Cybersecurity Quiz

What is a vulnerability in a system?

• A feature that enhances security

• A weakness in the system

• A strong defense mechanism

• A type of software update

What is a zero-day attack?

• An attack that targets previously known vulnerabilities

• An attack that exploits a vulnerability that has never been reported

• An attack that occurs after vulnerabilities are patched

• An attack that happens within the first day of software release

Which database is mentioned as a source for vulnerabilities?

• ISO

• NVD

• CVE

• SQL

What does the term "threat agent" refer to?

• A person exploiting a vulnerability

• A type of software

• A security measure

• An organization that creates vulnerabilities

What is the purpose of role-based access control (RBAC)?

• To limit access based on job roles

• To provide unlimited access to all users

• To create a single point of access for all data

• To ensure all users have administrative rights

Insider threats are primarily caused by:

• Software bugs

• Employees within the organization

• External hackers

• Natural disasters

What is the principle of least privilege?

• Users should have maximum access

• All users should have administrative privileges

• Users should have access only to necessary data

• Access should be granted based on seniority

Zero trust security means:

• Trusting all users once they are inside the network

• No user is trusted until verified for access

• Users are given unlimited access to all systems

• All systems are open for anyone to access

Which agency is responsible for providing the CVE database?

• FBI

• NIST

• DHS and CISA

• NSA

What is the result of an exploit?

• Access to private resources by an attacker

• Immediate patching of vulnerabilities

• Increased system security

• Enhanced user permissions