PCCET Cybersecurity Fundamentals Quiz

1. What is the primary purpose of a Demilitarized Zone (DMZ) in network architecture?

To store all company data securely

To provide a buffer zone between external and internal networks

To eliminate the need for firewalls

To increase internet bandwidth

2. Which of the following describes a security baseline?

The minimum security standards for systems and configurations

The highest level of security ever achieved

A list of employees with security clearances

The cost of implementing security measures

3. What is the primary benefit of network segmentation?

To slow down internet speeds

To limit lateral movement of threats within a network

To increase the number of firewalls needed

To eliminate the need for antivirus software

4. Which attack involves sending large volumes of traffic to overwhelm a system?

Man-in-the-middle attack

Distributed Denial of Service (DDoS)

Cross-site scripting

Privilege escalation

5. What is the main purpose of a security policy?

To provide guidelines and standards for protecting organizational assets

To eliminate all employees who access the network

To increase IT department workload

To replace technical security measures

6. Which security control type is implemented before a threat occurs?

Detective control

Corrective control

Preventive control

Reactive control

7. What does NIST stand for in cybersecurity?

Network Information Security Technology

National Institute of Standards and Technology

National Internet Security Team

Network Infrastructure Security Toolkit

8. Which of these is a social engineering attack technique?

Port scanning

SQL injection

Phishing

Packet sniffing

9. What is a common first step in incident response?

Immediately shut down all systems

Detect and confirm the security incident

Publish the breach on social media

Delete all logs to hide evidence

10. Which encryption method uses the same key for both encryption and decryption?

Asymmetric encryption

Symmetric encryption

Hashing

Steganography

11. What is the primary purpose of a firewall in network security?

To monitor and control incoming and outgoing network traffic

To encrypt all data transmitted across the network

To automatically patch software vulnerabilities

To identify and remove malware from infected systems

12. Which of the following is a characteristic of ransomware?

It only affects mobile devices

It encrypts files and demands payment for decryption keys

It is always detected by antivirus software

It improves system performance

13. What does the principle of 'least privilege' mean in access control?

Users should have maximum access to all systems

Users should only have the minimum permissions needed for their role

Administrators should have unrestricted access

All employees should share the same access level

14. Which protocol is considered more secure for email transmission?

SMTP

SMTPS or SMTP with TLS

HTTP

Telnet

15. What is the main goal of vulnerability assessment?

To identify and prioritize security weaknesses in systems

To eliminate all risk from an organization

To replace all legacy software

To train employees on phishing awareness

16. Which of these is NOT typically a component of a Security Information and Event Management (SIEM) system?

Log collection and aggregation

Real-time threat detection

Hardware encryption modules

Incident response workflows

17. What is the primary function of an Intrusion Detection System (IDS)?

To prevent all network attacks automatically

To monitor network traffic for suspicious activity and alert administrators

To encrypt sensitive data in transit

To manage user access permissions

18. Which authentication method combines something you know, have, and are?

Single-factor authentication

Two-factor authentication

Multi-factor authentication

Biometric authentication only

19. What does CIA stand for in the context of information security?

Confidentiality, Integrity, Availability

Central Intelligence Agency

Cybersecurity Information Architecture

Cryptographic Integrity Assessment

20. Which of the following best describes a zero-day vulnerability?

A vulnerability that is patched within 24 hours

An unknown security flaw exploited before vendors can release a fix

A vulnerability only affecting legacy systems

A vulnerability with a CVSS score of zero