Cybersecurity
27 free questions with worked answers, and 599 more in the full bank.
Free questions
The hospital management system is experiencing issues with data encryption and security due to a compromised encryption key. What is the best approach to resolve this issue while ensuring data protection and minimizing downtime?
1 mark · Easy
A user reports that they are unable to access the hospital management system due to a certificate expiration issue. What steps would you take to troubleshoot and resolve the issue while ensuring system availability?
1 mark · Easy
The hospital management system is experiencing issues with user authentication due to a compromised authentication token. What is the best approach to resolve this issue while minimizing disruption to patient care?
1 mark · Easy
What is the main purpose of a firewall?
1 mark · Easy
What type of malware disguises itself as legitimate software?
3 marks · Medium
What is a common method for securing user passwords?
3 marks · Medium
A user reports that they are unable to access the hospital management system due to a denial-of-service (DoS) attack. What steps would you take to mitigate the attack and restore system availability?
3 marks · Medium
What is the main purpose of antivirus software?
3 marks · Medium
Which of the following is an example of two-factor authentication?
3 marks · Medium
When setting up a new user account, what is an important first step?
3 marks · Medium
Which of the following is considered a strong password?
3 marks · Medium
Which of the following is an example of a phishing attack?
4 marks · Hard
A receptionist receives a call from someone claiming to be the CEO, demanding a password reset immediately because they are about to start a critical board meeting. This BEST describes which attack?
1 mark · Easy
An employee receives an SMS on their corporate phone stating their multi-factor authentication app needs a critical update, including a link to download an APK. What type of attack is occurring?
3 marks · Medium
A contractor holding a large box of networking equipment waits by the secure datacenter door until an authorized employee scans their badge and opens it, then follows them inside. This is known as...
3 marks · Medium
The CFO of a logistics company receives a highly customized email claiming a wire transfer for a known vendor has failed. The email contains a link to a fake banking portal. This attack is an example of...
1 mark · Easy
An attacker leaves several USB drives labeled "Q3 Layoffs & Bonuses" in the company parking lot, hoping curious employees will plug them into corporate workstations. This technique is called...
3 marks · Medium
A threat actor creates a fake LinkedIn profile claiming to be an IT recruiter. They spend weeks chatting with a systems administrator before asking them to run a "skills assessment" executable. This scenario heavily utilizes...
4 marks · Hard
During a penetration test, an assessor sits in the break room and watches an employee type their complex password into a laptop. The assessor then uses these credentials later. What occurred?
3 marks · Medium
A hospital's patient records system suddenly displays a red screen demanding payment in Bitcoin within 48 hours to decrypt the database. What type of malware has infected the system?
1 mark · Easy
A security analyst discovers that a compromised workstation has software installed that allows an attacker to remotely open the CD-ROM tray, turn on the webcam, and browse the filesystem without user knowledge. This is a...
3 marks · Medium
After a suspected breach, administrators notice that standard operating system commands like 'ls' and 'ps' are not showing a malicious process that is consuming CPU resources. The malware has likely installed a...
4 marks · Hard
An employee unknowingly downloads a malicious browser extension that records every keystroke made on banking websites and sends the text to an external server. This malware is a...
3 marks · Medium
Users complain that their web browsers are constantly redirecting to search engines they did not set, and pop-up ads appear even when the browser is closed. The systems are likely infected with...
3 marks · Medium
A piece of malware exploits a vulnerability in SMBv1 to spread rapidly across a corporate network without any user interaction, infecting hundreds of machines in minutes. This behavior characterizes a...
1 mark · Easy
An end-user downloads what appears to be a legitimate free PDF editor from a third-party site. Once installed, it edits PDFs but also silently installs a backdoor. This is an example of a...
3 marks · Medium
An endpoint detection system flags unusual PowerShell activity. Investigation reveals a malicious script running entirely in RAM, heavily obfuscated, leaving no executable footprint on the hard drive. This is...
4 marks · Hard
More Cybersecurity questions (page 4 of 10)
Answers and explanations are in the full bank.
- Which term describes proving identity with factors from different categories? · 3 marks
- Which term describes adding random data before hashing so identical passwords differ? · 3 marks
- In cybersecurity, what is Worm? · 3 marks
- Which term describes malware disguised as software the user wants to install? · 3 marks
- Which term describes trying every possible credential until one works? · 3 marks
- In cybersecurity, what is Social engineering? · 3 marks
- In cybersecurity, what is SIEM? · 3 marks
- Which term describes encryption using a public key to encrypt and a private key to decrypt? · 3 marks
- POP3 on port 110 sends data in the clear. What should replace it? · 3 marks
- In cybersecurity, what is Zero-day? · 3 marks
- In cybersecurity, what is Phishing? · 3 marks
- IMAP on port 143 sends data in the clear. What should replace it? · 3 marks
- In cybersecurity, what is Least privilege? · 3 marks
- In cybersecurity, what is DDoS? · 3 marks
- Which term describes a message impersonating a trusted sender to obtain credentials or data? · 3 marks
- Which term describes phishing aimed at one named person using details specific to them? · 3 marks
- In cybersecurity, what is CIA triad? · 3 marks
- Which term describes a value proving a message came from a key holder and is unaltered? · 3 marks
- In cybersecurity, what is Salting? · 3 marks
- In cybersecurity, what is Asymmetric encryption? · 3 marks
- In cybersecurity, what is Defence in depth? · 3 marks
- Which term describes a one-way transform producing a fixed-length digest of data? · 3 marks
- In cybersecurity, what is Penetration test? · 3 marks
- Which term describes an authorised simulated attack to find exploitable weaknesses? · 3 marks
- In cybersecurity, what is Certificate authority? · 3 marks
- In cybersecurity, what is Honeypot? · 3 marks
- Which term describes gaining rights beyond those originally granted? · 3 marks
- In cybersecurity, what is Air gap? · 3 marks
- Which term describes assurance that a party cannot deny having taken an action? · 3 marks
- In cybersecurity, what is Symmetric encryption? · 3 marks
- Which term describes an attacker relaying traffic between two parties who believe they are direct? · 3 marks
- HTTP on port 80 sends data in the clear. What should replace it? · 3 marks
- Which term describes stored data, as opposed to data moving across a network? · 3 marks
- Which term describes a trusted body that signs certificates binding a key to an identity? · 3 marks
- Which term describes manipulating people rather than systems to gain access? · 3 marks
- In cybersecurity, what is Data at rest? · 3 marks
- In cybersecurity, what is Brute-force attack? · 3 marks
- Which term describes granting only the access a role actually requires? · 3 marks
- In cybersecurity, what is Ransomware? · 3 marks
- In cybersecurity, what is Man-in-the-middle? · 3 marks
- Which term describes encryption where the same key both encrypts and decrypts? · 3 marks
- LDAP on port 389 sends data in the clear. What should replace it? · 3 marks
- In cybersecurity, what is Trojan? · 3 marks
- Which term describes a decoy system deployed to attract and observe attackers? · 3 marks
- In cybersecurity, what is Spear phishing? · 3 marks
- In cybersecurity, what is Privilege escalation? · 3 marks
- Telnet on port 23 sends data in the clear. What should replace it? · 3 marks
- Which term describes a vulnerability exploited before a patch exists? · 3 marks
- Which term describes malware that encrypts data and demands payment for the key? · 3 marks
- Which term describes malware that hides itself and other tools at a privileged level? · 3 marks
- In cybersecurity, what is Rootkit? · 3 marks
- FTP control on port 21 sends data in the clear. What should replace it? · 3 marks
- In cybersecurity, what is Hashing? · 3 marks
- An attacker gets into a school's results system and changes several students' marks, without stealing or deleting anything. Which security property has been violated? · 2 marks
- Which of these measures mainly protects the availability of a district's citizen-services server? · 2 marks
- In the AAA security model, what does “accounting” refer to? · 1 mark
- A new clerk at a sector office needs only to enter birth registrations, yet is given administrator rights “to avoid problems later”. Which principle does this break? · 1 mark
- In a district finance office, the same officer can create a new supplier, enter an invoice and approve its payment. Which control is missing? · 2 marks
- A ministry protects its systems with a firewall, antivirus, patching, staff training and backups, so that if one control fails another still stands. What is this approach called? · 1 mark
- An organisation adopts “zero trust”. How does this change the way a staff laptop inside the office network is treated? · 3 marks