NOCTI: CYBER SECURITY FUNDAMENTALS ACTUAL EXAM
2026-2027 COMPLETE EXAM QUESTIONS AND CORRECT
DETAILED ANSWERS WITH RATIONALES (VERIFIED
ANSWERS) 100% GUARANTEED PASS
1.Which of the following best describes the primary goal of the CIA triad in cybersecurity?
A. Ensuring all users have administrative access
B. *Maintaining confidentiality, integrity, and availability of information*
C. Preventing all external network connections
D. Encrypting all data twice
**Rationale:** The CIA triad is the foundational model for information security. Confidentiality ensures
data is accessible only to authorized parties, integrity ensures data is accurate and unaltered, and
availability ensures data and systems are accessible when needed.
2.A phishing attack is BEST characterized as:
A. A physical attempt to steal hardware
B. A network flood using fake IP addresses
C. *A fraudulent attempt to obtain sensitive information by impersonating a trusted entity*
D. A direct exploit of an unpatched operating system
3. Which access control model grants permissions based on a user’s job role within an organization?
A. Discretionary Access Control (DAC)
B. Mandatory Access Control (MAC)
C. *Role-Based Access Control (RBAC)*
D. Rule-Based Access Control
**Rationale:** RBAC assigns system access based on roles (e.g., doctor, nurse, manager) rather
than individual user identities, simplifying management and enhancing security.
,4. What type of malware replicates itself without requiring a host file and spreads independently
across networks?
A. Trojan horse
B. Virus
C. *Worm*
D. Ransomware
**Rationale:** Unlike viruses, which need a host file to spread, worms are self-replicating and
propagate via network vulnerabilities or email without user intervention.
5. Which protocol is commonly used to securely transfer files over the internet?
A. FTP
B. HTTP
C. Telnet
D. *SFTP*
**Rationale:** SFTP (SSH File Transfer Protocol) encrypts both commands and data, unlike FTP
which transmits in plaintext. It is used for secure file transfers over SSH.
6.A security policy that requires users to change passwords every 60 days and use 12-character
passwords addresses which aspect of security?
A. Non-repudiation
B. *Authentication strength and password lifecycle management*
C. Availability
D. Data masking
**Rationale:** Password expiration and complexity requirements directly improve authentication
security by reducing the window of opportunity for compromised credentials and resisting brute force
attacks.
, 7. What is the primary purpose of a Virtual Private Network (VPN)?
A. To increase internet speed
B. To create a secure, encrypted tunnel over a public network*
C. To block all incoming traffic
D. To host public web servers
**Rationale:** A VPN extends a private network across a public network, encrypting all traffic
between the user’s device and the VPN server to ensure confidentiality and integrity.
8. Which type of attack involves an attacker intercepting and possibly altering communication
between two parties without their knowledge?
A. Denial of Service (DoS)
B. *Man-in-the-Middle (MitM)*
C. SQL injection
D. Rootkit installation
**Rationale:** In a MitM attack, the attacker secretly relays and possibly modifies messages between
two parties who believe they are directly communicating.
**9.** In terms of network security, what does a firewall primarily do?
A. Scans for viruses on endpoints
B. *Filters incoming and outgoing traffic based on security rules*
C. Encrypts all stored data
D. Backs up user files
**Rationale:** Firewalls act as a barrier between trusted internal networks and untrusted external
networks, allowing or blocking packets based on predetermined rules.
**10.** The process of converting plaintext into an unreadable format using an algorithm and a key is
called:
A. Hashing
B. *Encryption*
2026-2027 COMPLETE EXAM QUESTIONS AND CORRECT
DETAILED ANSWERS WITH RATIONALES (VERIFIED
ANSWERS) 100% GUARANTEED PASS
1.Which of the following best describes the primary goal of the CIA triad in cybersecurity?
A. Ensuring all users have administrative access
B. *Maintaining confidentiality, integrity, and availability of information*
C. Preventing all external network connections
D. Encrypting all data twice
**Rationale:** The CIA triad is the foundational model for information security. Confidentiality ensures
data is accessible only to authorized parties, integrity ensures data is accurate and unaltered, and
availability ensures data and systems are accessible when needed.
2.A phishing attack is BEST characterized as:
A. A physical attempt to steal hardware
B. A network flood using fake IP addresses
C. *A fraudulent attempt to obtain sensitive information by impersonating a trusted entity*
D. A direct exploit of an unpatched operating system
3. Which access control model grants permissions based on a user’s job role within an organization?
A. Discretionary Access Control (DAC)
B. Mandatory Access Control (MAC)
C. *Role-Based Access Control (RBAC)*
D. Rule-Based Access Control
**Rationale:** RBAC assigns system access based on roles (e.g., doctor, nurse, manager) rather
than individual user identities, simplifying management and enhancing security.
,4. What type of malware replicates itself without requiring a host file and spreads independently
across networks?
A. Trojan horse
B. Virus
C. *Worm*
D. Ransomware
**Rationale:** Unlike viruses, which need a host file to spread, worms are self-replicating and
propagate via network vulnerabilities or email without user intervention.
5. Which protocol is commonly used to securely transfer files over the internet?
A. FTP
B. HTTP
C. Telnet
D. *SFTP*
**Rationale:** SFTP (SSH File Transfer Protocol) encrypts both commands and data, unlike FTP
which transmits in plaintext. It is used for secure file transfers over SSH.
6.A security policy that requires users to change passwords every 60 days and use 12-character
passwords addresses which aspect of security?
A. Non-repudiation
B. *Authentication strength and password lifecycle management*
C. Availability
D. Data masking
**Rationale:** Password expiration and complexity requirements directly improve authentication
security by reducing the window of opportunity for compromised credentials and resisting brute force
attacks.
, 7. What is the primary purpose of a Virtual Private Network (VPN)?
A. To increase internet speed
B. To create a secure, encrypted tunnel over a public network*
C. To block all incoming traffic
D. To host public web servers
**Rationale:** A VPN extends a private network across a public network, encrypting all traffic
between the user’s device and the VPN server to ensure confidentiality and integrity.
8. Which type of attack involves an attacker intercepting and possibly altering communication
between two parties without their knowledge?
A. Denial of Service (DoS)
B. *Man-in-the-Middle (MitM)*
C. SQL injection
D. Rootkit installation
**Rationale:** In a MitM attack, the attacker secretly relays and possibly modifies messages between
two parties who believe they are directly communicating.
**9.** In terms of network security, what does a firewall primarily do?
A. Scans for viruses on endpoints
B. *Filters incoming and outgoing traffic based on security rules*
C. Encrypts all stored data
D. Backs up user files
**Rationale:** Firewalls act as a barrier between trusted internal networks and untrusted external
networks, allowing or blocking packets based on predetermined rules.
**10.** The process of converting plaintext into an unreadable format using an algorithm and a key is
called:
A. Hashing
B. *Encryption*
