Answer All The Questions

Time remaining

01:30:00

Please Fill in your details in order to continue with quiz.

Email *

Full Name *

cybersecurity_test

SECTION 1

Networking & OS Security Fundamentals

1. Which layer of the OSI model is responsible for "MAC addressing and frame delivery"?

A) Physical

B) Data Link

C) Network

D) Transport

2. Attackers commonly perform "Man-in-the-Middle (MITM)" attacks. Which network attack technique involves tricking devices into sending traffic through an attacker's machine by falsifying local network mappings?

A) SYN Flood

B) DNS Poisoning

C) ARP Spoofing

D) IP Spoofing

3. What is the primary purpose of the "TCP three-way handshake"?

A) To establish a reliable connection between two systems.

B) To terminate an unreliable connection.

C) To encrypt data transmission.

D) To resolve IP addresses to MAC addresses.

4. In Windows environments, what concept is heavily relied upon by enterprises and includes "Domain controllers" and "Kerberos authentication"?

A) Group Policy Objects (GPO)

B) Active Directory (AD)

C) Event Viewer logs

D) SMB shares

5. Which of the following describes a key risk associated with "Improper permission configuration" in Linux systems?

A) Reduced network bandwidth

B) Service denial

C) Privilege escalation

D) Data fragmentation

6. Explain how "Attackers frequently scan for open ports" and why this is a crucial reconnaissance step for them. Provide an example of a common service and its port that an attacker might look for.

7. Describe the function of "Group Policy Objects (GPO)" in a Windows environment.

8. An "OSI model consists of seven layers". Name any two layers and briefly describe their primary function.

9. Discuss the various categories of permissions available for files in Linux systems, including who these permissions apply to. How can "Improper permission configuration can lead to privilege escalation"? Provide an example of how this might occur.

10. Explain two common Windows attack techniques used for "Lateral movement via SMB" or "Credential dumping". For each technique, describe how it works and what an attacker aims to achieve.

SECTION 2

Cryptography & Web Security

1. What is a key characteristic of "Hashing" algorithms?

A) It uses the same key for encryption and decryption.

B) It transforms plaintext into ciphertext and can be reversed with a key.

C) It generates a fixed-length digest and is designed to be one-way.

D) It relies on a public and private key pair.

2. Which statement best describes "Symmetric Encryption"?

A) It uses a public key for encryption and a private key for decryption.

B) It uses the same key for encryption and decryption.

C) It is designed to be a one-way function.

D) It is primarily used for digital signatures.

3. Which type of web vulnerability allows attackers to inject malicious scripts into web pages, potentially leading to "Stored XSS" or "Reflected XSS"?

A) SQL Injection

B) Cross-Site Scripting (XSS)

C) Command Injection

D) Cross-Site Request Forgery (CSRF)

4. What is the recommended best practice for "Password storage" to enhance security against various cryptographic attacks?

A) Storing passwords in plaintext.

B) Using MD5 for hashing.

C) Using salted hashes.

D) Implementing symmetric encryption without a key.

5. Which vulnerability is characterized by allowing "unauthorized access to resources" due to flawed security mechanisms?

A) SQL Injection

B) Cross-Site Request Forgery (CSRF)

C) Broken Access Control

D) Security Misconfiguration

6. Explain the difference between "Encryption transforms plaintext into ciphertext" and "Hashing generates a fixed-length digest".

7. What is the primary defense against "Injection flaws occur when untrusted data is sent to an interpreter"?

8. Why is "Improper implementation of cryptography is often more dangerous" than using weak algorithms?

9. Differentiate between "Symmetric Encryption" and "Asymmetric Encryption" by describing their key mechanisms and providing an example for each. In what specific security application is asymmetric encryption commonly used, referencing "Uses a public and private key pair"?

10. Explain Cross-Site Request Forgery (CSRF) and how it "forces authenticated users to perform unintended actions". Describe what makes a CSRF attack successful and what defense mechanism, related to "Proper input validation and output encoding", is essential for prevention.

SECTION 3

Malware, SOC & Cloud Security

1. What does "Ransomware – encrypts or exfiltrates data" primarily aim to do?

A) Attach to legitimate programs.

B) Self-replicate across networks.

C) Disguise itself as legitimate software.

D) Extort money by denying access to data or threatening its release.

2. Which phase of "The Cyber Kill Chain describes stages of an attack" involves an attacker sending the weaponized delivery mechanism to the victim?

A) Reconnaissance

B) Weaponization

C) Delivery

D) Exploitation

3. What is a common challenge faced by "Security Information and Event Management systems aggregate logs" that can lead to "Alert fatigue" for SOC analysts?

A) Lack of log sources

B) Insufficient storage capacity

C) High volume of false positives

D) Slow log ingestion rates

4. Which principle must be enforced for "IAM misconfiguration can lead to privilege escalation" in cloud environments?

A) Shared responsibility model

B) Principle of least privilege

C) Metadata service exploitation

D) Publicly exposed storage buckets

5. In cloud security, what critical aspect ensures visibility into operations and potential security incidents, requiring that "Cloud logging services must be enabled for visibility"?

A) Overly permissive security groups

B) Insecure APIs

C) Publicly exposed storage buckets

D) Monitoring and auditing

6. Name two types of malware and briefly describe their defining characteristics, referencing "Malware refers to malicious software".

7. What is the key implication of "Cloud environments introduce shared responsibility" for security?

8. List two phases from the "Incident Response Phases" and briefly describe the goal of each.

9. Describe the function of "Security Information and Event Management systems aggregate logs" and their role in a SOC. Discuss two challenges faced by SIEM systems that can impact a SOC team's effectiveness, such as "False positives" and "Alert fatigue".

10. Discuss at least three common cloud security risks, such as "Publicly exposed storage buckets", that organizations face. For each risk, briefly explain its nature and a potential consequence if exploited.

SECTION 4

Defense, GRC & Advanced Threats

1. Which network security control is specifically designed to prevent malicious traffic from entering a network based on defined rules?

A) Intrusion Detection Systems (IDS)

B) Endpoint Detection and Response (EDR)

C) Firewalls

D) Behavioral analysis

2. What does the concept of "Defense in depth requires multiple security layers" primarily advocate for?

A) Relying on a single, strong security product.

B) Implementing security only at the network perimeter.

C) Using a combination of security controls at different levels.

D) Prioritizing physical security over logical security.

3. Which risk assessment formula helps organizations quantify potential threats and their impact?

A) Risk = Threats + Vulnerabilities

B) Risk = Assets × Controls

C) Risk = Likelihood × Impact

D) Risk = Cost / Benefit

4. What is a characteristic of "APTs are prolonged, targeted attacks"?

A) They are typically random and opportunistic.

B) They are often sponsored by nation-states.

C) They are short-lived and easy to detect.

D) They only target individual users.

5. The emergence of "AI-powered phishing" is an example of what type of risk?

A) Supply Chain Attack

B) Advanced Persistent Threat (APT)

C) Traditional Malware

D) Emerging Risk

6. Differentiate between an "Intrusion Detection System (IDS)" and an "Intrusion Prevention System (IPS)" in terms of their primary function.

7. What is the core principle behind a "Zero Trust architecture" in network defense?

8. Why are "Policies, procedures, and audits ensure compliance" important for an organization's security posture?

9. Explain the concept of "Defense in depth requires multiple security layers" in cybersecurity. Provide specific examples of how Endpoint Protection, referencing "Endpoint Detection and Response (EDR)", and Network Security Controls contribute to a layered defense strategy.

10. Describe what "Supply Chain Attacks" are and how "Compromise occurs through trusted third-party vendors". Explain why this type of attack is particularly challenging to defend against and identify at least two "Emerging Risks" that further complicate the modern threat landscape.

NEXT