Security+ Mitigation Techniques Quiz

1. Which practice reduces vulnerability risk by removing unnecessary software and services?

Attack surface reduction

Penetration testing

Vulnerability scanning

Threat modeling

2. Which security control framework helps organizations identify and mitigate risks systematically?

NIST Cybersecurity Framework

Social media guidelines

Hardware warranty policies

Email signature standards

Submit

4. What does security patching and updates mitigate?

Known vulnerabilities in software and operating systems

Physical theft of equipment

Natural disasters

Employee misconduct only

Submit

6. Which of the following is a common mitigation for credential-based attacks?

Multi-factor authentication and password policies

Removing all user accounts

Using the same password for all systems

Disabling login attempts entirely

7. Insecure direct object references allow attackers to access unauthorized resources. Which mitigation applies?

Proper access control and authorization checks

Increasing database size

Using only IPv6 addresses

Requiring SMS authentication only

Submit

9. A zero-day vulnerability is one that is not yet publicly known. How should organizations mitigate this risk?

Assume breach mentality, defense in depth, and behavior monitoring

Waiting for a patch to be released

Completely disconnecting from the internet

Using only open-source software

10. Which attack intercepts unencrypted credentials by positioning itself between a client and server?

Man-in-the-middle attack

Brute force attack

Dictionary attack

Rainbow table attack

11. What does buffer overflow exploit?

Inadequate input bounds checking in memory

Weak encryption algorithms

Outdated operating systems

Missing firewall rules

Submit

13. Ransomware encrypts files and demands payment. Which mitigation is most critical?

Regular backups and endpoint protection

Paying the ransom immediately

Disconnecting all network cables

Using only floppy disks for storage

14. What is the best mitigation for a distributed denial-of-service (DDoS) attack?

Rate limiting, load balancing, and DDoS mitigation services

Blocking all traffic from the internet

Increasing server CPU speed

Removing all web services

15. Which vulnerability allows an attacker to bypass authentication by exploiting improper access controls?

Broken authentication

Insecure deserialization

Using components with known vulnerabilities

Insufficient logging and monitoring

16. A phishing email tricks users into revealing sensitive information. Which mitigation is most effective?

User awareness training and email filtering

Blocking all external emails

Requiring passwords to be 20 characters

Installing antivirus on servers only

17. What is the primary mitigation for SQL injection vulnerabilities?

Input validation and parameterized queries

Increasing server memory

Disabling database logging

Encrypting all user passwords

18. Cross-site scripting (XSS) allows attackers to inject malicious scripts into web pages. What mitigates this?

Output encoding and input validation

Using only HTTPS connections

Disabling JavaScript globally

Implementing biometric authentication

Submit

Security+ Mitigation Techniques for Common Attacks Quiz

1. Which practice reduces vulnerability risk by removing unnecessary software and services?

2.

What first name or nickname would you like us to use?

2. Which security control framework helps organizations identify and mitigate risks systematically?

3. Malware can be mitigated through endpoint protection software, which detects and removes _____ code.

4. What does security patching and updates mitigate?

5. A _____ attack floods a system with requests to consume all available resources.

6. Which of the following is a common mitigation for credential-based attacks?

7. Insecure direct object references allow attackers to access unauthorized resources. Which mitigation applies?

8. What is the primary purpose of a _____ test in identifying vulnerabilities?

9. A zero-day vulnerability is one that is not yet publicly known. How should organizations mitigate this risk?

10. Which attack intercepts unencrypted credentials by positioning itself between a client and server?

11. What does buffer overflow exploit?

12. A _____ vulnerability allows attackers to escalate privileges beyond their intended permissions.

13. Ransomware encrypts files and demands payment. Which mitigation is most critical?

14. What is the best mitigation for a distributed denial-of-service (DDoS) attack?

15. Which vulnerability allows an attacker to bypass authentication by exploiting improper access controls?

16. A phishing email tricks users into revealing sensitive information. Which mitigation is most effective?

17. What is the primary mitigation for SQL injection vulnerabilities?

18. Cross-site scripting (XSS) allows attackers to inject malicious scripts into web pages. What mitigates this?

19. Data exfiltration can be prevented through network segmentation, encryption, and _____ monitoring.

20. Social engineering attacks manipulate people into divulging confidential information. The best defense is _____ and verification procedures.