SV Cyber Security Certification Practice Exam

These questions are part of the practice quiz. Start practicing

• Which of the following is a primary objective of cybersecurity measures?
• What does ISO 27001 represent in the context of cybersecurity?
• What is 'exfiltration' in cybersecurity?
• What is another name for an application-level firewall?
• Which type of group is capable of being granted rights and permissions in Windows?
• Which of the following terms indicates that information is to be read only by those people for whom it is intended?
• How many firewalls are typically required to set up a sandwich DMZ?
• Which concept determines what resources users can access after they log on?
• What process is used to verify that an administrator is not accessing data that they should not be accessing?
• What is the primary function of a firewall in network security?
• What is the process of identifying an individual for secure access?
• When assigning access permissions to a folder, which should be granted first?
• What does "social engineering" primarily exploit?
• Which device is defined as a physical or logical device used to capture keystrokes?
• Describe "network segmentation."
• What is meant by a 'confidentiality breach'?
• What are "security patches"?
• What does social media security involve?
• What is a common technique employed in social engineering attacks?
• What are security patches used for in cybersecurity?
• Which layer of the OSI model is responsible for session management?
• What technology allows a user at home to connect to the corporate network securely?
• What is the primary goal of data loss prevention (DLP)?
• What type of attack does a VPN primarily protect against?
• What is a malicious insider in the context of cybersecurity?
• What is the primary function of a "VPN"?
• What aspect of the CIA triad does integrity represent?
• What is identity theft?
• Which of the following best describes a honeypot's purpose?
• What does virtualization security focus on?
• Which type of routing protocol transmits the entire routing table to neighboring routers?
• How is malware defined in the context of computer systems?
• Which framework focuses on guiding organizations in managing cybersecurity risks?
• What does risk management involve in cybersecurity?
• What is the main risk associated with phishing attacks?
• Which OSI layer is primarily utilized by switches and bridges?
• What technology is often used to implement confidentiality?
• In cybersecurity, what does the term incident response refer to?
• Which of the following does data loss prevention (DLP) aim to protect?
• What is the main function of an antivirus program?
• What is the primary purpose of a vulnerability assessment?
• What is a cybersecurity framework?
• Which of the following ensures that data is not changed when it is not supposed to be?
• What item, about the size of a credit card, allows access to a network and its resources?
• What is the primary function of a Security Information and Event Management (SIEM) system?
• Which of the following best describes a botnet?
• What does 'ransomware' do?
• What is the purpose of multi-factor authentication (MFA)?
• How is "ransomware" characterized?
• What type of permissions are applied directly to files or folders?
• What is included in 'malware analysis'?
• What is the primary role of user authentication in network security?
• What type of electronic document contains a public key?
• What is the aim of penetration testing?
• What does a VPN primarily provide for remote users?
• Which security measure is typically a response to insider threats?
• Where are local user accounts stored on a computer running Windows 7?
• What does encryption achieve?
• What is the purpose of using encryption in data transmission?
• Define a "zero-day exploit."
• Which of the following is true about two-factor authentication (2FA)?
• What does the term 'audit trail' refer to in the context of cybersecurity?
• Which component is often used in biometric authentication systems?
• Why is data backup important in cybersecurity?
• Which of the following is a common type of malware that encrypts a user’s files?
• What is a botnet?
• What does compliance in cybersecurity entail?
• What type of attack attempts to guess passwords by trying every possible combination of characters?
• What is the key role of transport layer protocols like TCP?
• What type of authentication method identifies and recognizes people based on physical traits such as fingerprints?
• What type of attacks can a botnet facilitate?
• What is the function of endpoint security?
• Which type of software is specifically created to disrupt system functionality?
• What is the main purpose of authentication in cybersecurity?
• What port does the LDAP protocol commonly use?
• What is the process of transforming data into a format unreadable by unauthorized users called?
• What kind of approach does security awareness training utilize?
• Which IPSec protocol provides integrity protection for packet headers, data, and user authentication but does not encrypt?
• What is the process of keeping track of a user's activity?
• What type of malicious software captures keystrokes and sends them to a hacker?
• Which type of software is used to monitor usernames and passwords transmitted over a network?
• What does patch management involve?
• What term describes the authorization a user needs to perform actions like logging in or backing up in Windows?
• Which type of firewall analyzes previous conversations to decide if a packet should be allowed into a network?
• What is the fundamental aim of penetration testing?
• Which setting forces users to change their password at regular intervals?
• What does "two-factor authentication" (2FA) provide?
• Which of the following is NOT a benefit of implementing a firewall?
• What type of server is used specifically to lure and trap a hacker?
• Which of the following is NOT a function of the CISO?
• What type of server is responsible for managing Active Directory?
• In risk management, what does risk transfer involve?
• What is "malware as a service" (MaaS)?
• What is the primary purpose of network segmentation?
• A process where security patches are routinely applied to systems is known as what?
• What does "DDoS" stand for?
• What does the CIA triad stand for in cyber security?
• What is a "keylogger"?
• What type of devices poses a significant challenge to security professionals in recent years?
• What Microsoft technology verifies that a client has the latest Windows updates and an updated antivirus before granting network access?
• Which type of attack is characterized by intercepting communications to extract sensitive information?
• Which type of device forwards packets based on their destination IP address?
• What is the primary purpose of using protocols like AH and ESP in network security?
• What is the primary goal of cybersecurity?
• Define "data breach."
• What is a spear phishing attack?
• What does a highly secure system typically require?
• On which OSI layer do TCP and UDP protocols function?
• Which model is commonly referenced to describe networking technologies?
• Which practice should users avoid when managing their passwords?
• How is an adversary defined in cybersecurity?
• Which of the following is a common method for securing data in transit?
• What does an intrusion detection system (IDS) primarily monitor?
• What is the purpose of a security audit?
• What is a "firewall" used for?
• How do conventional firewalls primarily protect a network?
• What does the term "vulnerability assessment" refer to in cybersecurity?
• What differentiates "symmetrical" from "asymmetrical" encryption?
• What is "penetration testing"?
• What is the primary purpose of a domain controller in a Windows network?
• Which type of accounts are generally exempt from password expiration policies?
• What is the primary goal of cyber security?
• Which of the following is not a typical response when dealing with a risk?
• What is a "botnet"?
• In the context of cybersecurity, what does the term 'threat' refer to?
• What characterizes a DDoS attack?
• What is the concept of social engineering in cybersecurity?
• At which layer of the OSI model do routers operate?
• Define 'zero-day exploit'.
• What is the recommended group to assign permissions for a shared folder?
• What does the term "malware" refer to?
• What is the generally accepted minimum length for a secure password?
• What does the principle of 'least privilege' entail in cybersecurity?
• Which is a characteristic feature of a Denial of Service (DoS) attack?
• What is the purpose of SSL/TLS?
• What is often considered the first line of defense when setting up a network?
• Which method used by hackers relies on the trusting nature of the person being attacked?
• What is the primary responsibility of a Chief Information Security Officer (CISO)?
• Which of the following servers would you not place on the DMZ?
• Which component is essential for establishing an IPSec connection?
• Which strategy is used to provide protection when one line of defense is breached?
• Which practice enhances security through user verification methods?
• What does the "principle of least privilege" refer to in cyber security?
• What setting is used to lock an account after a specified number of incorrect logon attempts?
• What is the purpose of a "penetration test"?
• What is a security policy?
• What does cloud security protect?
• What technology is used to isolate a group of servers to prevent them from interacting with others?
• What is likely the most important factor in implementing a security policy?
• What is the security discipline that ensures a user is given no more privilege than necessary to perform their job?
• What is a vulnerability in cybersecurity?
• What is the main difference between symmetrical and asymmetrical encryption?
• What process prevents someone from denying that she accessed a resource?
• Which type of firewall filters packets based on IP address and port numbers?
• What is the main goal of patch management?
• What does a risk assessment help an organization identify?
• How is a 'security policy' best described?
• Define "threat intelligence."
• Which setting prevents users from reusing previous passwords?
• What is the primary purpose of authentication in security?
• How is risk defined in the context of cybersecurity?
• What does tokenization achieve in data security?
• If you have multiple web servers that need to interact with a SQL server, where should the SQL server be located?
• What does the concept of 'cyber hygiene' entail?
• What main purpose does the OSI layer 2 serve in networking?
• Name one framework used for managing cyber security risks.
• What is a key factor in ensuring network security?
• What is the primary goal of conducting a vulnerability assessment?
• What authentication type is the default for active directory?
• What setting is designed to prevent users from changing their password multiple times in a row?
• What does DNS spoofing involve?
• What is a threat vector?
• What type of server primarily focuses on file storage and access for users?
• Which statement best describes the function of a proxy server?
• What type of devices can be easily lost or stolen and may be used for espionage?
• What is a data breach?
• What is the primary function of a firewall in network security?
• What is a common outcome of a data breach?
• What does 'SQL injection' involve?
• What is "risk assessment" in cyber security?
• Which of the following is NOT a characteristic of packet-filtering firewalls?
• Where are users and permissions for an NTFS folder stored?
• Which of the following best describes the nature of endpoint security?
• What is meant by a network protocol?
• Which of the following is a feature of two-factor authentication?
• What does security awareness training primarily aim to achieve?
• What does 'cloud security' encompass?
• What do you call the process in which a user is identified via a username and password?
• Which of the following is a disadvantage of using PAP authentication?
• What is the process of giving individual access to a system or resource?
• Which aspect is essential in social media security?
• What key component is essential for encryption and decryption?
• What port number is associated with the SMTP protocol?
• What function does encryption serve in data security?
• What does an 'SSL certificate' provide for a website?
• What is the purpose of a cybersecurity incident response plan?
• Which of the following best describes "phishing"?
• What is one common type of social engineering attack?
• What does the acronym "SIEM" stand for?
• What characterizes a malicious insider threat?
• What does phishing refer to in cybersecurity?
• Which of the following is a secret numeric password used for authentication?
• What is an "intrusion detection system" (IDS)?
• Which authentication method transmits the username and password in plain text?
• What type of password guessing attack uses common words?
• What does a security audit evaluate?
• What does "SSL" stand for?
• Which security principle involves restricting access to sensitive data on a need-to-know basis?
• What is patch management?
• Which layer do hubs operate at in the OSI model?
• What does effective cloud security include?
• What is meant by the term "network security"?
• Which type of authentication would you use for a highly sensitive transaction?
• What is a common use of a security token?
• What does the NIST Cybersecurity Framework primarily help organizations with?
• What is the purpose of access control?
• What type of attack is characterized by personalized messages targeting specific individuals?
• What is the function of an encryption key?
• What is the focus of incident response?
• What term refers to the scope that a hacker can exploit to break into a system?
• What system detects unauthorized access and takes measures to prevent it?
• What is considered the best way to protect against social engineering attacks?
• What area acts as a buffer zone between the internet and an internal network, often housing public-facing servers?
• What directory service is used with Windows domain?
• What is a primary objective of conducting a vulnerability assessment?
• What is a honeypot in the field of cybersecurity?
• What are the three main components of the CIA triad in cybersecurity?
• Which statement accurately defines 'endpoint security'?
• What does two-factor authentication (2FA) require from users?
• When granting access to print to a printer, what is being granted?
• What mechanism is used to ensure that a sender cannot deny sending a message?
• In the context of cybersecurity, what does "availability" refer to?