Computer Security Certification Exam
Practice Questions with Detailed
Rationales latest 2026 Latest version
Q&A |INSTANT DOWNLOAD PDF
1. Which of the following is considered a form of social engineering?
A. Phishing emails
B. Brute-force attacks
C. SQL injection
D. Firewall misconfiguration
Answer: A — Social engineering exploits human psychology, and
phishing emails are a common example.
2. What is the primary purpose of a firewall?
A. To detect malware
B. To control incoming and outgoing network traffic
C. To encrypt files
D. To monitor employee activity
Answer: B — Firewalls filter network traffic based on security rules.
3. Which of the following is an example of multi-factor
authentication?
A. Password only
B. Fingerprint scan + password
C. Username only
D. Security question only
Answer: B — Multi-factor authentication combines two or more
,methods like something you know (password) and something you are
(fingerprint).
4. What is a zero-day vulnerability?
A. A vulnerability that has no fix and is unknown to developers
B. A vulnerability patched immediately
C. Malware that runs for zero days
D. Outdated software
Answer: A — Zero-day vulnerabilities are previously unknown flaws
exploited before a patch is available.
5. Which protocol is considered secure for web browsing?
A. HTTP
B. HTTPS
C. FTP
D. Telnet
Answer: B — HTTPS encrypts data between the browser and server
using SSL/TLS.
6. What is the main goal of ransomware?
A. Steal emails
B. Encrypt user files and demand payment
C. Delete system logs
D. Scan networks
Answer: B — Ransomware encrypts files and asks for payment to
restore access.
7. Which attack involves intercepting communications between two
parties?
A. Phishing
B. Man-in-the-middle (MITM)
C. SQL injection
D. DDoS
, Answer: B — MITM attacks capture and sometimes alter
communications without the parties knowing.
8. What is the purpose of antivirus software?
A. Monitor social media activity
B. Detect and remove malicious software
C. Encrypt files
D. Block websites
Answer: B — Antivirus programs scan and remove viruses, worms, and
other malware.
9. Which of the following is an example of a strong password?
A. 123456
B. Password
C. S3cure!2025
D. Qwerty
Answer: C — Strong passwords include letters, numbers, symbols, and
avoid dictionary words.
10. Which type of malware disguises itself as legitimate software?
A. Worm
B. Trojan horse
C. Ransomware
D. Spyware
Answer: B — Trojans appear legitimate but carry hidden malicious
functions.
11. What is phishing primarily aimed at?
A. Overloading servers
B. Stealing sensitive information
C. Encrypting files
D. Defacing websites
Practice Questions with Detailed
Rationales latest 2026 Latest version
Q&A |INSTANT DOWNLOAD PDF
1. Which of the following is considered a form of social engineering?
A. Phishing emails
B. Brute-force attacks
C. SQL injection
D. Firewall misconfiguration
Answer: A — Social engineering exploits human psychology, and
phishing emails are a common example.
2. What is the primary purpose of a firewall?
A. To detect malware
B. To control incoming and outgoing network traffic
C. To encrypt files
D. To monitor employee activity
Answer: B — Firewalls filter network traffic based on security rules.
3. Which of the following is an example of multi-factor
authentication?
A. Password only
B. Fingerprint scan + password
C. Username only
D. Security question only
Answer: B — Multi-factor authentication combines two or more
,methods like something you know (password) and something you are
(fingerprint).
4. What is a zero-day vulnerability?
A. A vulnerability that has no fix and is unknown to developers
B. A vulnerability patched immediately
C. Malware that runs for zero days
D. Outdated software
Answer: A — Zero-day vulnerabilities are previously unknown flaws
exploited before a patch is available.
5. Which protocol is considered secure for web browsing?
A. HTTP
B. HTTPS
C. FTP
D. Telnet
Answer: B — HTTPS encrypts data between the browser and server
using SSL/TLS.
6. What is the main goal of ransomware?
A. Steal emails
B. Encrypt user files and demand payment
C. Delete system logs
D. Scan networks
Answer: B — Ransomware encrypts files and asks for payment to
restore access.
7. Which attack involves intercepting communications between two
parties?
A. Phishing
B. Man-in-the-middle (MITM)
C. SQL injection
D. DDoS
, Answer: B — MITM attacks capture and sometimes alter
communications without the parties knowing.
8. What is the purpose of antivirus software?
A. Monitor social media activity
B. Detect and remove malicious software
C. Encrypt files
D. Block websites
Answer: B — Antivirus programs scan and remove viruses, worms, and
other malware.
9. Which of the following is an example of a strong password?
A. 123456
B. Password
C. S3cure!2025
D. Qwerty
Answer: C — Strong passwords include letters, numbers, symbols, and
avoid dictionary words.
10. Which type of malware disguises itself as legitimate software?
A. Worm
B. Trojan horse
C. Ransomware
D. Spyware
Answer: B — Trojans appear legitimate but carry hidden malicious
functions.
11. What is phishing primarily aimed at?
A. Overloading servers
B. Stealing sensitive information
C. Encrypting files
D. Defacing websites
