Security+ Mitigation Techniques Quiz

1. What is the primary mitigation for SQL injection vulnerabilities?

Input validation and parameterized queries

Increasing server memory

Disabling database logging

Encrypting all user passwords

2. A phishing email tricks users into revealing sensitive information. Which mitigation is most effective?

User awareness training and email filtering

Blocking all external emails

Requiring passwords to be 20 characters

Installing antivirus on servers only

3. Which vulnerability allows an attacker to bypass authentication by exploiting improper access controls?

Broken authentication

Insecure deserialization

Using components with known vulnerabilities

Insufficient logging and monitoring

4. What is the best mitigation for a distributed denial-of-service (DDoS) attack?

Rate limiting, load balancing, and DDoS mitigation services

Blocking all traffic from the internet

Increasing server CPU speed

Removing all web services

5. Ransomware encrypts files and demands payment. Which mitigation is most critical?

Regular backups and endpoint protection

Paying the ransom immediately

Disconnecting all network cables

Using only floppy disks for storage

6. Which attack intercepts unencrypted credentials by positioning itself between a client and server?

Man-in-the-middle attack

Brute force attack

Dictionary attack

Rainbow table attack

7. What does buffer overflow exploit?

Inadequate input bounds checking in memory

Weak encryption algorithms

Outdated operating systems

Missing firewall rules

8. Which practice reduces vulnerability risk by removing unnecessary software and services?

Attack surface reduction

Penetration testing

Vulnerability scanning

Threat modeling

9. Which security control framework helps organizations identify and mitigate risks systematically?

NIST Cybersecurity Framework

Social media guidelines

Hardware warranty policies

Email signature standards

10. A zero-day vulnerability is one that is not yet publicly known. How should organizations mitigate this risk?

Assume breach mentality, defense in depth, and behavior monitoring

Waiting for a patch to be released

Completely disconnecting from the internet

Using only open-source software

11. Insecure direct object references allow attackers to access unauthorized resources. Which mitigation applies?

Proper access control and authorization checks

Increasing database size

Using only IPv6 addresses

Requiring SMS authentication only

12. Which of the following is a common mitigation for credential-based attacks?

Multi-factor authentication and password policies

Removing all user accounts

Using the same password for all systems

Disabling login attempts entirely

13. What does security patching and updates mitigate?

Known vulnerabilities in software and operating systems

Physical theft of equipment

Natural disasters

Employee misconduct only

14. Cross-site scripting (XSS) allows attackers to inject malicious scripts into web pages. What mitigates this?

Output encoding and input validation

Using only HTTPS connections

Disabling JavaScript globally

Implementing biometric authentication

Submit

Security+ Mitigation Techniques for Common Attacks Quiz

1. What is the primary mitigation for SQL injection vulnerabilities?

2.

What first name or nickname would you like us to use?

2. A phishing email tricks users into revealing sensitive information. Which mitigation is most effective?

3. Which vulnerability allows an attacker to bypass authentication by exploiting improper access controls?

4. What is the best mitigation for a distributed denial-of-service (DDoS) attack?

5. Ransomware encrypts files and demands payment. Which mitigation is most critical?

6. Which attack intercepts unencrypted credentials by positioning itself between a client and server?

7. What does buffer overflow exploit?

8. Which practice reduces vulnerability risk by removing unnecessary software and services?

9. Which security control framework helps organizations identify and mitigate risks systematically?

10. A zero-day vulnerability is one that is not yet publicly known. How should organizations mitigate this risk?

11. Insecure direct object references allow attackers to access unauthorized resources. Which mitigation applies?

12. Which of the following is a common mitigation for credential-based attacks?

13. What does security patching and updates mitigate?

14. Cross-site scripting (XSS) allows attackers to inject malicious scripts into web pages. What mitigates this?

15. Data exfiltration can be prevented through network segmentation, encryption, and _____ monitoring.

16. Malware can be mitigated through endpoint protection software, which detects and removes _____ code.

17. A _____ attack floods a system with requests to consume all available resources.

18. What is the primary purpose of a _____ test in identifying vulnerabilities?

19. Social engineering attacks manipulate people into divulging confidential information. The best defense is _____ and verification procedures.

20. A _____ vulnerability allows attackers to escalate privileges beyond their intended permissions.