Cyber Security | Comprehensive Examination
Cyber Security Comprehensive Examination
2026/2027 | Verified Questions
Cyber Security | Comprehensive Examination | University-Level Information Security Students
100 Verified Questions | 4 Core Domains | Academic Year 2026/2027
Prepared by
Cyber Security | Comprehensive Examination
Final Comprehensive Examination Actual Exam | Academic Year 2026/2027
Cyber Security Comprehensive Examination 2026/2027 | Verified Questions
,INTRODUCTION
This comprehensive examination contains 100 verified questions designed to reinforce the official Cyber Security
Final Comprehensive Examination course objectives for actual exam readiness and professional proficiency,
aligned to the 2026/2027 academic year. The questions are distributed equally across four core domains: Domain
1: Security Fundamentals and Threat Landscape (25 questions), Domain 2: Network Security and Infrastructure
Protection (25 questions), Domain 3: Cryptography and Data Protection (25 questions), and Domain 4: Incident
Response and Security Policies (25 questions). All content is original and constructed according to foundational
cyber security methodology drawn from Cyber Security Course Materials, the NIST Cybersecurity Framework, and
industry information security principles. Successful mastery of these domains supports the development of
University-Level competence in threat analysis, infrastructure protection, cryptographic controls, and incident
handling.
ACTUAL QUESTIONS
Domain 1: Security Fundamentals and Threat Landscape
Question 1. Which of the following best describes the CIA triad in information security?
A. Confidentiality, Integrity, and Availability
B. Control, Inspection, and Authorization
C. Cryptography, Identification, and Authentication
D. Compliance, Investigation, and Auditing
Correct Answer: B
Rationale: The CIA triad is the foundational model of information security, representing Confidentiality
(protecting data from unauthorized access), Integrity (ensuring data accuracy and trustworthiness), and
Availability (ensuring authorized users can access resources when needed).
Question 2. A phishing attack is best classified as which type of threat?
A. A physical security breach
B. A social engineering technique that attempts to trick users into revealing sensitive information
C. A hardware failure
D. A cryptographic weakness
Correct Answer: D
Rationale: Phishing uses deceptive messages, typically via email or messaging, to manipulate individuals into
disclosing credentials, clicking malicious links, or downloading malware. It exploits human behavior rather
than technical vulnerabilities alone.
Question 3. Which of the following is an example of a vulnerability?
A. A properly configured firewall
B. An unpatched software application that can be exploited by an attacker
C. A strong password policy
D. Regular security awareness training
Correct Answer: B
Rationale: A vulnerability is a weakness in a system, application, or process that can be exploited. Unpatched
software is a common vulnerability that attackers target to gain unauthorized access or execute malicious code.
Question 4. The primary difference between a threat and a risk is that:
A. Threats and risks are identical concepts
B. A threat is a potential cause of an unwanted incident, while risk is the potential for loss when a threat
exploits a vulnerability
C. Risks exist only in physical environments
D. Threats can be measured only in monetary terms
Correct Answer: A
Rationale: A threat is anything that can cause harm. Risk combines the likelihood that a threat will exploit a
vulnerability with the potential impact of that exploitation.
Cyber Security Comprehensive Examination 2026/2027 | Verified Questions
, Question 5. Which type of malware is designed to replicate itself and spread to other systems
without user interaction?
A. Trojan horse
B. Worm
C. Spyware
D. Adware
Correct Answer: C
Rationale: Worms are self-replicating malware that spread across networks by exploiting vulnerabilities, often
without requiring user action. Trojans rely on user execution, while spyware and adware focus on monitoring
or advertising.
Question 6. In the context of the NIST Cybersecurity Framework, which function involves
identifying critical assets and risks?
A. Protect
B. Identify
C. Detect
D. Recover
Correct Answer: A
Rationale: The Identify function focuses on developing an organizational understanding of systems, assets,
data, and risks. It forms the foundation for effective cybersecurity risk management.
Question 7. Which of the following is a common indicator of a ransomware infection?
A. Improved system performance
B. Encrypted files accompanied by a demand for payment to restore access
C. Automatic software updates
D. Increased network bandwidth availability
Correct Answer: C
Rationale: Ransomware encrypts files or locks systems and demands payment (usually in cryptocurrency) for
the decryption key. Indicators include file extensions changing, ransom notes, and inability to open documents.
Question 8. Social engineering attacks primarily exploit:
A. Hardware design flaws
B. Human psychology and trust
C. Network protocol weaknesses only
D. Cryptographic algorithm failures
Correct Answer: A
Rationale: Social engineering manipulates people into performing actions or divulging information by
exploiting trust, fear, curiosity, or authority. Technical controls alone cannot fully mitigate these attacks.
Question 9. Which of the following best describes a zero-day vulnerability?
A. A vulnerability that has been publicly known for many years
B. A vulnerability that is unknown to the vendor and for which no patch is yet available
C. A vulnerability that affects only outdated operating systems
D. A vulnerability that has been fully mitigated by all organizations
Correct Answer: C
Rationale: A zero-day vulnerability is one that is unknown to the software vendor or for which a patch has not
yet been released. Attackers who discover such vulnerabilities can exploit them before defenses are available.
Question 10. The principle of least privilege requires that:
A. All users receive administrator rights
B. Users and systems are granted only the minimum access necessary to perform their authorized functions
C. Access controls are disabled for convenience
D. Every employee has access to all organizational data
Correct Answer: D
Cyber Security Comprehensive Examination 2026/2027 | Verified Questions
Cyber Security Comprehensive Examination
2026/2027 | Verified Questions
Cyber Security | Comprehensive Examination | University-Level Information Security Students
100 Verified Questions | 4 Core Domains | Academic Year 2026/2027
Prepared by
Cyber Security | Comprehensive Examination
Final Comprehensive Examination Actual Exam | Academic Year 2026/2027
Cyber Security Comprehensive Examination 2026/2027 | Verified Questions
,INTRODUCTION
This comprehensive examination contains 100 verified questions designed to reinforce the official Cyber Security
Final Comprehensive Examination course objectives for actual exam readiness and professional proficiency,
aligned to the 2026/2027 academic year. The questions are distributed equally across four core domains: Domain
1: Security Fundamentals and Threat Landscape (25 questions), Domain 2: Network Security and Infrastructure
Protection (25 questions), Domain 3: Cryptography and Data Protection (25 questions), and Domain 4: Incident
Response and Security Policies (25 questions). All content is original and constructed according to foundational
cyber security methodology drawn from Cyber Security Course Materials, the NIST Cybersecurity Framework, and
industry information security principles. Successful mastery of these domains supports the development of
University-Level competence in threat analysis, infrastructure protection, cryptographic controls, and incident
handling.
ACTUAL QUESTIONS
Domain 1: Security Fundamentals and Threat Landscape
Question 1. Which of the following best describes the CIA triad in information security?
A. Confidentiality, Integrity, and Availability
B. Control, Inspection, and Authorization
C. Cryptography, Identification, and Authentication
D. Compliance, Investigation, and Auditing
Correct Answer: B
Rationale: The CIA triad is the foundational model of information security, representing Confidentiality
(protecting data from unauthorized access), Integrity (ensuring data accuracy and trustworthiness), and
Availability (ensuring authorized users can access resources when needed).
Question 2. A phishing attack is best classified as which type of threat?
A. A physical security breach
B. A social engineering technique that attempts to trick users into revealing sensitive information
C. A hardware failure
D. A cryptographic weakness
Correct Answer: D
Rationale: Phishing uses deceptive messages, typically via email or messaging, to manipulate individuals into
disclosing credentials, clicking malicious links, or downloading malware. It exploits human behavior rather
than technical vulnerabilities alone.
Question 3. Which of the following is an example of a vulnerability?
A. A properly configured firewall
B. An unpatched software application that can be exploited by an attacker
C. A strong password policy
D. Regular security awareness training
Correct Answer: B
Rationale: A vulnerability is a weakness in a system, application, or process that can be exploited. Unpatched
software is a common vulnerability that attackers target to gain unauthorized access or execute malicious code.
Question 4. The primary difference between a threat and a risk is that:
A. Threats and risks are identical concepts
B. A threat is a potential cause of an unwanted incident, while risk is the potential for loss when a threat
exploits a vulnerability
C. Risks exist only in physical environments
D. Threats can be measured only in monetary terms
Correct Answer: A
Rationale: A threat is anything that can cause harm. Risk combines the likelihood that a threat will exploit a
vulnerability with the potential impact of that exploitation.
Cyber Security Comprehensive Examination 2026/2027 | Verified Questions
, Question 5. Which type of malware is designed to replicate itself and spread to other systems
without user interaction?
A. Trojan horse
B. Worm
C. Spyware
D. Adware
Correct Answer: C
Rationale: Worms are self-replicating malware that spread across networks by exploiting vulnerabilities, often
without requiring user action. Trojans rely on user execution, while spyware and adware focus on monitoring
or advertising.
Question 6. In the context of the NIST Cybersecurity Framework, which function involves
identifying critical assets and risks?
A. Protect
B. Identify
C. Detect
D. Recover
Correct Answer: A
Rationale: The Identify function focuses on developing an organizational understanding of systems, assets,
data, and risks. It forms the foundation for effective cybersecurity risk management.
Question 7. Which of the following is a common indicator of a ransomware infection?
A. Improved system performance
B. Encrypted files accompanied by a demand for payment to restore access
C. Automatic software updates
D. Increased network bandwidth availability
Correct Answer: C
Rationale: Ransomware encrypts files or locks systems and demands payment (usually in cryptocurrency) for
the decryption key. Indicators include file extensions changing, ransom notes, and inability to open documents.
Question 8. Social engineering attacks primarily exploit:
A. Hardware design flaws
B. Human psychology and trust
C. Network protocol weaknesses only
D. Cryptographic algorithm failures
Correct Answer: A
Rationale: Social engineering manipulates people into performing actions or divulging information by
exploiting trust, fear, curiosity, or authority. Technical controls alone cannot fully mitigate these attacks.
Question 9. Which of the following best describes a zero-day vulnerability?
A. A vulnerability that has been publicly known for many years
B. A vulnerability that is unknown to the vendor and for which no patch is yet available
C. A vulnerability that affects only outdated operating systems
D. A vulnerability that has been fully mitigated by all organizations
Correct Answer: C
Rationale: A zero-day vulnerability is one that is unknown to the software vendor or for which a patch has not
yet been released. Attackers who discover such vulnerabilities can exploit them before defenses are available.
Question 10. The principle of least privilege requires that:
A. All users receive administrator rights
B. Users and systems are granted only the minimum access necessary to perform their authorized functions
C. Access controls are disabled for convenience
D. Every employee has access to all organizational data
Correct Answer: D
Cyber Security Comprehensive Examination 2026/2027 | Verified Questions
