Security Fundamentals Quiz

Q1. The MITRE ATT&CK framework catalogues:

Programming languages Firewall rules Adversary tactics and techniques observed in the real world Encryption standards

Q2. Integrity, as a security property, is directly protected by:

Load balancing Bandwidth limits Disk quotas Checksums, digital signatures and change control

Q3. Which hacker is described as an ethical hacker?

Black Hat Gray Hat Suicide Hacker White Hat

Q4. In the module, the victim normally is not informed during a:

Active attack Backup Patch process Passive attack

Q5. Who is known as a White Hat hacker?

Malicious hacker Ethical hacker Cyberterrorist Hacktivist

Q6. Just-in-time privileged access improves on standing admin rights by:

Removing the need for MFA Reducing licence cost Granting elevation only for a limited, approved window Making passwords longer

Q7. CVSS is used to:

Track exploits for sale Name malware families Encrypt findings Score vulnerability severity in a consistent way

Q8. Ethical hackers perform security assessments with:

Permission of concerned authorities Permission from attackers No authorization Only anonymous permission

Q9. Data classification exists mainly to:

Reduce storage costs Speed up queries Ensure protection effort matches how sensitive the data is Simplify backups

Q10. The main deliverable of a penetration test is:

A prioritised report with evidence and remediation advice Raw scanner output A packet capture A list of tools used

Q11. Who are Hacktivists?

Ethical hackers working for organizations Hackers hired by governments Individuals who promote a political agenda through hacking Hackers who only steal financial information

Q12. The Cyber Kill Chain concept comes from a:

Programming language Database concept File system Military concept

Q13. Which is a detective rather than preventive control?

Log monitoring and alerting Input validation A firewall rule Disk encryption

Q14. Security through obscurity is considered weak because:

Once the secret design is discovered there is no protection left It requires encryption It is expensive It slows the system

Q15. Which statement about automated tools is most accurate?

They assist but cannot replace tester judgement and manual verification They find every vulnerability They remove the need for scope They never produce false positives