Download CE0584 Cybersecurity Exam and more Exams Technology in PDF only on Docsity!
- Which term describes the process of transforming plaintext into an unreadable format to ensure data confidentiality? A) Decryption B) Encryption C) Hashing D) Authentication Answer: B Explanation: Encryption converts plaintext into ciphertext to protect data confidentiality, making it unreadable without the decryption key.
- What does the CIA triad in cybersecurity stand for? A) Confidentiality, Integrity, Availability B) Compatibility, Integrity, Accuracy C) Confidentiality, Identity, Authentication D) Control, Integrity, Authentication Answer: A
Explanation: The CIA triad is a fundamental model in cybersecurity representing Confidentiality, Integrity, and Availability, which are core principles for securing information.
- Which of the following is a primary function of a firewall? A) Detect malware B) Prevent unauthorized network access C) Encrypt data packets D) Manage user passwords Answer: B Explanation: Firewalls monitor and control incoming and outgoing network traffic based on security rules, primarily preventing unauthorized access.
- Which cybersecurity principle ensures that data remains unaltered during storage or transmission? A) Confidentiality B) Integrity C) Availability
B) Developing encryption algorithms C) Configuring firewalls for optimal performance D) Conducting user training sessions Answer: A Explanation: Threat modeling involves identifying potential threats and vulnerabilities to prioritize security measures and mitigate risks effectively.
- Which network security device is primarily used to monitor network traffic for suspicious activity and potential threats? A) Router B) Intrusion Detection System (IDS) C) Switch D) Load balancer Answer: B Explanation: IDS monitors network traffic to detect malicious activities or policy violations, enabling timely response to threats.
- Which cryptographic technique uses two keys—public and private—for secure communication? A) Symmetric encryption B) Hashing C) Asymmetric encryption D) Steganography Answer: C Explanation: Asymmetric encryption employs a pair of keys— public for encryption and private for decryption—enhancing secure communications.
- What is the primary purpose of a digital signature? A) Ensuring data confidentiality B) Verifying the authenticity and integrity of a message C) Encrypting email content D) Generating random numbers Answer: B
D) Man-in-the-middle attack Answer: B Explanation: Phishing uses deceptive emails or websites to lure individuals into providing confidential data such as passwords or credit card numbers.
- Which process involves identifying and fixing security vulnerabilities in a system before they can be exploited? A) Penetration testing B) Vulnerability assessment C) Risk management D) Security auditing Answer: B Explanation: Vulnerability assessment systematically scans systems to identify security weaknesses, allowing organizations to remediate them proactively.
- Which regulation mandates specific cybersecurity controls for protecting personal health information in the United States?
A) GDPR
B) HIPAA
C) PCI DSS
D) SOX
Answer: B Explanation: HIPAA (Health Insurance Portability and Accountability Act) sets standards for protecting sensitive health information in the U.S.
- What is the primary goal of cybersecurity governance? A) Implementing hardware security modules B) Ensuring security policies align with organizational goals and compliance C) Developing encryption algorithms D) Managing user passwords Answer: B Explanation: Cybersecurity governance involves establishing policies and procedures to align security efforts with organizational objectives and compliance requirements.
Answer: C Explanation: Regular backups stored off-site ensure that data can be restored in case of hardware failure, cyberattacks, or disasters.
- What is the main purpose of ethical hacking? A) To exploit systems for malicious intent B) To identify vulnerabilities legally and ethically C) To replace traditional security measures D) To develop malware defenses Answer: B Explanation: Ethical hacking involves authorized testing of systems to identify and remediate vulnerabilities before malicious actors can exploit them.
- Which phase in penetration testing involves attempting to exploit identified vulnerabilities? A) Reconnaissance B) Scanning
C) Exploitation D) Reporting Answer: C Explanation: Exploitation is the phase where testers actively attempt to exploit vulnerabilities to assess their impact and severity.
- Which cybersecurity trend involves the use of artificial intelligence to detect and respond to threats? A) Blockchain security B) AI-driven cybersecurity C) Quantum cryptography D) Cloud security Answer: B Explanation: AI-driven cybersecurity uses machine learning algorithms to detect anomalies, predict attacks, and automate responses.
Explanation: VLAN segmentation isolates network segments, limiting the spread of attacks and improving security.
- Which cryptographic protocol is commonly used to secure web communications? A) SSL/TLS B) SSH C) IPsec D) WPA Answer: A Explanation: SSL/TLS protocols encrypt data exchanged between web browsers and servers, ensuring secure online transactions.
- What is the primary function of Public Key Infrastructure (PKI)? A) Managing symmetric keys B) Providing digital certificates and public key management C) Encrypting email messages only
D) Generating random passwords Answer: B Explanation: PKI manages digital certificates and public/private key pairs, enabling secure digital communication and authentication.
- Which type of attack involves overwhelming a network or server with excessive traffic to disrupt services? A) SQL injection B) Phishing C) Denial of Service (DoS) D) Man-in-the-middle Answer: C Explanation: DoS attacks flood resources with traffic, making services unavailable to legitimate users.
- Which vulnerability assessment technique involves simulating cyberattacks to evaluate system defenses? A) Vulnerability scanning
- Which key process involves establishing security policies, standards, and procedures for an organization? A) Risk assessment B) Security governance C) Vulnerability management D) Incident response planning Answer: B Explanation: Security governance involves creating policies and frameworks to direct and control cybersecurity efforts.
- During an incident response, what is the purpose of conducting a root cause analysis? A) To find the origin of the attack B) To encrypt affected data C) To recover data from backups D) To train staff on security policies Answer: A
Explanation: Root cause analysis identifies how and why an incident occurred, guiding remediation and prevention strategies.
- Which of the following is a common indicator of a phishing attack? A) Unexpected email asking for login credentials B) Slow network performance C) Unauthorized physical access D) Malfunctioning hardware Answer: A Explanation: Phishing emails often contain urgent requests for sensitive information or links to fraudulent websites.
- Which security principle involves ensuring authorized users have access to information when needed? A) Confidentiality B) Integrity C) Availability
B) SSL/TLS
C) Diffie-Hellman D) RSA Answer: A Explanation: AES is widely used for encrypting stored data due to its strength and efficiency.
- Which of the following is a type of social engineering attack? A) SQL injection B) Pretexting C) DDoS D) Cross-site scripting Answer: B Explanation: Pretexting involves creating a fabricated scenario to manipulate individuals into revealing confidential information.
- Which protocol is primarily used for securing email communication? A) SMTP B) IMAP C) S/MIME or PGP D) FTP Answer: C Explanation: S/MIME and PGP are protocols used to encrypt and digitally sign emails to ensure confidentiality and authenticity.
- What is the main purpose of a honeypot in cybersecurity? A) To trap and analyze attackers’ activities B) To prevent malware infections C) To encrypt sensitive data D) To backup critical files Answer: A
