PCCET Security Operations Fundamentals Quiz

1. What is the primary goal of penetration testing?

To permanently disable network devices

To identify security vulnerabilities before attackers do

To encrypt all network traffic

To monitor employee internet usage

2. True or False: Security operations centers (SOCs) operate continuously to detect and respond to threats.

True

False

Submit

4. What is a honeypot in cybersecurity?

A backup storage system for critical data

A decoy system designed to attract and detect attackers

A type of firewall rule set

An encryption algorithm

5. Which phase of the incident response lifecycle involves removing the attacker's presence?

Detection

Containment

Eradication

Recovery

6. True or False: Network segmentation can help limit the spread of malware within an organization.

True

False

Submit

8. What does the principle of least privilege mean in security?

All users should have admin access

Users receive minimum access needed for their role

Privileges are granted for unlimited duration

Security teams have exclusive network access

9. Which of the following is a common indicator of compromise (IOC)?

Unusual outbound network traffic

Normal system performance

Routine user login patterns

Standard application updates

10. True or False: Multi-factor authentication (MFA) requires only a password and username for access.

True

False

11. What is the primary function of a firewall in network security?

Monitor and control incoming and outgoing network traffic

Encrypt all data transmitted over the network

Detect viruses in email attachments

Backup critical system files

12. Which protocol is commonly used for secure remote administration?

Telnet

SSH (Secure Shell)

FTP

HTTP

13. What does IDS stand for in network security monitoring?

Intrusion Detection System

Internal Data Storage

Internet Domain Service

Integrated Diagnostic Software

14. True or False: A DMZ (Demilitarized Zone) is a network segment that provides an additional layer of security between internal and external networks.

True

False

15. Which access control model restricts access based on user identity?

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

Attribute-Based Access Control (ABAC)

Identity-Based Access Control (IBAC)

16. What is the purpose of threat intelligence in security operations?

To encrypt sensitive data

To provide information about potential threats and attackers

To automate user access requests

To replace antivirus software

17. Which of the following is a zero-day vulnerability?

A known vulnerability with a published patch

An unknown vulnerability exploited before disclosure

A vulnerability that expires after one day

A vulnerability only affecting legacy systems

18. In incident response, what is the first critical step?

Eradicate the threat

Detect and analyze the incident

Restore systems to normal operation

Document lessons learned

19. What does SIEM stand for in security operations?

Security Information and Event Management

System Integration and Encryption Module

Secure Internet Entry Manager

Server Incident Event Monitoring

20. Which threat detection method analyzes known malware signatures?

Behavioral analysis

Signature-based detection

Anomaly detection

Heuristic analysis

PCCET Security Operations Fundamentals Quiz

1. What is the primary goal of penetration testing?

2.

What first name or nickname would you like us to use?

2. True or False: Security operations centers (SOCs) operate continuously to detect and respond to threats.

3. The process of converting plaintext into unreadable format is called ____.

4. What is a honeypot in cybersecurity?

5. Which phase of the incident response lifecycle involves removing the attacker's presence?

6. True or False: Network segmentation can help limit the spread of malware within an organization.

7. A security team uses Palo Alto Networks to monitor traffic. The primary tool for this is a ____.

8. What does the principle of least privilege mean in security?

9. Which of the following is a common indicator of compromise (IOC)?

10. True or False: Multi-factor authentication (MFA) requires only a password and username for access.

11. What is the primary function of a firewall in network security?

12. Which protocol is commonly used for secure remote administration?

13. What does IDS stand for in network security monitoring?

14. True or False: A DMZ (Demilitarized Zone) is a network segment that provides an additional layer of security between internal and external networks.

15. Which access control model restricts access based on user identity?

16. What is the purpose of threat intelligence in security operations?

17. Which of the following is a zero-day vulnerability?

18. In incident response, what is the first critical step?

19. What does SIEM stand for in security operations?

20. Which threat detection method analyzes known malware signatures?