Hello, Guest Login

Intermediate ~5 min

Cyber Security Advanced

This introductory assessment covers fundamental cybersecurity concepts, including common threats, basic network security, authentication, data protection, and safe online practices. Designed for beginners and non-technical users, the test focuses on understanding core security principles and recognizing risks in everyday digital environments.

Progress: 0/30

Intermediate � ~5 min

Q1. What is a zero-day exploit?

Select one answer � 1 pt

Phishing campaign Brute force attempt Attack on undisclosed vulnerability Known patch evasion

Q2. What does AES stand for in cryptography?

Select one answer � 1 pt

Advanced Encryption Standard Authenticated Encryption Scheme Algorithmic Encryption Service Asymmetric Encryption System

Q3. Which attack involves injecting malicious code into a website?

Select one answer � 1 pt

Man-in-the-Middle Buffer Overflow SQL Injection Cross-Site Scripting (XSS)

Q4. What is a man-in-the-middle (MITM) attack?

Select one answer � 1 pt

Intercepting and altering communications Encrypting data Guessing passwords Flooding with traffic

Q5. What is the purpose of a digital certificate?

Select one answer � 1 pt

Monitor traffic Store passwords Block malware Verify identity and enable encryption

Q6. Which protocol is used for secure email transmission?

Select one answer � 1 pt

HTTP S/MIME FTP SMTP

Q7. What is SQL injection?

Select one answer � 1 pt

Injecting malicious SQL code Auditing logs Backing up data Encrypting database

Q8. What does PKI stand for?

Select one answer � 1 pt

Private Key Integration Public Key Infrastructure Protected Knowledge Index Password Key Interface

Q9. Which is an example of a rootkit?

Select one answer � 1 pt

Firewall rule Encryption tool Software that conceals malware Antivirus scanner

Q10. What is cross-site request forgery (CSRF)?

Select one answer � 1 pt

Stealing cookies Injecting scripts Unauthorized actions on authenticated sites Denying service

Q11. What is the role of a honeypot in security?

Select one answer � 1 pt

Encryption device Access control list Decoy system to lure attackers Backup server

Q12. Which hashing algorithm is considered secure for passwords?

Select one answer � 1 pt

SHA-1 MD5 CRC32 bcrypt

Q13. What is ARP poisoning?

Select one answer � 1 pt

Filtering traffic Authenticating users Spoofing ARP responses Encrypting packets

Q14. What does GDPR regulate?

Select one answer � 1 pt

Data protection and privacy Hardware standards Network protocols Software licensing

Q15. Which attack uses multiple compromised systems?

Select one answer � 1 pt

Trojan Virus Botnet Worm

Q16. What is multi-factor authentication (MFA)?

Select one answer � 1 pt

Single password Username alone Biometric only Multiple forms of verification

Q17. What is a buffer overflow attack?

Select one answer � 1 pt

Auditing code Overwriting adjacent memory Encrypting buffers Flooding inputs

Q18. Which framework is used for incident response?

Select one answer � 1 pt

ISO 9001 COBIT NIST Incident Response Framework ITIL

Q19. What is OAuth used for?

Select one answer � 1 pt

Delegated authorization Network segmentation Data encryption Password hashing

Q20. What does IDS stand for?

Select one answer � 1 pt

Incident Data Storage Internet Domain Service Intrusion Detection System Identity Directory Server

Q21. Which is a characteristic of asymmetric encryption?

Select one answer � 1 pt

Hashing only Single shared key Compression Public and private key pair

Q22. What is a supply chain attack?

Select one answer � 1 pt

Internal sabotage Direct brute force Phishing employees Compromising vendors to access targets

Q23. What does SIEM stand for?

Select one answer � 1 pt

Security Information and Event Management Secure Internet Email Module System Integration and Error Monitoring Software Installation and Execution Manager

Q24. Which tool is used for penetration testing?

Select one answer � 1 pt

Notepad Calculator Excel Metasploit

Q25. What is zero trust architecture?

Select one answer � 1 pt

Block external access only Trust all internal traffic Use single sign-on Verify explicitly, never trust

Q26. What is a cryptographic nonce?

Select one answer � 1 pt

Number used once to prevent replays Certificate authority Private key Hash function

Q27. Which attack exploits DNS vulnerabilities?

Select one answer � 1 pt

CSRF XSS DNS Amplification SQL Injection

Q28. What is forensic analysis in cybersecurity?

Select one answer � 1 pt

Encrypting data Monitoring traffic Preventing attacks Collecting and analyzing evidence

Q29. What does HIPAA protect?

Select one answer � 1 pt

Intellectual property Protected health information Financial data Government secrets

Q30. Which is an advanced persistent threat (APT)?

Select one answer � 1 pt

Long-term sophisticated intrusion Simple virus One-time phishing Brute force attempt

Cancel