1. What is the primary function of an Intrusion Detection System (IDS)?
A. To prevent unauthorized access
B. To monitor network traffic for signs of malicious activity
C. To manage encryption keys
D. To scan for viruses
Answer: b) To monitor network traffic for signs of malicious activity
Rationale: An IDS monitors network or system activities to detect suspicious patterns that may
indicate a potential attack.
2. Which of the following is an example of two-factor authentication?
A. A password and a CAPTCHA
B. A password and a fingerprint scan
C. A PIN and a username
D. A password and a username
Answer: b) A password and a fingerprint scan
Rationale: Two-factor authentication involves using two different methods of authentication,
such as something you know (password) and something you have (fingerprint, token, etc.).
3. What does the term "sandboxing" refer to in cybersecurity?
,A. A method of storing data securely
B. Isolating applications or processes to prevent potential damage
C. Encrypting sensitive files
D. A type of data backup technique
Answer: b) Isolating applications or processes to prevent potential damage
Rationale: Sandboxing is a security mechanism used to run applications or processes in a
controlled environment, isolating them to minimize the potential harm they could cause.
4. Which of the following is considered a strong password?
A. 123456
B. Password
C. Qv7&$nP3
D. JohnDoe
Answer: c) Qv7&$nP3
Rationale: A strong password typically includes a mix of upper and lower case letters, numbers,
and special characters.
5. What is the purpose of Multi-Factor Authentication (MFA)?
A. To simplify password management
B. To protect against phishing attacks
C. To enhance security by requiring more than one form of verification
, D. To create stronger passwords
Answer: c) To enhance security by requiring more than one form of verification
Rationale: MFA requires two or more authentication factors (e.g., something you know,
something you have, or something you are), making unauthorized access more difficult.
6. What is a "man-in-the-middle" attack?
A. An attack where the attacker intercepts and alters communication between two parties
B. An attack that targets physical devices in a network
C. An attack that compromises a website’s encryption certificate
D. An attack that disables firewalls
Answer: a) An attack where the attacker intercepts and alters communication between two
parties
Rationale: A man-in-the-middle attack occurs when an attacker intercepts and potentially alters
the communication between two parties without their knowledge.
7. What is the term "SQL injection" used to describe?
A. An attack where malicious SQL queries are inserted into a website’s database
B. An attack where a system is flooded with excessive SQL queries
C. An attempt to decrypt SQL data
D. A method of storing SQL passwords securely
Answer: a) An attack where malicious SQL queries are inserted into a website’s database
A. To prevent unauthorized access
B. To monitor network traffic for signs of malicious activity
C. To manage encryption keys
D. To scan for viruses
Answer: b) To monitor network traffic for signs of malicious activity
Rationale: An IDS monitors network or system activities to detect suspicious patterns that may
indicate a potential attack.
2. Which of the following is an example of two-factor authentication?
A. A password and a CAPTCHA
B. A password and a fingerprint scan
C. A PIN and a username
D. A password and a username
Answer: b) A password and a fingerprint scan
Rationale: Two-factor authentication involves using two different methods of authentication,
such as something you know (password) and something you have (fingerprint, token, etc.).
3. What does the term "sandboxing" refer to in cybersecurity?
,A. A method of storing data securely
B. Isolating applications or processes to prevent potential damage
C. Encrypting sensitive files
D. A type of data backup technique
Answer: b) Isolating applications or processes to prevent potential damage
Rationale: Sandboxing is a security mechanism used to run applications or processes in a
controlled environment, isolating them to minimize the potential harm they could cause.
4. Which of the following is considered a strong password?
A. 123456
B. Password
C. Qv7&$nP3
D. JohnDoe
Answer: c) Qv7&$nP3
Rationale: A strong password typically includes a mix of upper and lower case letters, numbers,
and special characters.
5. What is the purpose of Multi-Factor Authentication (MFA)?
A. To simplify password management
B. To protect against phishing attacks
C. To enhance security by requiring more than one form of verification
, D. To create stronger passwords
Answer: c) To enhance security by requiring more than one form of verification
Rationale: MFA requires two or more authentication factors (e.g., something you know,
something you have, or something you are), making unauthorized access more difficult.
6. What is a "man-in-the-middle" attack?
A. An attack where the attacker intercepts and alters communication between two parties
B. An attack that targets physical devices in a network
C. An attack that compromises a website’s encryption certificate
D. An attack that disables firewalls
Answer: a) An attack where the attacker intercepts and alters communication between two
parties
Rationale: A man-in-the-middle attack occurs when an attacker intercepts and potentially alters
the communication between two parties without their knowledge.
7. What is the term "SQL injection" used to describe?
A. An attack where malicious SQL queries are inserted into a website’s database
B. An attack where a system is flooded with excessive SQL queries
C. An attempt to decrypt SQL data
D. A method of storing SQL passwords securely
Answer: a) An attack where malicious SQL queries are inserted into a website’s database
