What is the main goal of patching in the SDLC?

• To add new features

• To fix security vulnerabilities

• To improve UI

• To reduce code size

What is the impact of the Log4Shell vulnerability?

• Slower logging

• Remote code execution in millions of applications

• Memory leaks

• SQL injection

What is the CVSS score of the Log4Shell vulnerability?

• 5.0

• 7.5

• 9.0

• 10.0

What is the main risk of insecure deserialization?

• Data loss

• Remote code execution

• Memory leaks

• SQL injection

What is the purpose of monitoring in the SDLC?

• To test performance

• To detect and respond to security incidents

• To encrypt logs

• To compile code

What makes mobile devices particularly attractive targets for attackers?

• They are rarely used

• They store minimal personal data

• They contain a wealth of sensitive personal information

• They are not connected to the internet

What was the first known mobile malware?

• Pegasus

• FluBot

• Cabir

• Zeus

What is a key risk of using public Wi-Fi networks?

• Faster speeds

• Man-in-the-middle attacks

• Better encryption

• Reduced latency

What is a “zero-click” exploit, as seen in Pegasus spyware?

• Requires user to click a malicious link

• Requires physical access to the device

• Exploits vulnerabilities without user interaction

• Only affects Android devices

What is the main benefit of biometric authentication?

• It is always more secure than passwords

• It replaces encryption

• It offers fast and user-friendly authentication

• It stores data in the cloud