Which of the following is NOT a type of malware?Trojan HorseFirewallVirusC) FirewallFirewall is a security mechanism, not malware.
Phishing is used to:Steal sensitive informationClean virusesScan networksB) Steal sensitive informationPhishing tricks users into revealing confidential data.
Which of the following is a symmetric encryption algorithm?DESDiffie-HellmanECCB) DESDES (Data Encryption Standard) uses a single key for encryption and decryption.
Firewall works on which layer?Network LayerTransport LayerData Link LayerB) Network LayerFirewalls filter network traffic at the network layer.
Two-factor authentication provides:Multiple layer securityData encryptionFile compressionB) Multiple layer security2FA uses two independent authentication methods for stronger security.
Which of the following is a symmetric key algorithm?AESDiffie-HellmanDSAB) AESAES (Advanced Encryption Standard) uses the same key for encryption and decryption.
Which attack involves overwhelming a server with excessive requests?Man-in-the-MiddleDenial-of-ServicePhishingC) Denial-of-ServiceDoS attacks flood the target with requests, making it unavailable to legitimate users.
Multi-factor authentication enhances security by:Combining two or more independent authentication methodsEncrypting all network trafficDisabling user accountsB) Combining two or more independent authentication methodsMFA uses something you know, have, or are to improve authentication security.
The process of converting plain text into unreadable text is called:EncodingEncryptionHashingC) EncryptionEncryption transforms data into cipher text to protect it from unauthorized access.
Hashing is mainly used for:Data Integrity VerificationData CompressionKey ExchangeB) Data Integrity VerificationHash functions verify that data has not been altered during transmission or storage.
Phishing is:Social engineering attack to steal sensitive dataAttack exploiting network vulnerabilitiesBrute force password attackB) Social engineering attack to steal sensitive dataPhishing tricks users into revealing confidential information through fake messages or websites.
Which of the following is NOT a type of malware?TrojanRootkit ProxyD) ProxyA proxy is a network intermediary, not malicious software.
The principle of least privilege means:Give minimum permissions necessaryDeny access to all usersAllow admin rights to everyoneB) Give minimum permissions necessaryLeast privilege ensures users only have access required for their tasks, reducing risk.
IDS stands for:Intrusion Detection SystemInformation Defense ServiceInput Device SetupB) Intrusion Detection SystemIDS monitors network/system activities for malicious actions or policy violations.
SSL/TLS works on which layer?Transport ApplicationSessionD) SessionSSL/TLS provides secure sessions between client and server.
Which is NOT a strong password example?9x!R#k7@9x!RUIWGDWk7@7xHADHJAS!R#k7@A) Qwerty123Qwerty123 is easily guessable and weak.
Two-factor authentication improves:ConfidentialityAuthentication SecurityData BackupC) Authentication Security2FA adds an extra verification layer beyond password.
Ransomware attack does what?Encrypts data and demands paymentSteals passwords silentlyIncreases CPU usageB) Encrypts data and demands paymentRansomware locks data until ransom is paid.
Public key cryptography uses:Pair of keys (public & private)Only symmetric encryptionOnly hashingB) Pair of keys (public & private)Public key cryptography uses one key for encryption and another for decryption.
SQL Injection exploits:Improperly validated user inputOS Kernel BugsEncryption WeaknessB) Improperly validated user inputSQL Injection manipulates queries by inserting malicious input.
Which of these is used for hashing passwords?SHA-256RSADiffie-HellmanB) SHA-256Secure Hash Algorithms are used to generate fixed-length password hashes.
Which is an example of asymmetric encryption?AESRSABlowfishC) RSARSA uses public-private key pair for encryption and decryption.
A zero-day vulnerability is:Known and reported exploitUnknown exploit not yet fixedMalware signatureC) Unknown exploit not yet fixedZero-day vulnerabilities are exploited before vendor releases a patch.
Phishing attacks primarily use:Fake Emails/WebsitesBuffer OverflowSQL InjectionB) Fake Emails/WebsitesPhishing tricks users into revealing sensitive data.
Which malware replicates without user intervention?WormTrojanRootkitB) WormWorms spread automatically via networks.
The principle of “least privilege” means:Users get minimal required accessAdmins get no rightsGuests get admin rightsB) Users get minimal required accessLeast privilege reduces security risks.
Which tool is used for packet sniffing?NessusMetasploitJohn the RipperA) WiresharkWireshark captures and analyzes network packets.
A firewall works at which OSI layer primarily?Network LayerTransport LayerSession LayerB) Network LayerFirewalls filter traffic based on IPs and ports at network level.
Phishing is an attack that:Tricks users into revealing credentialsUses brute forceExploits network bandwidthB) Tricks users into revealing credentialsPhishing attacks use fake emails/websites to steal user data.
A firewall works at which OSI layer mainly?Data LinkNetworkTransportC) NetworkFirewalls filter packets at the network layer.
Which type of malware replicates itself without user intervention?WormSpywareRootkitB) WormWorms spread automatically across networks without user action.
Encryption ensures:ConfidentialityAvailabilityAuthenticationB) ConfidentialityEncryption protects data from unauthorized access.
Which algorithm is symmetric key cryptography?DESECCDSAB) DESData Encryption Standard uses the same key for encryption and decryption.
The process of converting plaintext to unreadable format is:EncryptionDecryptionCompressionB) EncryptionEncryption secures data by encoding it.
Zero-day vulnerability means:Already fixed bugUnknown security flawOld malwareC) Unknown security flawZero-day exploits target vulnerabilities unknown to developers.
Intrusion Detection System (IDS) works by:Monitoring traffic for suspicious activityBlocking usersResetting passwordsB) Monitoring traffic for suspicious activityIDS detects potential attacks.
A brute-force attack tries:Guessing all possible passwordsInjecting malicious codeSocial engineeringB) Guessing all possible passwordsBrute-force exhaustively tries all key combinations.
Which malware locks files and demands payment?TrojanRansomwareSpywareC) RansomwareRansomware encrypts files and extorts users.
VPN provides:Secure communicationOpen accessFile storageB) Secure communicationVPN encrypts data over public networks.
SSL/TLS works at:TransportApplicationData LinkB) TransportSSL/TLS sits above TCP.
SQL Injection targets:DatabaseWeb serverNetwork switchB) DatabaseInjects malicious SQL queries.
Phishing is a type of:Social engineering attackNetwork sniffingDoS attackB) Social engineering attackPhishing tricks users into revealing information.
Which cryptographic technique uses two different keys?Asymmetric encryptionHashingSteganographyB) Asymmetric encryptionPublic and private keys are used in pairs.
A firewall operates at which OSI layer?Network and TransportPhysicalPresentationB) Network and TransportFirewalls inspect packets at these layers.
The process of converting plaintext into unreadable form is:EncryptionDecryptionSteganographyB) EncryptionEncryption ensures confidentiality.
Phishing is an attack aimed at:Tricking users to reveal sensitive infoDenial of serviceData encryptionB) Tricking users to reveal sensitive infoPhishing scams impersonate trusted entities.
A firewall operates at which layer?Network/Transport layerPresentation layerApplication layer onlyB) Network/Transport layerFirewalls filter packets at network and transport layers.
Which attack involves overwhelming a system with traffic?DoS/DDoSSQL InjectionKeyloggingB) DoS/DDoSDenial of Service attacks flood systems to disrupt services.
Digital signature ensures:Confidentiality onlyAvailability onlyRedundancyA) Integrity and authenticityDigital signatures verify sender identity and message integrity.
SQL injection exploits:Hardware weaknessEncryption errorsNetwork congestionA) Input validation flawsSQL injection happens due to unvalidated user inputs.
VPN provides:File compressionIP address allocationLoad balancingA) Confidentiality and secure tunnelingVPN encrypts traffic over public networks.
Which malware disguises itself as legitimate software?Trojan horseSpywareRansomwareB) Trojan horseTrojans trick users into executing harmful code.
Hash functions are used in security for:Data integrity verificationAvailabilityAuthentication onlyB) Data integrity verificationHashing ensures data is not tampered with.
Multi-factor authentication improves security by:Combining multiple verification methodsEncrypting dataUsing VPNsB) Combining multiple verification methodsMFA requires two or more authentication factors.
A brute force attack tries:Exploiting buffer overflowPhishingSQL injectionA) Guessing passwordsBrute force attempts all possible passwords.
Which encryption uses a single key for both encryption and decryption?Private keySymmetricASymmetricC) SymmetricSymmetric cryptography uses one shared key.
A firewall operates mainly at which layer?NetworkTransportSessionB) NetworkFirewalls filter traffic based on IP/ports.
Which malware replicates itself without attaching to files?WormTrojanSpywareB) WormWorms self-replicate over networks independently.
Which security principle ensures information is not altered?IntegrityAvailabilityAuthenticityB) IntegrityIntegrity ensures accuracy and trustworthiness of data.
Which cyber attack floods a system with traffic to make it unavailable?DOSSQL InjectionSpoofingB) Denial of Service (DoS)DoS attacks overwhelm a system with requests, causing downtime.
Which type of cyber attack exploits a system by sending data larger than the buffer capacity?Buffer OverflowPhishingMan-in-the-MiddleB) Buffer OverflowBuffer overflow attacks overwrite adjacent memory, leading to crashes or code execution.
The CIA triad in cyber security stands for:Control, Integrity, AccessConfidentiality, Identification, AuthenticationCryptography, Integrity, AnonymityA) Confidentiality, Integrity, AvailabilityCIA triad is the core security model ensuring secure information systems.
Which security mechanism uses a hash function to ensure message authenticity and integrity?FirewallIDSVPNA) Digital SignatureDigital signatures validate sender authenticity and prevent tampering.
In penetration testing, the tester has no prior knowledge of the system. This is called:Grey-box testingBlack-box testingFuzz testingC) Black-box testingBlack-box testing simulates an external attacker with no internal knowledge.
Which standard is widely used for information security management systems (ISMS)?GDPRHIPAAPCI DSSA) ISO/IEC 27001ISO/IEC 27001 is the international standard for ISMS implementation.
