1. Which of the following firewalls hides or masquerades the private addresses of network hosts?
a) Reverse proxy firewall
b) Host-based firewall
c) Proxy server
d) Network address translation firewall
e) Network layer firewall
Solution: d) Network address translation firewall

2. Carrying out a multi-phase, long-term, stealthy and advanced operation against a specific target is often referred to as what?
a) Advanced persistent threat
b) Network sniffing
c) Social engineering
d) Script kiddies
e) Rainbow tables
Solution: a) Advanced persistent threat

3. You are configuring access settings to require employees in your organization to authenticate first before accessing certain web pages. Which requirement of information security is addressed through this configuration?
a) Scalability
b) Availability
c) Integrity
d) Confidentiality
Solution: d) Confidentiality

4. What are the objectives of ensuring data integrity? (Choose two correct answers)
a) Data is unaltered during transit
b) Data is not changed by unauthorized entities
c) Data is encrypted while in transit and when stored on disks
d) Access to the data is authenticated
e) Data is available all the time
Solution: a) Data is unaltered during transit
b) Data is not changed by unauthorized entities

5. An organization is experiencing overwhelming visits to a main web server. You are developing a plan to add a couple of more web servers for load balancing and redundancy. Which requirement of information security is addressed by implementing the plan?
a) Scalability
b) Integrity
c) Confidentiality
d) Availability
Solution: d) Availability

6. What of the following are examples of cracking an encrypted password? (Choose four correct answers)
a) Intimidation
b) Brute force attack
c) Network sniffing
d) Rainbow tables
e) Social engineering
f) Spraying
g) Dictionary attack
Solution: b) Brute force attack
d) Rainbow tables
f) Spraying
g) Dictionary attack

7. Improper management of physical access to a resource, such as a file, can lead to what type of security vulnerability?
a) Weaknesses in security practices
b) Race conditions
c) Access control problems
d) Buffer overflow
e) Non-validated input
Solution: c) Access control problems

8. A medical office employee sends emails to patients about their recent visits to the facility. What information would put the privacy of the patients at risk if it was included in the email?
a) Contact information
b) Next appointment
c) Patient records
d) First and last name
Solution: c) Patient records

9. What is the best way to avoid getting spyware on a machine?
a) Install the latest antivirus updates
b) Install the latest web browser updates
c) Install software only from trusted websites
d) Install the latest operating system updates
Solution: c) Install software only from trusted websites

10. You are surfing the Internet using a laptop at a public Wi-Fi cafe. What should you check first before you connect to the public network?
a) That the Bluetooth adapter is disabled
b) If the laptop requires user authentication for file and media sharing
c) That the laptop web browser is operating in private mode
d) If the laptop has a master password set to secure the passwords stored in the password manager
Solution: b) If the laptop requires user authentication for file and media sharing

11. What is the main function of the Cisco Security Incident Response Team?
a) To design next generation routers and switches that are less prone to cyber attacks
b) To design polymorphic malware
c) To ensure company, system and data preservation
d) To provide standards for new encryption techniques
Solution: c) To ensure company, system and data preservation

12. Which of the following firewalls are placed in front of web services to protect, hide, offload and distribute access to web servers?
a) Application layer firewall
b) Proxy server
c) Transport layer firewall
d) Network layer firewall
e) Reverse proxy server
Solution: e) Reverse proxy server

13. Which of the following certifications meets the U.S. Department of Defense Directive 8570.01-M requirements, which is important for anyone looking to work in IT security for the federal government?
a) EC Council Certified Ethical Hacker
b) Microsoft Technology Associate Security Fundamentals
c) ISACA CSX Cybersecurity Fundamentals
d) CompTIA Security+
e) ISC2 Certified Information Systems Security Professional
f) Palo Alto Networks Certified Cybersecurity Associate
Solution: d) CompTIA Security+

14. One of your colleagues has lost her identification badge. She is in a hurry to get to a meeting and does not have time to visit Human Resources to get a temporary badge. You lend her your identification badge until she can obtain a replacement. Is this behavior ethical or unethical?
a) Ethical
b) Unethical
Solution: b) Unethical

15. Which of the following certifications tests your understanding and knowledge in how to look for weaknesses and vulnerabilities in target systems using the same knowledge and tools as a malicious hacker, but in a lawful and legitimate manner?
a) Palo Alto Networks Certified Cybersecurity Associate
b) ISC2 Certified Information Systems Security Professional
c) Microsoft Technology Associate Security Fundamentals
d) CompTIA Security+
e) ISACA CSX Cybersecurity Fundamentals
f) EC Council Certified Ethical Hacker
Solution: f) EC Council Certified Ethical Hacker

16. What is the main purpose of cyberwarfare?
a) To develop advanced network devices
b) To gain advantage over adversaries
c) To protect cloud-based data centers
d) To simulate possible war scenarios among nations
Solution: b) To gain advantage over adversaries

17. What vulnerability occurs when the output of an event depends on ordered or timed outputs?
a) Weaknesses in security practices
b) Non-validated input
c) Race conditions
d) Buffer overflow
e) Access control problems
Solution: c) Race conditions

18. What do you call the vulnerabilities discovered by Google security researchers that affect almost all CPUs released since 1995? (Select two correct answers)
a) Shell shock
b) WannaCry
c) NotPetva
d) Spectre
e) Meltdown
Solution: d) Spectre
e) Meltdown

19. If developers attempt to create their own security algorithms, it will likely introduce what type of vulnerabilities?
a) Buffer overflow
b) Race conditions
c) Weaknesses in security practices
d) Non-validated input
e) Access control problems
Solution: c) Weaknesses in security practices

20. Which technology creates a security token that allows a user to log in to a desired web application using credentials from a social media website?
a) Open authorization
b) VPN service
c) Password manager
d) In-private browsing mode
Solution: a) Open authorization

21. Which of the following security implementations use biometrics? (Choose two correct answers)
a) Fingerprint
b) Phone
c) Credit card
d) Voice recognition
e) Fob
Solution: a) Fingerprint
d) Voice recognition

22. Which of the following firewalls filters traffic based on source and destination IP addresses?
a) Network layer firewall
b) Proxy server
c) Application layer firewall
d) Transport layer firewall
e) Network address translation firewall
Solution: a) Network layer firewall

23. Which of the following firewalls filters web content requests such as URLs and domain names?
a) Application layer firewall
b) Proxy server
c) Reverse proxy server
d) Network layer firewall
e) Network address translation firewall
Solution: a) Application layer firewall

24. A port scan returns a ‘dropped’ response. What does this mean?
a) A service is listening on the port
b) Connections to the port will be denied
c) There was no reply from the host
Solution: c) There was no reply from the host

25. During a meeting with the Marketing department, a representative from IT discusses features of an upcoming product that will be released next year. Is this employee’s behavior ethical or unethical?
a) Ethical
b) Unethical
Solution: b) Unethical

26. Which of the following is an entry-level certification for newcomers who are preparing to start their career in cybersecurity?
a) CompTIA Security+
b) Microsoft Technology Associate Security Fundamentals
c) ISC2 Certified Information Systems Security Professional
d) ISACA CSX Cybersecurity Fundamentals
e) EC Council Certified Ethical Hacker
f) Palo Alto Networks Certified Cybersecurity Associate
Solution: b) Microsoft Technology Associate Security Fundamentals

27. ‘Cybersecurity certifications are a way for you to verify your skills and knowledge and can also boost your career.’ Is this statement true or false?
a) True
b) False
Solution: a) True

28. When describing malware, what is a difference between a virus and a worm?
a) A virus focuses on gaining privileged access to a device, whereas a worm does not.
b) A virus replicates itself by attaching to another file, whereas a worm can replicate itself independently.
c) A virus can be used to launch a DoS attack (but not a DDoS), but a worm can be used to launch both DoS and DDoS attacks.
d) A virus can be used to deliver advertisements without user consent, whereas a worm cannot.
Solution: b) A virus replicates itself by attaching to another file, whereas a worm can replicate itself independently.

29. An employee is laid off after fifteen years with the same organization. The employee is then hired by another organization within a week. In the new organization, the employee shares documents and ideas for products that the employee proposed at the original organization. Is the employee’s behavior ethical or unethical?
a) Ethical
b) Unethical
Solution: b) Unethical

30. Which of the following firewalls filters traffic based on the user, device, role, application type and threat profile?
a) Context aware application firewall
b) Host-based firewall
c) Network address translation firewall
d) Network layer firewall
e) Application layer firewall
Solution: a) Context aware application firewall

31. What names are given to a database where all cryptocurrency transactions are recorded? (Select two correct answers)
a) Blockchain
b) Table
c) Ledger
d) Spreadsheet
Solution: a) Blockchain
c) Ledger

32. Which of the following items are states of data? (Choose three correct answers)
a) Storage
b) Text
c) ASCII
d) Transmission
e) Binary
f) Processing
Solution: a) Storage
d) Transmission
f) Processing

33. ‘Internet-based cameras and gaming gear are not subject to security breaches.’
Is this statement true or false?
a) True
b) False
Solution: b) False

34. What vulnerability occurs when data is written beyond the memory areas allocated to an application?
a) Buffer overflow
b) Access control problems
c) Race conditions
d) Weaknesses in security practices
e) Non-validated input
Solution: a) Buffer overflow

35. An organization’s IT department reports that their web server is receiving an abnormally high number of web page requests from different locations simultaneously. What type of security attack is occurring?
a) Phishing
b) Adware
c) Social engineering
d) DDoS
e) Spyware
Solution: d) DDoS

36. Which of the following are commonly used port scanning applications? (Select two correct answers)
a) Zenmap
b) Port number
c) Sequence number
d) Nmap
Solution: a) Zenmap
d) Nmap

37. What action will an IDS take upon detection of malicious traffic?
a) Block or deny all traffic
b) Create a network alert and log the detection
c) Drop only packets identified as malicious
d) Reroute malicious traffic to a honeypot
Solution: b) Create a network alert and log the detection

38. Which of the following statements best describes cybersecurity?
a) It is the name of a comprehensive security application for end users to protect workstations from being attacked
b) It is a standard-based model for developing firewall technologies to fight against cybercrime
c) It is a framework for security policy development
d) It is an ongoing effort to protect Internet-connected systems and the data associated with those systems from unauthorized use or harm
Solution: d) It is an ongoing effort to protect Internet-connected systems and the data associated with those systems from unauthorized use or harm

39. ‘After a data breach, it’s important to educate employees, partners and customers on how to prevent future breaches.’ Is this statement true or false?
a) True
b) False
Solution: a) True

40. An employee points out a design flaw in a new product to the department manager. Is this employee’s behavior ethical or unethical?
a) Ethical
b) Unethical
Solution: a) Ethical

41. ‘Data coming into a program should be sanitized, as it could have malicious content, designed to force the program to behave in an unintended way.’ This statement describes what security vulnerability?
a) Weaknesses in security practices
b) Access control problems
c) Buffer overflow
d) Non-validated input
e) Race conditions
Solution: d) Non-validated input

42. Which of the following are examples of on-path attacks? (Choose two correct answers)
a) SEO poisoning
b) Man-in-the-Mobile
c) Ransomware
d) DDoS
e) Man-in-the-Middle
f) Worms
Solution: b) Man-in-the-Mobile
e) Man-in-the-Middle

43. Which of the following firewalls filters traffic based on application, program or service?
a) Context aware application firewall
b) Proxy server
c) Application layer firewall
d) Host-based firewall
e) Network layer firewall
Solution: c) Application layer firewall

44. A port scan returns a ‘closed’ response. What does this mean?
a) There was no reply from the host
b) A service is listening on the port
c) Connections to the port will be denied
Solution: c) Connections to the port will be denied

45. ‘Cryptocurrency transactions are digital.’ Is this statement true or false?
a) True
b) False
Solution: a) True

46. What do you call a digital asset designed to work as a medium of exchange that uses strong encryption to secure a financial transaction?
a) Apple Pay
b) Google Pay
c) Near Field Communications
d) Cryptocurrency
Solution: d) Cryptocurrency

47. Which of the following tools used for incident detection can be used to detect anomalous behavior, command and control traffic, and detect infected hosts? (Choose two correct answers)
a) Intrusion detection system
b) Reverse proxy server
c) NetFlow
d) Nmap
e) Honeypot
Solution: a) Intrusion detection system
c) NetFlow

48. What name is given to a group of bots, connected through the Internet, with the ability to be controlled by a malicious individual or group?
a) Hacker network
b) Crime syndicate
c) Zombie
d) Botnet
Solution: d) Botnet

49. What is the best approach for preventing a compromised IoT device from maliciously accessing data and devices on a local network?
a) Install a software firewall on every network device
b) Place all IoT devices that have access to the Internet on an isolated network
c) Disconnect all IoT devices from the Internet
d) Set the security settings of workstation web browsers to a higher level
Solution: b) Place all IoT devices that have access to the Internet on an isolated network

50. What name is given to the emerging threat that hides on a computer or mobile device and uses that machine’s resources to mine cryptocurrencies?
a) Phishing
b) Bluejacking
c) Cryptoransomware
d) Cryptojacking
Solution: d) Cryptojacking

51. A port scan returns an ‘open’ response. What does this mean?
a) A service is listening on the port
b) Connections to the port will be denied
c) There was no reply from the host
Solution: a) A service is listening on the port

52. An employee is at a restaurant with friends and tells them about an exciting new video game that is under development at the organization they work for. Is this employee’s behavior ethical or unethical?
a) Ethical
b) Unethical
Solution: b) Unethical

53. ‘An advanced persistent threat (APT) is usually well funded.’ Is this statement true or false?
a) True
b) False
Solution: a) True

54. In networking, what name is given to the identifier at both ends of a transmission to ensure that the right data is passed to the correct application?
a) IP address
b) Port number
c) MAC address
d) Sequence number
Solution: b) Port number

55. ‘An employee does something as an organization representative with the knowledge of that organization and this action is deemed illegal. The organization is legally responsible for this action.’ Is this statement true or false?
a) True
b) False
Solution: a) True

56. What tool is used to lure an attacker so that an administrator can capture, log and analyze the behavior of the attack?
a) NetFlow
b) Honeypot
c) IDS
d) Nmap
Solution: b) Honeypot
Explanation: Administrators can use a tool called a honeypot to lure an attacker so that their behavior can be analyzed.

57. ‘A data breach does not impact the reputation of an organization.’ Is this statement true or false?
a) True
b) False
Solution: b) False

58. Which of the following certifications is aimed at high school and early college students, as well as anyone interested in a career change?
a) CompTIA Security+
b) Microsoft Technology Associate Security Fundamentals
c) ISACA CSX Cybersecurity Fundamentals
d) ISC2 Certified Information Systems Security Professional
e) EC Council Certified Ethical Hacker
f) Palo Alto Networks Certified Cybersecurity Associate
Solution: b) Microsoft Technology Associate Security Fundamentals

59. Which of the following firewalls filters traffic based on source and destination data ports and filtering based on connection states?
a) Network address translation firewall
b) Network layer firewall
c) Transport layer firewall
d) Application layer firewall
e) Host-based firewall
Solution: c) Transport layer firewall

60. Which of the following are categories of security measures or controls? (Choose three correct answers)
a) Firewalls
b) Guards
c) Camera
d) Policy and procedure
e) Technology
f) Awareness, training and education
Solution: a) Firewalls
d) Policy and procedure
f) Awareness, training and education

61. ‘A botnet can have tens of thousands of bots, or even hundreds of thousands.’ Is this statement true or false?
a) True
b) False
Solution: a) True

62. For what purpose would a network administrator use the Nmap tool?
a) To protect the private IP addresses of internal hosts
b) To identify specific network anomalies
c) To detect and identify open ports
d) To collect and analyze security alerts and logs
Solution: c) To detect and identify open ports

63. Which of the following certifications does not expire or require periodic recertification and is geared towards post-secondary graduates and those interested in a career change?
a) EC Council Certified Ethical Hacker
b) ISACA CSX Cybersecurity Fundamentals
c) CompTIA Security+
d) Palo Alto Networks Certified Cybersecurity Associate
e) ISC2 Certified Information Systems Security Professional
f) Microsoft Technology Associate Security Fundamentals
Solution: e) ISC2 Certified Information Systems Security Professional

64. What type of attack uses zombies?
a) Spear phishing
b) Trojan horse
c) DDoS
d) SEO poisoning
Solution: c) DDoS
Explanation: A Distributed DoS (DDoS) attack is similar to a DoS attack but originates from multiple, coordinated sources. For example: An attacker builds a network (botnet) of infected hosts called zombies, which are controlled by handler systems. The zombie computers will constantly scan and infect more hosts, creating more and more zombies. When ready, the hacker will instruct the handler systems to make the botnet of zombies carry out a DDoS attack.

65. What is the purpose of a backdoor?
a) To enable software vendors to update software
b) For government access
c) To gain unauthorized access to a system without normal authentication procedures
d) To allow developers to debug software
Solution: c) To gain unauthorized access to a system without normal authentication procedures

66. Which of the following firewalls filters ports and system service calls on a single computer operating system?
a) Network address translation firewall
b) Transport layer firewall
c) Host-based firewall
d) Network layer firewall
e) Application layer firewall
Solution: c) Host-based firewall

67. What type of attack disrupts services by overwhelming network devices with bogus traffic?
a) DDoS
b) Zero-day
c) Brute force
d) Port scans
Solution: a) DDoS
Explanation: DDoS, or distributed denial of service, attacks are used to disrupt service by overwhelming network devices with bogus traffic.

68. ‘Cryptocurrencies are handled on a centralized exchange.’ Is this statement true or false?
a) True
b) False
Solution: b) False

69. Several @Apollo employees have reported that the network access is slow. After investigation, the network administrator has learned that one employee downloaded a third-party scanning program for the printer. What type of malware might have been introduced that is causing slow performance of the network?
a) Spam
b) Phishing
c) Worm
d) Virus
Solution: c) Worm
Explanation: Worms are malicious code that replicates by independently exploiting vulnerabilities in networks. Worms usually slow down networks. Whereas a virus requires a host program to run, worms can run by themselves. Other than the initial infection, worms no longer require user participation. After a worm affects a host, it is able to spread very quickly over the network. Worms share similar patterns. They all have an enabling vulnerability, a way to propagate themselves, and they all contain a payload.

70. What is an example of cyber kill chain?
Solution: a planned process of cyber attack

71. An organization’s process of identifying and assessing risk with the goal of reducing these threats to an acceptable level is known as what?
a) Business continuity
b) Disaster recovery
c) Risk management
d) Vulnerability scanning
Solution: c) Risk management

72. An employee is laid off after fifteen years with the same organization. The employee is then hired by another organization within a week. In the new organization, the employee shares documents and ideas for products that the employee proposed at the original organization. Is the employee’s behavior ethical or unethical?
a) Ethical
b) Unethical
Solution: b) Unethical

73. Which stage of the kill chain used by attackers focuses on the identification and selection of targets?
a) delivery
b) exploitation
c) weaponization
d) reconnaissance
Solution: d) reconnaissance
Explanation: It is the first stage, reconnaissance, of the the kill chain that focuses on the identification and selection of targets.

74. An employee does something as a company representative with the knowledge of that company and this action is deemed illegal. The company would be legally responsible for this action. Is this statement true or false?
a) True
b) False
Solution: a) True

75. Which term describes the private browser mode for Google Chrome?
a) Private tab
b) Private browsing
c) Incognito
d) InPrivate
Solution: c) Incognito

76. What type of infiltration method allows attackers to quietly capture two-step verification SMS messages sent to users in a Man-in-the-Mobile (MITMO) attack?
a) Pretexting
b) Botnet
c) DoS
d) On-Path attack
Solution: d) On-Path attack