Page 1 of 140
CYBERSECURITY FUNDAMENTALS:
EXAM PREP BANK: LATEST VERSION |
CHOICE QUESTION BANK | 220+
ORIGINAL PRACTICE QUESTIONS WITH
DETAILED ANSWER RATIONALES |
TABLE OF CONTENTS
| **Section** | **Domain** | **Questions** |
| **I** | **General Security Concepts** | 1–40 |
| **II** | **Threats, Vulnerabilities & Mitigations** | 41–85 |
| **III** | **Security Architecture** | 86–130 |
| **IV** | **Security Operations** | 131–170 |
| **V** | **Security Program Management & Oversight** | 171–200 |
| **VI** | **Governance & Frameworks** | 201–225 |
,Page 2 of 140
SECTION I: GENERAL SECURITY CONCEPTS
*(Domain 1 — 40 Questions)*
**Question 1.** Which scenario best illustrates a violation of the **availability** component of
the CIA triad?
A. An attacker intercepts and reads an unencrypted email containing financial data.
B. A disgruntled employee modifies payroll records without authorization.
C. A ransomware attack encrypts critical hospital database files, preventing doctors from
accessing patient records.
D. A website uses HTTP instead of HTTPS for transmitting user login credentials.
**Correct Answer: C**
**Rationale:** The availability component of the CIA triad ensures that systems, data, and
resources are accessible to authorized users when needed. A ransomware attack that encrypts
hospital database files directly prevents authorized medical staff from accessing patient records,
which is a textbook violation of availability. Choice A describes a confidentiality breach
(unauthorized reading of data). Choice B describes an integrity violation (unauthorized
modification). Choice D describes a confidentiality risk (credentials transmitted in cleartext
could be intercepted).
---
**Question 2.** Which of the following BEST describes the principle of **least privilege**?
A. Users are granted all permissions necessary to perform their job functions efficiently.
B. Users are granted only the minimum levels of access—or permissions—needed to perform
their job functions.
,Page 3 of 140
C. Users are granted administrative access temporarily during emergencies only.
D. Users are rotated through different roles to prevent familiarity with any single system.
**Correct Answer: B**
**Rationale:** The principle of least privilege dictates that users should be granted only the
minimum access rights necessary to perform their required tasks. This limits the potential
damage from accidents, errors, or malicious activity. Choice A contradicts the principle by
granting excess permissions. Choice C describes emergency access procedures, which may be a
component of privileged access management but does not define least privilege. Choice D
describes job rotation, which is a separate security control for fraud prevention.
---
**Question 3.** In the context of authentication, which factor category does a **fingerprint
scan** belong to?
A. Something you know
B. Something you have
C. Something you are
D. Somewhere you are
**Correct Answer: C**
**Rationale:** Authentication factors are categorized into: something you know (passwords,
PINs), something you have (smart cards, tokens), something you are (biometrics such as
fingerprints, retinal scans, voice recognition), and somewhere you are (geolocation). A
fingerprint scan is a biometric authentication method, which falls under "something you are."
, Page 4 of 140
**Question 4.** Which of the following is the PRIMARY purpose of a **digital signature**?
A. To encrypt the contents of a message so that only the recipient can read it.
B. To provide non-repudiation, integrity, and authentication of the message origin.
C. To compress large files for efficient transmission over a network.
D. To establish a secure tunnel between two network endpoints.
**Correct Answer: B**
**Rationale:** A digital signature provides three critical security services: (1)
**Authentication** — it verifies the identity of the sender; (2) **Integrity** — it ensures the
message has not been altered in transit; and (3) **Non-repudiation** — the sender cannot later
deny having sent the message. Choice A describes encryption (confidentiality), which is separate
from digital signatures. Choice C describes file compression. Choice D describes a VPN or
secure tunnel.
---
**Question 5.** Which type of encryption uses the **same key** for both encryption and
decryption?
A. Asymmetric encryption
B. Symmetric encryption
C. Hashing
D. Steganography
**Correct Answer: B**
CYBERSECURITY FUNDAMENTALS:
EXAM PREP BANK: LATEST VERSION |
CHOICE QUESTION BANK | 220+
ORIGINAL PRACTICE QUESTIONS WITH
DETAILED ANSWER RATIONALES |
TABLE OF CONTENTS
| **Section** | **Domain** | **Questions** |
| **I** | **General Security Concepts** | 1–40 |
| **II** | **Threats, Vulnerabilities & Mitigations** | 41–85 |
| **III** | **Security Architecture** | 86–130 |
| **IV** | **Security Operations** | 131–170 |
| **V** | **Security Program Management & Oversight** | 171–200 |
| **VI** | **Governance & Frameworks** | 201–225 |
,Page 2 of 140
SECTION I: GENERAL SECURITY CONCEPTS
*(Domain 1 — 40 Questions)*
**Question 1.** Which scenario best illustrates a violation of the **availability** component of
the CIA triad?
A. An attacker intercepts and reads an unencrypted email containing financial data.
B. A disgruntled employee modifies payroll records without authorization.
C. A ransomware attack encrypts critical hospital database files, preventing doctors from
accessing patient records.
D. A website uses HTTP instead of HTTPS for transmitting user login credentials.
**Correct Answer: C**
**Rationale:** The availability component of the CIA triad ensures that systems, data, and
resources are accessible to authorized users when needed. A ransomware attack that encrypts
hospital database files directly prevents authorized medical staff from accessing patient records,
which is a textbook violation of availability. Choice A describes a confidentiality breach
(unauthorized reading of data). Choice B describes an integrity violation (unauthorized
modification). Choice D describes a confidentiality risk (credentials transmitted in cleartext
could be intercepted).
---
**Question 2.** Which of the following BEST describes the principle of **least privilege**?
A. Users are granted all permissions necessary to perform their job functions efficiently.
B. Users are granted only the minimum levels of access—or permissions—needed to perform
their job functions.
,Page 3 of 140
C. Users are granted administrative access temporarily during emergencies only.
D. Users are rotated through different roles to prevent familiarity with any single system.
**Correct Answer: B**
**Rationale:** The principle of least privilege dictates that users should be granted only the
minimum access rights necessary to perform their required tasks. This limits the potential
damage from accidents, errors, or malicious activity. Choice A contradicts the principle by
granting excess permissions. Choice C describes emergency access procedures, which may be a
component of privileged access management but does not define least privilege. Choice D
describes job rotation, which is a separate security control for fraud prevention.
---
**Question 3.** In the context of authentication, which factor category does a **fingerprint
scan** belong to?
A. Something you know
B. Something you have
C. Something you are
D. Somewhere you are
**Correct Answer: C**
**Rationale:** Authentication factors are categorized into: something you know (passwords,
PINs), something you have (smart cards, tokens), something you are (biometrics such as
fingerprints, retinal scans, voice recognition), and somewhere you are (geolocation). A
fingerprint scan is a biometric authentication method, which falls under "something you are."
, Page 4 of 140
**Question 4.** Which of the following is the PRIMARY purpose of a **digital signature**?
A. To encrypt the contents of a message so that only the recipient can read it.
B. To provide non-repudiation, integrity, and authentication of the message origin.
C. To compress large files for efficient transmission over a network.
D. To establish a secure tunnel between two network endpoints.
**Correct Answer: B**
**Rationale:** A digital signature provides three critical security services: (1)
**Authentication** — it verifies the identity of the sender; (2) **Integrity** — it ensures the
message has not been altered in transit; and (3) **Non-repudiation** — the sender cannot later
deny having sent the message. Choice A describes encryption (confidentiality), which is separate
from digital signatures. Choice C describes file compression. Choice D describes a VPN or
secure tunnel.
---
**Question 5.** Which type of encryption uses the **same key** for both encryption and
decryption?
A. Asymmetric encryption
B. Symmetric encryption
C. Hashing
D. Steganography
**Correct Answer: B**
