SEC+01

Question 1

Which type of malware disguises itself as legitimate software to trick users into installing it?

Accepted Answer

Trojan Horse

Question 2

What is the purpose of a digital signature?

Accepted Answer

Verify the sender’s identity and ensure message integrity

Question 3

An attacker intercepts and modifies communication between two parties without their knowledge

Accepted Answer

Man-in-the-Middle (MITM)

Question 4

What type of penetration test provides the tester with full knowledge of the system’s architecture?

Accepted Answer

White Box

Question 5

What is an example of social engineering?

Accepted Answer

A fake tech support agent tricking an employee into revealing credentials

Question 6

What type of attack exploits a vulnerability in poorly coded SQL database applications?

Accepted Answer

SQL Injection (SQLi)

Question 7

What is the primary goal of information security?

Accepted Answer

Protect confidentiality, integrity, and availability of data

Question 8

What is the strongest form of multifactor authentication (MFA)?

Accepted Answer

Password and biometric scan

Question 9

What security model ensures users are granted only the permissions necessary to perform their job functions?

Accepted Answer

Least Privilege

Question 10

A company wants to ensure employees only access files they need for their job roles. What security principle applies?

Accepted Answer

Least Privilege

Questions 10