Technical Post-Assessment

Question 1 of 50

1. Question

What is the principle of least privilege?

Giving admins full access

Correct Incorrect Correct answer

Denying all access

Correct Incorrect Correct answer

Giving users only necessary access

Correct Incorrect Correct answer

Sharing passwords

Correct Incorrect Correct answer

Question 2 of 50

2. Question

Which algorithm is used for asymmetric encryption?

RSA

Correct Incorrect Correct answer

AES

Correct Incorrect Correct answer

MD5

Correct Incorrect Correct answer

DES

Correct Incorrect Correct answer

Question 3 of 50

3. Question

What command is used in Windows to view the current IP configuration?

netconfig

Correct Incorrect Correct answer

ipconfig

Correct Incorrect Correct answer

ip route

Correct Incorrect Correct answer

ifconfig

Correct Incorrect Correct answer

Question 4 of 50

4. Question

Which technique is used to bypass firewall restrictions by tunneling?

Hashing

Correct Incorrect Correct answer

Salting

Correct Incorrect Correct answer

Encryption

Correct Incorrect Correct answer

VPN

Correct Incorrect Correct answer

Question 5 of 50

5. Question

What is the primary purpose of a SQL injection attack?

To crash the server

Correct Incorrect Correct answer

To manipulate database queries

Correct Incorrect Correct answer

To steal physical hardware

Correct Incorrect Correct answer

To intercept email

Correct Incorrect Correct answer

Question 6 of 50

6. Question

What is incident response?

Hiring new staff

Correct Incorrect Correct answer

Creating passwords

Correct Incorrect Correct answer

Buying firewalls

Correct Incorrect Correct answer

Processes for handling security breaches

Correct Incorrect Correct answer

Question 7 of 50

7. Question

Which of these is a secure version of HTTP?

FTP

Correct Incorrect Correct answer

HTTPS

Correct Incorrect Correct answer

Telnet

Correct Incorrect Correct answer

SMTP

Correct Incorrect Correct answer

Question 8 of 50

8. Question

Which command-line tool is used for packet analysis?

Ping

Correct Incorrect Correct answer

Traceroute

Correct Incorrect Correct answer

Tcpdump

Correct Incorrect Correct answer

Netcat

Correct Incorrect Correct answer

Question 9 of 50

9. Question

What is a honeypot?

A trap for attackers

Correct Incorrect Correct answer

A firewall rule

Correct Incorrect Correct answer

A network switch

Correct Incorrect Correct answer

A database schema

Correct Incorrect Correct answer

Question 10 of 50

10. Question

Which tool is used for web application vulnerability scanning?

Burp Suite

Correct Incorrect Correct answer

Putty

Correct Incorrect Correct answer

VLC

Correct Incorrect Correct answer

Excel

Correct Incorrect Correct answer

Question 11 of 50

11. Question

Which protocol is used for secure file transfer?

HTTP

Correct Incorrect Correct answer

SFTP

Correct Incorrect Correct answer

FTP

Correct Incorrect Correct answer

TFTP

Correct Incorrect Correct answer

Question 12 of 50

12. Question

Which layer of the OSI model does a firewall typically operate at?

Layer 3 (Network)

Correct Incorrect Correct answer

Layer 1 (Physical)

Correct Incorrect Correct answer

Layer 7 (Application)

Correct Incorrect Correct answer

Layer 2 (Data Link)

Correct Incorrect Correct answer

Question 13 of 50

13. Question

What is a ‘zero-day’ exploit?

A virus that deletes everything

Correct Incorrect Correct answer

An exploit discovered before the vendor knows about the vulnerability

Correct Incorrect Correct answer

An exploit that takes 0 days to fix

Correct Incorrect Correct answer

A hardware failure

Correct Incorrect Correct answer

Question 14 of 50

14. Question

Which command is used to display the contents of a text file on the screen?

grep

Correct Incorrect Correct answer

ps

Correct Incorrect Correct answer

cat

Correct Incorrect Correct answer

top

Correct Incorrect Correct answer

Question 15 of 50

15. Question

What is the purpose of an audit?

To fix bugs

Correct Incorrect Correct answer

To verify compliance and security controls

Correct Incorrect Correct answer

To update hardware

Correct Incorrect Correct answer

To speed up the network

Correct Incorrect Correct answer

Question 16 of 50

16. Question

What does GRC stand for?

Global Risk Control

Correct Incorrect Correct answer

Group Resource Compliance

Correct Incorrect Correct answer

Governance, Risk, and Compliance

Correct Incorrect Correct answer

General Reporting Center

Correct Incorrect Correct answer

Question 17 of 50

17. Question

What is social engineering?

Managing cloud infrastructure

Correct Incorrect Correct answer

Manipulating people to divulge confidential information

Correct Incorrect Correct answer

Writing secure code

Correct Incorrect Correct answer

Installing firewalls

Correct Incorrect Correct answer

Question 18 of 50

18. Question

What is the purpose of hashing in security?

Data compression

Correct Incorrect Correct answer

Data transmission

Correct Incorrect Correct answer

Data encryption

Correct Incorrect Correct answer

Data integrity

Correct Incorrect Correct answer

Question 19 of 50

19. Question

Which regulation mandates data privacy for EU citizens?

SOX

Correct Incorrect Correct answer

HIPAA

Correct Incorrect Correct answer

PCI-DSS

Correct Incorrect Correct answer

GDPR

Correct Incorrect Correct answer

Question 20 of 50

20. Question

Which protocol is primarily used for secure remote command-line access?

SNMP

Correct Incorrect Correct answer

SSH

Correct Incorrect Correct answer

Telnet

Correct Incorrect Correct answer

HTTP

Correct Incorrect Correct answer

Question 21 of 50

21. Question

What is the main goal of compliance?

Increasing profit

Correct Incorrect Correct answer

Adhering to laws and regulations

Correct Incorrect Correct answer

Installing new software

Correct Incorrect Correct answer

Reducing employees

Correct Incorrect Correct answer

Question 22 of 50

22. Question

Which port is standard for SMTP?

110

Correct Incorrect Correct answer

80

Correct Incorrect Correct answer

25

Correct Incorrect Correct answer

21

Correct Incorrect Correct answer

Question 23 of 50

23. Question

What is a buffer overflow prevention method?

Input validation

Correct Incorrect Correct answer

Increasing speed

Correct Incorrect Correct answer

Installing games

Correct Incorrect Correct answer

Deleting logs

Correct Incorrect Correct answer

Question 24 of 50

24. Question

What is disaster recovery?

Preventing disasters

Correct Incorrect Correct answer

Restoring systems after a disaster

Correct Incorrect Correct answer

Creating backups

Correct Incorrect Correct answer

Buying insurance

Correct Incorrect Correct answer

Question 25 of 50

25. Question

What is business continuity planning?

Updating the website

Correct Incorrect Correct answer

Ensuring operations continue during a disaster

Correct Incorrect Correct answer

Closing the business

Correct Incorrect Correct answer

Buying more servers

Correct Incorrect Correct answer

Question 26 of 50

26. Question

What is endpoint protection?

Protecting the server room

Correct Incorrect Correct answer

Protecting individual devices

Correct Incorrect Correct answer

Protecting the cloud only

Correct Incorrect Correct answer

Protecting the firewall

Correct Incorrect Correct answer

Question 27 of 50

27. Question

What does a WAF protect?

User hardware

Correct Incorrect Correct answer

Network cables

Correct Incorrect Correct answer

Web applications

Correct Incorrect Correct answer

Hard drives

Correct Incorrect Correct answer

Question 28 of 50

28. Question

What is the function of a VPN?

To remove viruses

Correct Incorrect Correct answer

To hide hardware

Correct Incorrect Correct answer

To speed up browsing

Correct Incorrect Correct answer

To create an encrypted tunnel

Correct Incorrect Correct answer

Question 29 of 50

29. Question

What is an IDS?

Internal Database Server

Correct Incorrect Correct answer

Intrusion Detection System

Correct Incorrect Correct answer

Integrated Design System

Correct Incorrect Correct answer

Internet Data Storage

Correct Incorrect Correct answer

Question 30 of 50

30. Question

What is data classification?

Deleting old data

Correct Incorrect Correct answer

Categorizing data by sensitivity

Correct Incorrect Correct answer

Encrypting data

Correct Incorrect Correct answer

Sharing data

Correct Incorrect Correct answer

Question 31 of 50

31. Question

What is a threat model?

A list of users

Correct Incorrect Correct answer

A network diagram

Correct Incorrect Correct answer

Identifying potential threats to a system

Correct Incorrect Correct answer

A budget plan

Correct Incorrect Correct answer

Question 32 of 50

32. Question

What is a risk assessment?

Updating software

Correct Incorrect Correct answer

Buying insurance

Correct Incorrect Correct answer

Identifying and evaluating potential risks

Correct Incorrect Correct answer

Ignoring threats

Correct Incorrect Correct answer

Question 33 of 50

33. Question

What is the primary role of an SIEM?

Security log aggregation and analysis

Correct Incorrect Correct answer

User management

Correct Incorrect Correct answer

Software development

Correct Incorrect Correct answer

Network speed testing

Correct Incorrect Correct answer

Question 34 of 50

34. Question

Which standard focuses on payment card security?

PCI-DSS

Correct Incorrect Correct answer

GDPR

Correct Incorrect Correct answer

SOX

Correct Incorrect Correct answer

HIPAA

Correct Incorrect Correct answer

Question 35 of 50

35. Question

Which OS is typically the target for specific kernel exploits in older versions?

Android

Correct Incorrect Correct answer

macOS

Correct Incorrect Correct answer

Windows XP

Correct Incorrect Correct answer

Kali Linux

Correct Incorrect Correct answer

Question 36 of 50

36. Question

Which document outlines acceptable use of IT resources?

Email guidelines

Correct Incorrect Correct answer

Hardware manual

Correct Incorrect Correct answer

AUP (Acceptable Use Policy)

Correct Incorrect Correct answer

Software license

Correct Incorrect Correct answer

Question 37 of 50

37. Question

What is the role of the CISO?

Chief Information Security Officer

Correct Incorrect Correct answer

Chief Information Support Officer

Correct Incorrect Correct answer

Chief Internal Systems Officer

Correct Incorrect Correct answer

Chief Internet Sales Officer

Correct Incorrect Correct answer

Question 38 of 50

38. Question

Which type of attack involves intercepting communication between two parties?

SQL Injection

Correct Incorrect Correct answer

DDoS

Correct Incorrect Correct answer

Man-in-the-Middle

Correct Incorrect Correct answer

Phishing

Correct Incorrect Correct answer

Question 39 of 50

39. Question

What is multi-factor authentication (MFA)?

Using different computers

Correct Incorrect Correct answer

Using multiple passwords

Correct Incorrect Correct answer

Requiring two or more forms of verification

Correct Incorrect Correct answer

Changing passwords daily

Correct Incorrect Correct answer

Question 40 of 50

40. Question

What is a security policy?

A document defining security rules

Correct Incorrect Correct answer

A network configuration

Correct Incorrect Correct answer

An antivirus software

Correct Incorrect Correct answer

A firewall rule

Correct Incorrect Correct answer

Question 41 of 50

41. Question

Which tool is commonly used for network scanning and enumeration?

Metasploit

Correct Incorrect Correct answer

Wireshark

Correct Incorrect Correct answer

Burp Suite

Correct Incorrect Correct answer

Nmap

Correct Incorrect Correct answer

Question 42 of 50

42. Question

What does the CIA triad stand for?

Control, Intelligence, Access

Correct Incorrect Correct answer

Confidentiality, Integrity, Availability

Correct Incorrect Correct answer

Compliance, Inspection, Assurance

Correct Incorrect Correct answer

Cipher, Identification, Authentication

Correct Incorrect Correct answer

Question 43 of 50

43. Question

What does a Cross-Site Scripting (XSS) attack target?

The user’s browser/client

Correct Incorrect Correct answer

The network router

Correct Incorrect Correct answer

The server’s database

Correct Incorrect Correct answer

The DNS server

Correct Incorrect Correct answer

Question 44 of 50

44. Question

What is the primary goal of a penetration test?

To identify vulnerabilities

Correct Incorrect Correct answer

To increase internet speed

Correct Incorrect Correct answer

To replace the IT team

Correct Incorrect Correct answer

To fix all bugs

Correct Incorrect Correct answer

Question 45 of 50

45. Question

What is buffer overflow?

Clearing the cache

Correct Incorrect Correct answer

Writing more data to a buffer than it can hold

Correct Incorrect Correct answer

A network congestion issue

Correct Incorrect Correct answer

A database error

Correct Incorrect Correct answer

Question 46 of 50

46. Question

What is privilege escalation?

Gaining higher access than intended

Correct Incorrect Correct answer

Logging in as a guest

Correct Incorrect Correct answer

Reducing user permissions

Correct Incorrect Correct answer

Changing a password

Correct Incorrect Correct answer

Question 47 of 50

47. Question

What is the primary purpose of a firewall in a network?

To filter traffic based on security rules

Correct Incorrect Correct answer

To increase internet speed

Correct Incorrect Correct answer

To replace antivirus

Correct Incorrect Correct answer

To act as a web server

Correct Incorrect Correct answer

Question 48 of 50

48. Question

In Linux, which command is used to change the permissions of a file?

chmod

Correct Incorrect Correct answer

chown

Correct Incorrect Correct answer

ls -l

Correct Incorrect Correct answer

chgrp

Correct Incorrect Correct answer

Question 49 of 50

49. Question

Which of the following is a common password cracking technique?

Port knocking

Correct Incorrect Correct answer

IP spoofing

Correct Incorrect Correct answer

Brute force

Correct Incorrect Correct answer

Packet sniffing

Correct Incorrect Correct answer

Question 50 of 50

50. Question

Which framework is common for security standards?

TCP

Correct Incorrect Correct answer

USB

Correct Incorrect Correct answer

ISO 27001

Correct Incorrect Correct answer

HTTP

Correct Incorrect Correct answer

Technical Post-Assessment

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question

32. Question

33. Question

34. Question

35. Question

36. Question

37. Question

38. Question

39. Question

40. Question

41. Question

42. Question

43. Question

44. Question

45. Question

46. Question

47. Question

48. Question

49. Question

50. Question