EduConceptHub

Start MCQs

Cyber Security

Cyber Security

Introduction

Learn to recognise threats and assess protection strategies across networks, software, applications and data.

Topic-Wise Overview

Cyber Threat Landscape

Security principles, attackers, malware and advanced threats

Social Engineering

Attack lifecycle and manipulation techniques

Cryptography and Privacy

Basic cryptography, confidentiality, integrity and anonymity

System Protection

Web, network, database, mobile and software security

Digital Forensics

Forensics foundations, information warfare and legal considerations

Study Guidance

Start with the core definitions, follow practical examples and check your understanding with independent exercises. Topic-wise MCQs, short questions and step-by-step solutions are planned for this subject.

Explore Other Subjects

Browse Computer Science subjects

Practice MCQs — Set 1 (Questions 1–10)

Choose the best answer, then open the explanation to check your reasoning.

Question 1. What is the main goal of the principle of least privilege?

  1. Grant only the permissions required for a task
  2. Disable access logs
  3. Allow anonymous changes to security settings
  4. Give each user unrestricted administrator access
Show correct answer and explanation

Correct answer: A. Grant only the permissions required for a task

Least privilege limits accounts and applications to necessary access. Restricting privileges reduces the impact of mistakes and compromised credentials.

Question 2. What is multi-factor authentication?

  1. Using the same password twice
  2. Combining evidence from two or more different authentication factor categories
  3. Changing a username every day
  4. Using two passwords as separate factor categories
Show correct answer and explanation

Correct answer: B. Combining evidence from two or more different authentication factor categories

MFA combines factor categories such as knowledge, possession or inherence. Two passwords are both knowledge factors and do not provide two-factor authentication.

Question 3. Which security property detects unauthorized changes to data?

  1. Availability
  2. Confidentiality
  3. Integrity
  4. Anonymity
Show correct answer and explanation

Correct answer: C. Integrity

Integrity concerns whether information remains accurate and unaltered without authorization. Cryptographic hashes and authenticated signatures can help detect changes.

Question 4. What is phishing?

  1. A backup method
  2. A type of disk encryption
  3. A technique for compressing network traffic
  4. Deceptive communication intended to trick people into revealing information or taking unsafe actions
Show correct answer and explanation

Correct answer: D. Deceptive communication intended to trick people into revealing information or taking unsafe actions

Phishing uses impersonation and social manipulation to mislead recipients. Attackers may request credentials, payment or installation of malicious software.

Question 5. What does a cryptographic hash function produce?

  1. A fixed-length digest for supported input data
  2. A permanently secret copy of the input
  3. A guaranteed unique result for all possible inputs
  4. A public/private key pair
Show correct answer and explanation

Correct answer: A. A fixed-length digest for supported input data

A cryptographic hash maps variable-length input to a fixed-size digest. Collisions are mathematically possible, but secure designs make finding useful collisions difficult.

Question 6. Why should passwords be stored using a dedicated password-hashing function?

  1. To make them readable to administrators
  2. To make offline guessing more expensive using salts and computational work
  3. To eliminate the need for HTTPS
  4. To compress user databases
Show correct answer and explanation

Correct answer: B. To make offline guessing more expensive using salts and computational work

Password-hashing functions such as Argon2id incorporate salts and configurable costs. This slows attackers who obtain a password database.

Question 7. What is SQL injection?

  1. An error caused only by weak Wi-Fi
  2. A valid way to optimize all database queries
  3. An attack where untrusted input changes the intended SQL command structure
  4. A procedure for database backups
Show correct answer and explanation

Correct answer: C. An attack where untrusted input changes the intended SQL command structure

SQL injection happens when untrusted data is interpreted as SQL syntax. Parameterized queries separate values from command structure.

Question 8. What is the purpose of TLS in HTTPS?

  1. To guarantee that every page is truthful
  2. To make passwords unnecessary
  3. To remove all software vulnerabilities
  4. To protect the connection against eavesdropping and tampering and authenticate the server
Show correct answer and explanation

Correct answer: D. To protect the connection against eavesdropping and tampering and authenticate the server

TLS secures communication between client and server using encryption and integrity protection. It does not by itself prove the application is free of security flaws.

Question 9. What is a software security patch?

  1. A correction addressing a vulnerability or defect
  2. A file format for images
  3. A substitute for access control
  4. A certificate that never expires
Show correct answer and explanation

Correct answer: A. A correction addressing a vulnerability or defect

Security patches modify software to address known weaknesses. Timely deployment lowers exposure to vulnerabilities for which attacks may exist.

Question 10. Why is a tested offline or isolated backup valuable against ransomware?

  1. It prevents all malware infections
  2. It can provide a recovery source unavailable to the attacker
  3. It automatically decrypts any encrypted data
  4. It replaces system updates
Show correct answer and explanation

Correct answer: B. It can provide a recovery source unavailable to the attacker

Isolated or immutable backups reduce the chance that ransomware can destroy recovery data. Restore testing confirms the backups are usable.

Privacy Policy
Powered by CookieAdmin