servers so log timestamps correlate? · 3 marks
- Which protocol and port should be used for a browser reaching a site where a password will be typed? · 3 marks
- Which protocol and port should be used for remote administration of a Linux server across the internet? · 3 marks
- Which protocol and port should be used for transferring files to a server with the contents protected in transit? · 3 marks
- SMTP on port 25 sends data in the clear. What should replace it? · 3 marks
- Which term describes a system aggregating and correlating security events for analysis? · 3 marks
- Which term describes overwhelming a service using traffic from many distributed sources? · 3 marks
- In cybersecurity, what is Digital signature? · 3 marks
- Which term describes confidentiality, integrity and availability, the three security goals? · 3 marks
- Which term describes physically isolating a system from untrusted networks? · 3 marks
- In cybersecurity, what is Non-repudiation? · 3 marks
- Which term describes layering independent controls so one failure is not fatal? · 3 marks
- Which term describes malware that copies itself across a network without user action? · 3 marks
- In cybersecurity, what is Multi-factor authentication? · 3 marks