Revision Quiz

What is Layer 3 in OSI Model?

• Physical

• Data Link

• Network

• Transport

What is IPv6 Addressing System Size?

• 16 bit

• 32 bit

• 64 bit

• 128 bit

Device that is responsible for connecting devices on the same network, using mac addresses for efficient packet forwarding?

• router

• switch

• hub

• firewall

Which of the following best reflects a core principle of Zero Trust Architecture (ZTA)?

• Trust is granted automatically to users inside the corporate network.

• Access is granted only after verifying user identity, device health, and contextual factors.

• Once a user is authenticated, they retain unlimited access to all network resources.

• Security controls are applied only at the network perimeter.

Which of the following statements correctly differentiates an Intrusion Detection System (IDS) from an Intrusion Prevention System (IPS)?

• IDS monitors and blocks malicious traffic, while IPS only generates alerts.

• IDS blocks malicious traffic in real time, while IPS analyzes it offline.

• IDS only detects and alerts on suspicious activity, while IPS actively blocks it in real time.

• IDS and IPS perform exactly the same functions, but IPS is more expensive.

Which of the following best describes the primary design principle of REST?

• It requires using SOAP for all API communications.

• It uses standard HTTP methods such as GET, POST, PUT, and DELETE to interact with resources.

• It only supports XML for data exchange.

• It allows APIs to work only within the same local network.

Which of the following statements is true about SOAP?

• SOAP is an architectural style that relies on standard HTTP methods for CRUD operations.

• SOAP is a protocol that allows exchanging structured information, often using XML, for web services.

• SOAP can only be used over HTTP and does not support other transport protocols.

• SOAP is designed exclusively for lightweight and stateless communication.

What is a primary advantage of API-driven architectures?

• They eliminate the need for network communication between applications.

• They tightly couple services to ensure faster performance.

• They enable modularity and interoperability by allowing applications and services to communicate and exchange data.

• They require all services to be built in the same programming language.

Which of the following scenarios best represents Broken Access Control?

• A web application encrypts all sensitive data before storing it in the database.

• A user modifies a URL parameter to access another user's account details without proper authorization checks.

• A website uses CAPTCHA to prevent automated login attempts.

• A developer uses HTTPS to secure communication between the client and server.

Which of the following is the most effective measure to prevent CSRF attacks?

• Using CAPTCHA on all login forms

• Implementing CSRF tokens that are validated for each state-changing request

• Enabling JavaScript validation for all form inputs

• Using HTTPS without any additional security measures