Which of the following is NOT a type of malware?WormTrojan HorseFirewallVirusC) FirewallFirewall is a security mechanism, not malware.
Phishing is used to:Encrypt dataSteal sensitive informationClean virusesScan networksB) Steal sensitive informationPhishing tricks users into revealing confidential data.
Which of the following is a symmetric encryption algorithm?RSADESDiffie-HellmanECCB) DESDES (Data Encryption Standard) uses a single key for encryption and decryption.
Firewall works on which layer?Physical LayerNetwork LayerTransport LayerData Link LayerB) Network LayerFirewalls filter network traffic at the network layer.
Two-factor authentication provides:Single level securityMultiple layer securityData encryptionFile compressionB) Multiple layer security2FA uses two independent authentication methods for stronger security.
Which of the following is a symmetric key algorithm?RSAAESDiffie-HellmanDSAB) AESAES (Advanced Encryption Standard) uses the same key for encryption and decryption.
Which attack involves overwhelming a server with excessive requests?SQL InjectionMan-in-the-MiddleDenial-of-ServicePhishingC) Denial-of-ServiceDoS attacks flood the target with requests, making it unavailable to legitimate users.
Multi-factor authentication enhances security by:Requiring multiple passwordsCombining two or more independent authentication methodsEncrypting all network trafficDisabling user accountsB) Combining two or more independent authentication methodsMFA uses something you know, have, or are to improve authentication security.
The process of converting plain text into unreadable text is called:DecryptionEncodingEncryptionHashingC) EncryptionEncryption transforms data into cipher text to protect it from unauthorized access.
Hashing is mainly used for:Data EncryptionData Integrity VerificationData CompressionKey ExchangeB) Data Integrity VerificationHash functions verify that data has not been altered during transmission or storage.
Phishing is:Malware that replicates itselfSocial engineering attack to steal sensitive dataAttack exploiting network vulnerabilitiesBrute force password attackB) Social engineering attack to steal sensitive dataPhishing tricks users into revealing confidential information through fake messages or websites.
Which of the following is NOT a type of malware?WormTrojanRootkit ProxyD) ProxyA proxy is a network intermediary, not malicious software.
The principle of least privilege means:Give users all permissionsGive minimum permissions necessaryDeny access to all usersAllow admin rights to everyoneB) Give minimum permissions necessaryLeast privilege ensures users only have access required for their tasks, reducing risk.
IDS stands for:Internal Data SystemIntrusion Detection SystemInformation Defense ServiceInput Device SetupB) Intrusion Detection SystemIDS monitors network/system activities for malicious actions or policy violations.
SSL/TLS works on which layer?NetworkTransport ApplicationSessionD) SessionSSL/TLS provides secure sessions between client and server.
Which is NOT a strong password example?Qwerty1239x!R#k7@9x!RUIWGDWk7@7xHADHJAS!R#k7@A) Qwerty123Qwerty123 is easily guessable and weak.
Two-factor authentication improves:AvailabilityConfidentialityAuthentication SecurityData BackupC) Authentication Security2FA adds an extra verification layer beyond password.
Ransomware attack does what?Deletes files permanentlyEncrypts data and demands paymentSteals passwords silentlyIncreases CPU usageB) Encrypts data and demands paymentRansomware locks data until ransom is paid.
Public key cryptography uses:Single keyPair of keys (public & private)Only symmetric encryptionOnly hashingB) Pair of keys (public & private)Public key cryptography uses one key for encryption and another for decryption.
SQL Injection exploits:Browser VulnerabilitiesImproperly validated user inputOS Kernel BugsEncryption WeaknessB) Improperly validated user inputSQL Injection manipulates queries by inserting malicious input.
Which of these is used for hashing passwords?AESSHA-256RSADiffie-HellmanB) SHA-256Secure Hash Algorithms are used to generate fixed-length password hashes.
Which is an example of asymmetric encryption?DESAESRSABlowfishC) RSARSA uses public-private key pair for encryption and decryption.
A zero-day vulnerability is:Patched bugKnown and reported exploitUnknown exploit not yet fixedMalware signatureC) Unknown exploit not yet fixedZero-day vulnerabilities are exploited before vendor releases a patch.
Phishing attacks primarily use:Hardware TrojansFake Emails/WebsitesBuffer OverflowSQL InjectionB) Fake Emails/WebsitesPhishing tricks users into revealing sensitive data.
Which malware replicates without user intervention?VirusWormTrojanRootkitB) WormWorms spread automatically via networks.
The principle of “least privilege” means:Users get maximum rightsUsers get minimal required accessAdmins get no rightsGuests get admin rightsB) Users get minimal required accessLeast privilege reduces security risks.
Which tool is used for packet sniffing?WiresharkNessusMetasploitJohn the RipperA) WiresharkWireshark captures and analyzes network packets.
A firewall works at which OSI layer primarily?Application LayerNetwork LayerTransport LayerSession LayerB) Network LayerFirewalls filter traffic based on IPs and ports at network level.
Phishing is an attack that:Physically damages hardwareTricks users into revealing credentialsUses brute forceExploits network bandwidthB) Tricks users into revealing credentialsPhishing attacks use fake emails/websites to steal user data.
A firewall works at which OSI layer mainly?PhysicalData LinkNetworkTransportC) NetworkFirewalls filter packets at the network layer.
Which type of malware replicates itself without user intervention?TrojanWormSpywareRootkitB) WormWorms spread automatically across networks without user action.
Encryption ensures:IntegrityConfidentialityAvailabilityAuthenticationB) ConfidentialityEncryption protects data from unauthorized access.
Which algorithm is symmetric key cryptography?RSADESECCDSAB) DESData Encryption Standard uses the same key for encryption and decryption.
The process of converting plaintext to unreadable format is:HashingEncryptionDecryptionCompressionB) EncryptionEncryption secures data by encoding it.
Zero-day vulnerability means:Patch availableAlready fixed bugUnknown security flawOld malwareC) Unknown security flawZero-day exploits target vulnerabilities unknown to developers.
Intrusion Detection System (IDS) works by:Encrypting dataMonitoring traffic for suspicious activityBlocking usersResetting passwordsB) Monitoring traffic for suspicious activityIDS detects potential attacks.
A brute-force attack tries:Exploiting vulnerabilitiesGuessing all possible passwordsInjecting malicious codeSocial engineeringB) Guessing all possible passwordsBrute-force exhaustively tries all key combinations.
Which malware locks files and demands payment?WormTrojanRansomwareSpywareC) RansomwareRansomware encrypts files and extorts users.
VPN provides:Data compressionSecure communicationOpen accessFile storageB) Secure communicationVPN encrypts data over public networks.
SSL/TLS works at:NetworkTransportApplicationData LinkB) TransportSSL/TLS sits above TCP.
SQL Injection targets:OSDatabaseWeb serverNetwork switchB) DatabaseInjects malicious SQL queries.
Phishing is a type of:Malware attackSocial engineering attackNetwork sniffingDoS attackB) Social engineering attackPhishing tricks users into revealing information.
Which cryptographic technique uses two different keys?Symmetric encryptionAsymmetric encryptionHashingSteganographyB) Asymmetric encryptionPublic and private keys are used in pairs.
A firewall operates at which OSI layer?Application onlyNetwork and TransportPhysicalPresentationB) Network and TransportFirewalls inspect packets at these layers.
The process of converting plaintext into unreadable form is:HashingEncryptionDecryptionSteganographyB) EncryptionEncryption ensures confidentiality.
Phishing is an attack aimed at:Hardware destructionTricking users to reveal sensitive infoDenial of serviceData encryptionB) Tricking users to reveal sensitive infoPhishing scams impersonate trusted entities.
A firewall operates at which layer?Physical layerNetwork/Transport layerPresentation layerApplication layer onlyB) Network/Transport layerFirewalls filter packets at network and transport layers.
Which attack involves overwhelming a system with traffic?PhishingDoS/DDoSSQL InjectionKeyloggingB) DoS/DDoSDenial of Service attacks flood systems to disrupt services.
Digital signature ensures:Integrity and authenticityConfidentiality onlyAvailability onlyRedundancyA) Integrity and authenticityDigital signatures verify sender identity and message integrity.
SQL injection exploits:Input validation flawsHardware weaknessEncryption errorsNetwork congestionA) Input validation flawsSQL injection happens due to unvalidated user inputs.
VPN provides:Confidentiality and secure tunnelingFile compressionIP address allocationLoad balancingA) Confidentiality and secure tunnelingVPN encrypts traffic over public networks.
Which malware disguises itself as legitimate software?WormTrojan horseSpywareRansomwareB) Trojan horseTrojans trick users into executing harmful code.
Hash functions are used in security for:EncryptionData integrity verificationAvailabilityAuthentication onlyB) Data integrity verificationHashing ensures data is not tampered with.
Multi-factor authentication improves security by:Using longer passwordsCombining multiple verification methodsEncrypting dataUsing VPNsB) Combining multiple verification methodsMFA requires two or more authentication factors.
A brute force attack tries:Guessing passwordsExploiting buffer overflowPhishingSQL injectionA) Guessing passwordsBrute force attempts all possible passwords.
Which encryption uses a single key for both encryption and decryption?Public keyPrivate keySymmetricASymmetricC) SymmetricSymmetric cryptography uses one shared key.
A firewall operates mainly at which layer?ApplicationNetworkTransportSessionB) NetworkFirewalls filter traffic based on IP/ports.
Which malware replicates itself without attaching to files?VirusWormTrojanSpywareB) WormWorms self-replicate over networks independently.
Which security principle ensures information is not altered?ConfidentialityIntegrityAvailabilityAuthenticityB) IntegrityIntegrity ensures accuracy and trustworthiness of data.
Which cyber attack floods a system with traffic to make it unavailable?PhishingDOSSQL InjectionSpoofingB) Denial of Service (DoS)DoS attacks overwhelm a system with requests, causing downtime.
Which type of cyber attack exploits a system by sending data larger than the buffer capacity?SQL InjectionBuffer OverflowPhishingMan-in-the-MiddleB) Buffer OverflowBuffer overflow attacks overwrite adjacent memory, leading to crashes or code execution.
The CIA triad in cyber security stands for:Confidentiality, Integrity, AvailabilityControl, Integrity, AccessConfidentiality, Identification, AuthenticationCryptography, Integrity, AnonymityA) Confidentiality, Integrity, AvailabilityCIA triad is the core security model ensuring secure information systems.
Which security mechanism uses a hash function to ensure message authenticity and integrity?Digital SignatureFirewallIDSVPNA) Digital SignatureDigital signatures validate sender authenticity and prevent tampering.
In penetration testing, the tester has no prior knowledge of the system. This is called:White-box testingGrey-box testingBlack-box testingFuzz testingC) Black-box testingBlack-box testing simulates an external attacker with no internal knowledge.
Which standard is widely used for information security management systems (ISMS)?ISO/IEC 27001GDPRHIPAAPCI DSSA) ISO/IEC 27001ISO/IEC 27001 is the international standard for ISMS implementation.