Which of the following protocols is used to securely connect to remote systems?

What type of attack involves overwhelming a target system with traffic to make it unavailable?

Which of the following is a common framework for managing information security risks?

Which security principle is focused on granting users the least amount of privilege necessary to perform their job functions?

Which type of malware is designed to replicate itself and spread to other systems?

What is the main purpose of a firewall in network security?

Which type of attack involves intercepting and altering communications between two parties without their knowledge?

What is the primary purpose of multi-factor authentication (MFA)?

Which of the following is a technique used to test the security of a system by mimicking an attack from a malicious actor?

What is the primary goal of data encryption?

Which of the following is a common method for ensuring data integrity in a database?

What does the principle of least privilege refer to in security?

Which type of attack involves intercepting and altering communications between two parties?

What is the primary purpose of a firewall in network security?

Which of the following best describes multifactor authentication?

What does the acronym VPN stand for in network security?

Which of the following is an example of social engineering?

What is a primary function of an Intrusion Detection System (IDS)?

Which type of malware is designed to replicate itself and spread to other computers?

What is the main purpose of a digital signature?

What type of attack involves tricking users into entering their credentials on a fake website?

Which of the following best describes a zero-day attack?

What is the main purpose of social engineering in security attacks?

What type of attack manipulates a database to retrieve unauthorized information?

Which type of attack overwhelms a system with traffic to render it unusable?

What is a common method used in phishing attacks to deceive individuals?

Which type of attack involves intercepting communication between two parties?

What is a common characteristic of a Distributed Denial of Service (DDoS) attack?

What is the primary goal of application security?

Which of the following is a common practice for securing applications?

What is the purpose of using encryption in application security?

What is a common vulnerability found in web applications?

What is a common sign of a phishing email?

Which of the following is an effective way to protect against phishing attacks?

What is the primary goal of a phishing attack?

What type of communication is often targeted by phishing attacks?

What is the primary goal of incident response?

Which phase comes first in the incident response lifecycle?

During which phase of incident response is the incident fully investigated and classified?

What is a common tool used in the incident response process to document findings and improve future responses?

What is the primary focus during the Containment phase of incident response?

What is a crucial step in the Post-Incident Activity phase?

Which of the following is a key benefit of having an Incident Response Team?

What does the term 'Eradication' refer to in the incident response process?

What is the primary purpose of an incident response policy?

In the context of incident response, what does the term 'forensics' refer to?

Which of the following is an indicator of potential malicious activity in network traffic?

What is a common indication of a phishing attempt in emails?

Which behavior might suggest that a user account has been compromised?

What is a significant indicator of a potential malware infection on a device?

Which of the following is a warning sign of a potential data breach?

What is a clear symptom that might indicate the presence of ransomware on a system?

Which of the following behaviors is a potential indicator of insider threats?

What might indicate a possible account hijacking?

What is a common sign of potential spyware infection on a device?

Which of the following is an indicator of command and control (C2) communication from compromised devices?

What is the primary function of ransomware?

What type of malware is specifically designed to replicate itself and spread to other devices?

What is the key characteristic of a Trojan horse in malware terminology?

Which type of malware secretly collects sensitive information from users without their knowledge?

What is the primary purpose of security governance?

Which framework is commonly used to guide organizations in managing information security risk?

What is a critical component of effective security governance?

What role does the Board of Directors play in security governance?

Which of the following best describes a security policy?

What is the primary function of a security governance framework?

Which of the following is a key benefit of implementing effective security governance?

What is the purpose of an incident response plan in security governance?

Which of the following is an essential principle of security governance?

What is the significance of compliance in security governance?