Blog Categories

Cloud Computing
Digital Marketing
Data Science
IT Service and Architecture
Big Data
Salesforce
Project Management
Corporate Training
Machine Learning AI
Technology
Cyber Security
Business Intelligence
Programming Languages
DevOps
Deep Learning
Robotic Process Automation
Artificial Intelligence
Microsoft Certifications
Data Analytics
Machine Learning
Mobile Development
Website Development
Testing
Blockchain
Others
ERP
Quizzes
Cheat Sheet
Interview Questions
Python
Java
Golang
R programming
C Programming
C Sharp
JavaScript
HTML
CSS
Ruby
C Plus Plus
Online Compilers

Blog Quizzes Top 200 Cyber Security MCQs With Answers

Top 200 Cyber Security MCQs With Answers

By: Chinmay

Last Updated: August 11th, 2026

Read Time: 30:00 Minutes

1. Cybersecurity Fundamentals

2. Threats and Attacks

3. Security Technologies

4. Security Practices and Management

5. Latest Cybersecurity Features and Updates

6. Network Security

7. Data Protection and Compliance

8. Advanced Cybersecurity Concepts and Scenarios

9. Your Quiz Result

Preparing to become a Cyber Security Engineer? This Top Cybersecurity MCQs collection is your ultimate resource. It includes frequently asked multiple-choice questions, categorized for comprehensive learning, to evaluate your expertise and identify areas for improvement.

Note: Score 60% or higher to unlock an exclusive offer of up to 50% off on all self-paced cybersecurity courses.

Let's begin!

Cybersecurity Fundamentals

1. What is the main objective of cybersecurity measures?

A) To enhance system performance
B) To streamline software development
C) To safeguard information and infrastructure from cyber threats
D) To boost data storage efficiency

2. What does CIA stand for in the context of cybersecurity?

A) Confidentiality, Integrity, Availability
B) Control, Isolation, Authentication
C) Compliance, Investigation, Access
D) Connectivity, Inspection, Authorization

3. What is the primary function of multi-factor authentication (MFA)?

A) To reduce authentication time
B) To enhance security with multiple verification steps
C) To simplify user login processes
D) To increase network capacity

4. Which of the following is a type of authentication factor?

A) Biometric
B) Firewall
C) Encryption
D) Packet filtering

5. What is the key role of encryption in securing digital information?

A) To compress data for storage
B) To accelerate data processing
C) To facilitate data sharing
D) To render data unreadable without a key

6. Which of the following is a common access control model?

A) Data encryption model
B) Network segmentation model
C) Role-Based Access Control (RBAC)
D) Packet filtering model

7. What is a digital signature used for?

A) To encrypt network traffic
B) To store user credentials
C) To increase server performance
D) To verify the authenticity of a message

8. Which of the following is an example of a public key encryption algorithm?

A) RSA
B) DES
C) 3DES
D) Blowfish

9. What is the primary function of a hardware security token?

A) To verify user identity securely
B) To enhance network speed
C) To store large datasets
D) To monitor system performance

10. What does the principle of least privilege (PoLP) entail?

A) Granting users full system access
B) Encrypting all user data
C) Limiting user access to only necessary resources
D) Monitoring all user activities

Threats and Attacks

11. Which of the following is a common type of cyber attack?

A) Data encryption
B) System backup
C) Phishing
D) Network optimization

12. Which type of malware locks a user's data and demands payment for access?

A) Virus
B) Worm
C) Ransomware
D) Spyware

13. Which of the following best describes a DDoS attack?

A) Stealing user credentials
B) Encrypting sensitive data
C) Installing malware on a device
D) Overwhelming a system with traffic

14. Which technique involves manipulating individuals to disclose sensitive information?

A) SQL injection
B) Baiting
C) Brute force attack
D) Network scanning

15. What does the term 'zero-day' refer to in cybersecurity?

A) A day with no cyber attacks
B) A day when systems are updated
C) A day when backups are performed
D) A vulnerability exploited before a patch is available

16. What is a man-in-the-middle (MITM) attack?

A) Locking a user's data for ransom
B) Flooding a server with requests
C) Intercepting communication between two parties
D) Guessing a user's password

17. What is the purpose of a brute force attack?

A) To guess passwords through trial and error
B) To encrypt sensitive data
C) To monitor network traffic
D) To optimize server performance

18. Which of the following is a type of malware that disguises itself as legitimate software?

A) Trojan
B) Worm
C) Virus
D) Ransomware

19. Which of the following is a common type of spyware?

A) Ransomware
B) Worm
C) Keylogger
D) Trojan

20. Which of the following is a common type of phishing attack?

A) Spear phishing
B) Brute force attack
C) SQL injection
D) Packet sniffing

Security Technologies

21. What is the primary role of a firewall in a network?

A) To filter and regulate network traffic
B) To store critical system logs
C) To develop secure applications
D) To encrypt user credentials

22. What is the primary function of an Intrusion Detection System (IDS)?

A) To encrypt network traffic
B) To detect suspicious activity
C) To optimize database queries
D) To manage user accounts

23. Which encryption algorithm uses the same key for both encryption and decryption?

A) RSA
B) AES
C) ECC
D) DSA

24. What is the main function of a proxy server in a secure network?

A) To encrypt all network traffic
B) To store sensitive data securely
C) To mediate between users and external networks
D) To optimize server performance

25. What is the core function of a Security Information and Event Management (SIEM) system?

A) To develop secure applications
B) To manage user permissions
C) To optimize network performance
D) To collect and analyze security event data

26. What is the purpose of a honeypot in cybersecurity?

A) To store sensitive data
B) To attract and detect malicious activity
C) To encrypt network traffic
D) To optimize server performance

27. What is the purpose of a sandbox in cybersecurity?

A) To isolate and analyze suspicious files
B) To store sensitive data
C) To optimize network traffic
D) To manage user accounts

28. Which of the following is a network security device?

A) Intrusion Prevention System (IPS)
B) Database server
C) Web server
D) File server

29. What is the purpose of a certificate authority (CA)?

A) To monitor network traffic
B) To optimize server performance
C) To manage user accounts
D) To issue and manage digital certificates

30. What is the role of a Web Application Firewall (WAF)?

A) To manage user authentication
B) To protect web applications from attacks
C) To optimize server storage
D) To monitor network bandwidth

Security Practices and Management

31. What is the purpose of a security policy?

A) To increase network speed
B) To define rules for protecting an organization's assets
C) To optimize database performance
D) To store user data

32. What is the purpose of a security audit?

A) To increase server storage
B) To evaluate and improve security measures
C) To optimize database performance
D) To develop new software

33. What is the purpose of a penetration test?

A) To develop new software
B) To identify vulnerabilities in a system
C) To optimize network performance
D) To manage user permissions

34. What is the primary role of a Security Operations Center (SOC)?

A) To detect and respond to security events
B) To develop cybersecurity software
C) To enhance network speed
D) To manage user authentication

35. What is the purpose of a penetration test?

A) To develop new software
B) To identify vulnerabilities in a system
C) To optimize network performance
D) To manage user permissions

36. What is the purpose of a security awareness training program?

A) To optimize network performance
B) To educate employees about cybersecurity best practices
C) To develop new software
D) To manage user accounts

37. What does patch management involve?

A) Updating software to fix vulnerabilities
B) Encrypting network traffic
C) Monitoring user activity
D) Backing up data

38. What is the purpose of a vulnerability assessment?

A) To optimize network performance
B) To manage user accounts
C) To encrypt sensitive data
D) To identify weaknesses in a system

39. Which of the following is a common type of insider threat?

A) DDoS attack
B) Data theft by employees
C) SQL injection
D) Packet sniffing

40. What is the purpose of incident response planning?

A) To optimize server performance
B) To develop new applications
C) To prepare for and mitigate security breaches
D) To increase network bandwidth

Latest Cybersecurity Features and Updates

41. What is the core principle of Zero Trust Architecture, a recent cybersecurity trend?

A) Trust all users by default
B) Encrypt all data automatically
C) Verify every user and device continuously
D) Allow unrestricted network access

42. Which recent technology is increasingly used for real-time threat detection?

A) Artificial Intelligence (AI)
B) Manual log analysis
C) Basic antivirus software
D) Static rule-based systems

43. What is the purpose of post-quantum cryptography, a developing field in cybersecurity?

A) To increase network speed
B) To protect against quantum computer attacks
C) To simplify user authentication
D) To optimize database queries

44. Which of the following is a feature of modern Endpoint Detection and Response (EDR) systems?

A) Blocking all network traffic
B) Encrypting all data by default
C) Managing user accounts
D) Continuous monitoring and automated response

45. What is a key benefit of Secure Access Service Edge (SASE), a recent cybersecurity framework?

A) Integrates network security with cloud-based services
B) Reduces network security controls
C) Stores all data locally
D) Disables cloud access

46. Which recent advancement enhances Security Orchestration, Automation, and Response (SOAR) platforms?

A) Manual threat analysis
B) Automated incident response workflows
C) Disabling firewalls
D) Reducing encryption strength

47. What is the purpose of Extended Detection and Response (XDR), a newer cybersecurity solution?

A) To manage user accounts
B) To optimize network performance
C) To integrate security data across multiple systems
D) To store sensitive data

48. Which of the following is a recent trend in cloud security?

A) Cloud-native security platforms
B) Disabling cloud access
C) Manual log monitoring
D) Reducing encryption levels

49. What is the role of AI-driven User and Entity Behavior Analytics (UEBA) in modern cybersecurity?

A) To optimize database performance
B) To detect anomalies in user behavior
C) To store sensitive data
D) To manage network bandwidth

50. Which of the following is a feature of modern passwordless authentication systems?

A) Requiring longer passwords
B) Using static credentials
C) Relying solely on usernames
D) Using biometrics or secure tokens

Network Security

51. Which protocol is commonly used to secure web communication?

A) FTP
B) HTTP
C) HTTPS
D) SMTP

52. What is a VPN used for?

A) To block all network traffic
B) To create a secure connection over the internet
C) To increase server storage
D) To monitor user activity

53. Which of the following is a common network security protocol?

A) TLS
B) SMTP
C) FTP
D) HTTP

54. Which of the following is a common type of network attack?

A) Data encryption
B) Packet sniffing
C) User authentication
D) Database backup

55. What is the purpose of network segmentation in cybersecurity?

A) To increase network speed
B) To store sensitive data
C) To isolate network sections for security
D) To optimize database queries

56. What is the role of a Network Intrusion Detection System (NIDS)?

A) To monitor network traffic for suspicious activity
B) To encrypt sensitive data
C) To manage user accounts
D) To optimize server performance

57. What is the purpose of a DMZ (Demilitarized Zone) in network security?

A) To store sensitive data
B) To provide a buffer zone for public-facing services
C) To increase network bandwidth
D) To manage user authentication

58. Which of the following is a benefit of using VLANs in network security?

A) Increasing server storage
B) Encrypting all network traffic
C) Monitoring user activity
D) Isolating network traffic for security

59. What is the purpose of IPsec in network security?

A) To provide secure communication over IP networks
B) To manage user accounts
C) To optimize database performance
D) To monitor server performance

60. What is the role of a packet filter in network security?

A) To encrypt sensitive data
B) To store network logs
C) To control network traffic based on rules
D) To optimize network bandwidth

Data Protection and Compliance

61. What is the purpose of a data loss prevention (DLP) system?

A) To optimize network performance
B) To manage user accounts
C) To encrypt network traffic
D) To prevent unauthorized data access and leakage

62. Which of the following is a common standard for information security management?

A) HTTP
B) FTP
C) ISO 27001
D) SMTP

63. Which of the following is a common method to prevent SQL injection attacks?

A) Increasing server bandwidth
B) Using parameterized queries
C) Disabling firewalls
D) Reducing encryption strength

64. Which of the following is a common method to protect against cross-site scripting (XSS) attacks?

A) Increasing server bandwidth
B) Input validation and sanitization
C) Disabling encryption
D) Reducing firewall rules

65. What is the purpose of the General Data Protection Regulation (GDPR)?

A) To optimize network performance
B) To protect personal data and privacy
C) To manage user accounts
D) To increase server storage

66. What is the purpose of data encryption at rest?

A) To protect stored data from unauthorized access
B) To increase data transmission speed
C) To monitor network traffic
D) To optimize database queries

67. Which of the following is a key requirement of the Payment Card Industry Data Security Standard (PCI DSS)?

A) Optimizing network bandwidth
B) Disabling encryption
C) Protecting cardholder data
D) Increasing server storage

68. What is the purpose of a data retention policy?

A) To increase data storage capacity
B) To define how long data should be stored
C) To monitor network traffic
D) To optimize server performance

69. What is the role of a Data Protection Officer (DPO) under GDPR?

A) To oversee data protection compliance
B) To manage network firewalls
C) To optimize database performance
D) To develop new software

70. What is the purpose of data anonymization in cybersecurity?

A) To increase data storage
B) To monitor user activity
C) To remove identifiable information from data
D) To optimize network bandwidth

71. What is the primary purpose of hashing in cybersecurity?

A) To encrypt data for transmission
B) To convert data into a fixed-length value
C) To compress files
D) To store data permanently

72. Which hashing algorithm is currently considered secure?

A) MD5
B) SHA-1
C) SHA-256
D) DES

73. What is a vulnerability in cybersecurity?

A) A weakness that can be exploited
B) A backup mechanism
C) A security policy
D) An encryption algorithm

74. What does patching primarily involve?

A) Monitoring logs
B) Backing up data
C) Encrypting systems
D) Fixing known vulnerabilities

75. What is social engineering in cybersecurity?

A) Securing networks
B) Manipulating people to reveal information
C) Writing secure code
D) Encrypting databases

76. Which attack involves inserting malicious queries into a database?

A) SQL Injection
B) Phishing
C) DDoS
D) Spoofing

77. What does XSS stand for?

A) Extended Secure System
B) Cross Server Security
C) Cross-Site Scripting
D) External Security Script

78. What is spoofing?

A) Encrypting traffic
B) Pretending to be a trusted entity
C) Blocking access
D) Monitoring systems

79. What is a botnet?

A) A group of infected devices controlled remotely
B) A firewall system
C) A type of encryption
D) A data backup system

80. What does endpoint security focus on?

A) Securing databases
B) Securing cloud storage
C) Securing networks
D) Securing user devices

81. What is the primary goal of ransomware?

A) Data backup
B) Monitoring systems
C) Extorting money
D) Improving performance

82. What is the role of antivirus software?

A) Detect and remove malware
B) Increase speed
C) Backup data
D) Encrypt files

83. What is cybersecurity risk?

A) Encryption process
B) Potential for loss or damage
C) Firewall configuration
D) Network monitoring

84. What is threat modeling?

A) Writing secure code
B) Encrypting systems
C) Identifying potential threats
D) Monitoring logs

85. What is authentication?

A) Verifying identity
B) Granting access
C) Encrypting data
D) Monitoring traffic

86. What is authorization in cybersecurity?

A) Verifying identity
B) Encrypting data
C) Monitoring logs
D) Granting access permissions

87. What is a security breach?

A) System update
B) Unauthorized access to data
C) Backup process
D) Network optimization

88. What is an encryption key?

A) A secret value used for encryption/decryption
B) A network protocol
C) A firewall rule
D) A backup file

89. What is malware?

A) Secure software
B) Backup software
C) Malicious software
D) Network tool

90. Which malware replicates itself across systems?

A) Trojan
B) Worm
C) Spyware
D) Adware

91. What is spyware designed to do?

A) Encrypt files
B) Destroy data
C) Improve performance
D) Monitor user activity secretly

92. What is a firewall rule?

A) A condition to allow or block traffic
B) A type of malware
C) Encryption key
D) Backup setting

93. What is two-factor authentication (2FA)?

A) Using two passwords
B) Encrypting twice
C) Using two verification methods
D) Using two firewalls

94. What is a digital certificate?

A) Backup file
B) Electronic document verifying identity
C) Encryption key
D) Security patch

95. What is HTTPS?

A) Secure version of HTTP
B) File transfer protocol
C) Email protocol
D) Network attack

96. What is data integrity?

A) Data storage
B) Data encryption
C) Data transmission
D) Ensuring data is accurate and unchanged

97. What is data availability?

A) Encrypting data
B) Ensuring data is accessible when needed
C) Backing up data
D) Monitoring data

98. What is a security incident?

A) An event that compromises security
B) System update
C) Backup activity
D) Performance tuning

99. What is penetration testing?

A) Monitoring traffic
B) Encrypting systems
C) Simulating attacks to find vulnerabilities
D) Backing up systems

100. What is cyber hygiene?

A) Cleaning hardware
B) Maintaining security best practices
C) Installing software
D) Monitoring performance

101. What is the main goal of a security audit?

A) Increase system speed
B) Backup data
C) Evaluate security controls
D) Encrypt files

102. What is the function of a VPN?

A) Increase bandwidth
B) Secure internet communication
C) Store data
D) Monitor logs

103. Which type of attack involves overwhelming a system with traffic?

A) DDoS
B) Phishing
C) XSS
D) Spoofing

104. What is a zero-day vulnerability?

A) A fixed bug
B) A tested patch
C) A known issue
D) A vulnerability with no patch available

105. What is the purpose of a honeypot?

A) Encrypt data
B) Backup systems
C) Attract attackers for monitoring
D) Increase speed

106. What is role-based access control (RBAC)?

A) Access based on passwords
B) Access based on user roles
C) Access based on location
D) Access based on time

107. What is phishing?

A) Fraudulent attempt to steal information
B) Network monitoring
C) Data encryption
D) Backup process

108. What is a strong password?

A) Short and simple
B) Only letters
C) Same for all accounts
D) Complex with mix of characters

109. What is data backup?

A) Encrypting files
B) Monitoring logs
C) Copying data for recovery
D) Blocking traffic

110. What is multi-factor authentication?

A) Using multiple verification methods
B) Using one password
C) Encrypting twice
D) Monitoring users

111. What is insider threat?

A) External hacker
B) Threat from inside organization
C) Firewall attack
D) Network failure

112. What is least privilege principle?

A) Full access to users
B) No access
C) Minimum necessary access
D) Unlimited access

113. What is encryption at rest?

A) Encrypting network traffic
B) Encrypting emails
C) Encrypting during transfer
D) Encrypting stored data

114. What is brute force attack?

A) Trying many password combinations
B) Injecting SQL
C) Monitoring logs
D) Encrypting data

115. What is SIEM?

A) Encryption tool
B) Security monitoring and analysis system
C) Backup software
D) Network protocol

116. What is an IDS?

A) Backup system
B) Encryption tool
C) Intrusion detection system
D) Network cable

117. What is an IPS?

A) Intrusion prevention system
B) Internet protocol service
C) Internal protection system
D) Input processing system

118. What is data masking?

A) Encrypting data
B) Deleting data
C) Backing up data
D) Hiding sensitive data

119. What is compliance in cybersecurity?

A) Hacking systems
B) Following security regulations
C) Encrypting files
D) Monitoring traffic

120. What is cyber resilience?

A) Preventing all attacks
B) Blocking internet access
C) Ability to recover from cyber attacks
D) Encrypting all data

121. What is the primary purpose of a Web Application Firewall (WAF)?

A) To protect web applications from malicious traffic
B) To increase internet speed
C) To manage employee attendance
D) To encrypt local storage

122. Which type of malware secretly records user activities such as keystrokes?

A) Worm
B) Trojan
C) Spyware
D) Rootkit

123. What is the purpose of role-based access control (RBAC)?

A) To improve internet bandwidth
B) To assign permissions based on user roles
C) To monitor network cables
D) To increase storage capacity

124. Which cybersecurity attack overloads systems with excessive traffic?

A) Phishing
B) Spoofing
C) SQL Injection
D) DDoS Attack

125. What is the purpose of encryption in cybersecurity?

A) To protect data from unauthorized access
B) To increase processor speed
C) To reduce file sizes
D) To optimize databases

126. Which security practice involves regularly reviewing system and user activity logs?

A) Penetration Testing
B) Threat Modeling
C) Security Monitoring
D) Data Compression

127. What is the main objective of vulnerability management?

A) To improve website design
B) To identify and fix security weaknesses
C) To increase internet speed
D) To monitor hardware temperature

128. Which authentication method uses physical traits for identity verification?

A) Biometric Authentication
B) Password Authentication
C) Token Authentication
D) Captcha Verification

129. What is the purpose of cybersecurity awareness training?

A) To increase hardware performance
B) To configure firewalls automatically
C) To replace antivirus software
D) To educate users about security risks and best practices

130. What is cyber threat intelligence?

A) A firewall configuration process
B) A method for compressing files
C) Information used to identify and prevent cyber threats
D) A type of malware

131. What is the primary goal of a prompt injection attack against an AI-powered application?

A) To overload the server with traffic
B) To manipulate the AI into ignoring its intended instructions
C) To encrypt the application's database
D) To scan network ports automatically

132. Which security practice helps organizations understand every software component included in an application?

A) Penetration Testing
B) Threat Hunting
C) Digital Forensics
D) Software Bill of Materials (SBOM)

133. Which authentication technology is increasingly replacing passwords on modern devices?

A) Passkeys
B) CAPTCHA
C) OTP via Email
D) Security Questions

134. Which standard enables passwordless authentication using public-key cryptography?

A) SSL
B) Kerberos
C) FIDO2/WebAuthn
D) SNMPv3

135. What is Shadow AI in an enterprise environment?

A) AI used only by attackers
B) Employees using AI tools without organizational approval
C) Hidden malware inside AI models
D) AI running in offline environments

136. Which security solution continuously identifies exposed internet-facing assets before attackers can exploit them?

A) Attack Surface Management (ASM)
B) RAID Storage
C) DHCP Snooping
D) RAID Mirroring

137. Which cloud security platform combines CSPM, workload protection, and container security into one solution?

A) SIEM
B) VPN Gateway
C) IDS
D) CNAPP

138. Which cybersecurity solution focuses on discovering and protecting sensitive data across cloud services?

A) WAF
B) IPS
C) DSPM (Data Security Posture Management)
D) NAC

139. Which OWASP project specifically focuses on the most critical security risks affecting APIs?

A) OWASP API Security Top 10
B) OWASP Mobile Top 5
C) OWASP Secure Coding Guide
D) OWASP Cryptography Standard

140. An attacker steals a developer's API key stored in a public Git repository. Which security control would have best prevented this incident?

A) Installing antivirus software
B) Using a centralized secrets management solution
C) Increasing firewall rules
D) Disabling HTTPS

141. What is the primary purpose of Identity Threat Detection and Response (ITDR)?

A) To improve Wi-Fi performance
B) To encrypt all network traffic
C) To detect and respond to identity-based attacks
D) To compress security logs

142. Which cybersecurity approach promotes building security into software from the earliest stages of development rather than adding it later?

A) Secure by Design
B) Penetration Testing
C) Network Segmentation
D) Data Compression

143. Which cloud security solution continuously evaluates cloud resources for configuration errors and compliance issues?

A) VPN
B) WAF
C) SOAR
D) CSPM (Cloud Security Posture Management)

144. What is the main purpose of Runtime Application Self-Protection (RASP)?

A) Encrypt cloud storage automatically
B) Detect and block attacks while an application is running
C) Replace antivirus software
D) Manage employee passwords

145. What is a Living-off-the-Land (LotL) attack?

A) An attack that abuses legitimate system tools to avoid detection
B) An attack launched from satellites
C) A denial-of-service attack targeting IoT devices
D) An attack that only affects Linux systems

146. What is the main objective of Purple Teaming?

A) To replace vulnerability assessments
B) To automate software development
C) To manage cloud infrastructure
D) To improve security by combining Red Team and Blue Team efforts

147. Which cybersecurity practice is most effective in reducing software supply chain attacks?

A) Disabling automatic updates
B) Verifying software integrity and third-party dependencies
C) Sharing administrator passwords
D) Disabling endpoint protection

148. An employee receives a realistic AI-generated voice call that imitates the CEO and requests an urgent wire transfer. What type of attack is this?

A) SQL Injection
B) Cross-Site Scripting
C) AI-powered deepfake social engineering
D) DNS Tunneling

149. What is the biggest security concern when organizations deploy autonomous AI agents with access to internal systems?

A) Excessive permissions that could perform unintended actions
B) Reduced internet speed
C) Larger monitor resolution
D) Increased battery consumption

150. What is the primary security goal of the Model Context Protocol (MCP) when integrating AI assistants with external tools?

A) To replace HTTPS with a faster protocol
B) To eliminate the need for authentication
C) To permanently store every AI conversation
D) To provide standardized and controlled access between AI models and external tools or data sources

Advanced Cybersecurity Concepts and Scenarios

151. Which cybersecurity framework is widely used to identify, protect, detect, respond, and recover from cyber threats?

A) ITIL
B) NIST Cybersecurity Framework
C) COBIT
D) Agile

152. Which attack attempts to overwhelm a DNS server with excessive requests?

A) SQL Injection
B) XSS
C) DNS Amplification Attack
D) ARP Spoofing

153. Which technology helps detect malware by analyzing its behavior instead of relying only on signatures?

A) Behavioral Analysis
B) RAID
C) DHCP
D) NAT

154. Which security model assumes no user or device should be trusted automatically?

A) Bell-LaPadula
B) Biba
C) Clark-Wilson
D) Zero Trust

155. Which protocol is commonly used for secure remote administration of Linux servers?

A) Telnet
B) SSH
C) FTP
D) SNMP

156. A security analyst notices repeated failed login attempts from different IP addresses targeting the same account. What attack is most likely occurring?

A) Credential Stuffing
B) ARP Poisoning
C) DNS Tunneling
D) Session Hijacking

157. Which type of malware is designed to remain hidden while providing attackers ongoing access?

A) Worm
B) Adware
C) Rootkit
D) Ransomware

158. Which practice helps reduce the attack surface of a server?

A) Installing unnecessary services
B) Disabling unused ports and services
C) Sharing administrator passwords
D) Allowing anonymous access

159. Which cybersecurity concept ensures business operations continue after a disaster?

A) Business Continuity Planning
B) Packet Filtering
C) VLAN Tagging
D) Data Deduplication

160. Which backup strategy follows the 3-2-1 rule?

A) Three cloud backups only
B) Two copies stored locally
C) One backup on every device
D) Three copies, two media types, one offsite copy

161. What is the main objective of threat hunting?

A) Install antivirus software
B) Proactively search for hidden threats
C) Encrypt all network traffic
D) Replace firewalls

162. Which security solution provides centralized visibility across cloud environments?

A) FTP Server
B) Proxy Cache
C) Cloud Security Posture Management (CSPM)
D) DNS Resolver

163. Which attack targets the software supply chain by compromising trusted vendors?

A) Supply Chain Attack
B) Smurf Attack
C) Birthday Attack
D) Ping Sweep

164. Which security principle limits access based on job responsibilities?

A) Open Access
B) Shared Privileges
C) Anonymous Authentication
D) Role-Based Access Control (RBAC)

165. What is the primary purpose of threat intelligence?

A) Gather and analyze information about cyber threats
B) Increase internet bandwidth
C) Replace antivirus software
D) Compress network traffic

166. Which authentication standard enables users to log in once and access multiple applications?

A) SMTP
B) Single Sign-On (SSO)
C) FTP
D) RAID

167. Which technology protects API endpoints by enforcing authentication, rate limiting, and monitoring?

A) DHCP
B) NAT
C) VPN
D) API Gateway

168. Which metric measures how long it takes to detect a security incident?

A) MTTR
B) SLA
C) MTTD
D) KPI

169. Which metric measures the average time required to recover from an incident?

A) MTTR
B) MTTD
C) CVSS
D) DNS

170. Which framework provides a common language for describing cyber adversary tactics and techniques?

A) Scrum
B) PCI DSS
C) ITIL
D) MITRE ATT&CK

171. Which security practice verifies the integrity of downloaded software?

A) Port Scanning
B) Checksum Verification
C) VLAN Tagging
D) IP Routing

172. Which security model separates duties among employees to reduce fraud?

A) Separation of Duties
B) Failover Clustering
C) Port Mirroring
D) Packet Switching

173. Which cloud security model states that both the cloud provider and customer share security responsibilities?

A) Public Trust Model
B) Zero Ownership Model
C) Distributed Trust Model
D) Shared Responsibility Model

174. Which vulnerability scoring system is widely used to measure the severity of security vulnerabilities?

A) CVE
B) CWE
C) CVSS
D) DNSSEC

175. Which security testing approach evaluates an organization's ability to detect and respond to real-world attacks?

A) Vulnerability Scanning
B) Purple Team Exercise
C) Data Classification
D) Log Rotation

176. Which type of penetration test is performed without prior knowledge of the target environment?

A) Black Box Testing
B) White Box Testing
C) Gray Box Testing
D) Static Testing

177. Which security technology isolates suspicious files to safely analyze their behavior?

A) VPN
B) Reverse Proxy
C) Sandbox
D) Load Balancer

178. Which attack manipulates AI or machine learning models by supplying malicious input data?

A) SQL Injection
B) Adversarial Attack
C) Buffer Overflow
D) ARP Spoofing

179. Which protocol secures network management communications by supporting encryption and authentication?

A) SNMPv1
B) HTTP
C) FTP
D) SNMPv3

180. Which process ensures that security patches are tested and deployed in an organized manner?

A) Patch Management
B) Tokenization
C) Load Balancing
D) Data Mining

181. A company receives an email pretending to be from its CEO asking for an urgent bank transfer. What type of attack is this?

A) Whaling
B) Business Email Compromise (BEC)
C) Watering Hole Attack
D) Evil Twin Attack

182. Which framework is commonly used for managing information security risks?

A) Scrum
B) Kanban
C) DevOps
D) ISO/IEC 27001

183. Which tool is primarily used to automate incident response and security workflows?

A) SIEM
B) IDS
C) SOAR
D) VPN

184. Which technology stores cryptographic keys in tamper-resistant hardware?

A) Hardware Security Module (HSM)
B) Proxy Server
C) DHCP Server
D) DNS Server

185. Which type of encryption allows computations to be performed directly on encrypted data?

A) Symmetric Encryption
B) Homomorphic Encryption
C) Stream Cipher
D) Hashing

186. Which attack tricks users into connecting to a fake Wi-Fi access point?

A) DNS Poisoning
B) Session Fixation
C) SYN Flood
D) Evil Twin Attack

187. Which type of cyber insurance covers costs related to data breaches and cyber incidents?

A) Cyber Liability Insurance
B) Vehicle Insurance
C) Property Insurance
D) Travel Insurance

188. Which technology helps prevent unauthorized USB devices from accessing corporate systems?

A) RAID
B) NAT
C) Device Control
D) DHCP

189. Which cybersecurity concept focuses on verifying the identity of users before granting access?

A) Authorization
B) Authentication
C) Accounting
D) Auditing

190. Which cloud security solution monitors workloads, containers, and virtual machines for threats?

A) DNSSEC
B) SMTP
C) FTP
D) Cloud Workload Protection Platform (CWPP)

191. Which practice helps organizations discover and classify sensitive information across systems?

A) Data Discovery
B) Load Testing
C) Port Forwarding
D) RAID Configuration

192. Which security technique prevents sensitive information from leaving an organization's network?

A) MFA
B) IAM
C) Data Loss Prevention (DLP)
D) VPN

193. Which technology allows applications to verify users without storing passwords directly?

A) RAID
B) FTP
C) SMTP
D) OAuth 2.0

194. Which type of attack secretly redirects users to malicious websites by altering DNS responses?

A) SQL Injection
B) DNS Spoofing
C) Clickjacking
D) Password Spraying

195. Which activity involves continuously assessing systems for known vulnerabilities?

A) Vulnerability Management
B) Digital Forensics
C) Penetration Reporting
D) Packet Routing

196. Which AI-based security capability automatically detects unusual user behavior?

A) RAID Monitoring
B) Static Routing
C) User and Entity Behavior Analytics (UEBA)
D) VLAN Trunking

197. Which type of cybersecurity exercise simulates real attacks to test detection and response capabilities?

A) Unit Testing
B) Regression Testing
C) Performance Testing
D) Red Team Exercise

198. Which regulation focuses on protecting the privacy and personal data of individuals in the European Union?

A) HIPAA
B) GDPR
C) PCI DSS
D) SOX

199. Which security principle recommends giving users only the permissions necessary to perform their jobs?

A) Principle of Least Privilege
B) Open Access
C) Full Trust
D) Anonymous Access

200. Which emerging technology is increasingly being used to automate threat detection, malware analysis, and incident response?

A) Virtual Reality
B) Blockchain Mining
C) Artificial Intelligence (AI)
D) Optical Character Recognition (OCR)

Your Quiz Result

Right Answers:

Wrong Answers:

Unattempted:

Score: %

Congratulations!
With a % score, you have unlocked up to 50% discount on all of our self-paced SQL courses.
Click on the Contact button to avail the offer.

You Can Also Check:
1. Top Cybersecurity Interview Questions and Answers
2. Cyber Security Tutorial
3. How to Become an Ethical Hacker
4. Top 10 Cybersecurity Tools For 2026
5. A Guide To Start A Career in Cyber Security
6. Top 10 Career Opportunities in Cyber Security (Updated 2026)

About the Author

Chinmay

Chinmay has worked in cybersecurity for over a decade, handling vulnerability assessments and incident response across sectors. He's seen firsthand how theoretical security policies break down against real attack patterns. He tests techniques in controlled labs before recommending them, writing for professionals who want to understand how attacks actually work.

Enquiry is created successfully

Drop Us a Query

Fields marked * are mandatory

Name

Phone Number