SecurityX Engineering Quiz: Can You Build It Secure?

1. Which type of attack intercepts communication between two parties without their knowledge?

Brute force attack

Man-in-the-Middle (MITM) attack

Denial of Service (DoS)

SQL injection

2. In secure system design, what does 'secure by design' mean?

Security features added after development

Security integrated into every phase of system development

Using only expensive security tools

Applying security only to the database

3. Which framework provides guidelines for security controls and risk management?

NIST Cybersecurity Framework

ISO/IEC 27001

CIS Controls

All of the above

4. True or False: A firewall can prevent all types of cyberattacks.

True

False

5. In cryptographic hashing, what property ensures that even a small input change produces a different hash?

Reversibility

Collision resistance

Avalanche effect

Key derivation

6. What is the main difference between a vulnerability and a threat in security?

They are the same thing

A vulnerability is a weakness; a threat is the potential exploitation of that weakness

A threat is a weakness; a vulnerability is an attack

Vulnerabilities only exist in software

7. Which security control is applied before a security event occurs?

Detective control

Preventive control

Corrective control

Compensating control

8. True or False: Encryption provides both confidentiality and authentication by itself.

True

False

9. In Security Engineering, what does STRIDE stand for?

System Threat Risk Identification Development Exchange

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege

Secure Transfer and Real-time Integrated Data Encryption

System Testing and Risk Investigation Design Environment

10. What is the purpose of a security baseline in system hardening?

To maximize system performance

To establish minimum security standards for systems

To eliminate all user restrictions

To reduce encryption overhead

11. Which security principle ensures that systems remain functional and accessible during an attack?

Confidentiality

Availability

Integrity

Non-repudiation

12. True or False: Multi-factor authentication uses only password-based verification.

True

False

13. In Public Key Infrastructure (PKI), what does a digital certificate contain?

Only the public key

Only the private key

Public key, identity info, and issuer signature

Encrypted passwords

14. What does the principle of least privilege (PoLP) ensure?

Users have maximum access to all resources

Users have only the minimum access needed for their role

All users share the same access level

Administrators have unlimited access

15. Which protocol is commonly used to secure web traffic?

HTTP

HTTPS/TLS

FTP

Telnet

16. True or False: A zero-trust security model assumes all users and devices are trustworthy by default.

True

False

17. What is defense-in-depth in security architecture?

Using only one strong firewall

Implementing multiple layers of security controls

Hiring more security staff

Encrypting all data once

18. Which access control model grants permissions based on user identity and defined policies?

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

Attribute-Based Access Control (ABAC)

Mandatory Access Control (MAC)

19. In cryptography, what does a symmetric key algorithm require?

Two different keys for encryption and decryption

The same key for both encryption and decryption

A public and private key pair

Three separate keys for security

20. What is the primary goal of threat modeling in Security Engineering?

Eliminate all possible threats

Identify and prioritize potential security risks

Eliminate the security team

Reduce system performance

SecurityX Engineering Quiz: Can You Build It Secure?

1. Which type of attack intercepts communication between two parties without their knowledge?

2.

What first name or nickname would you like us to use?

2. In secure system design, what does 'secure by design' mean?

3. Which framework provides guidelines for security controls and risk management?

4. True or False: A firewall can prevent all types of cyberattacks.

5. In cryptographic hashing, what property ensures that even a small input change produces a different hash?

6. What is the main difference between a vulnerability and a threat in security?

7. Which security control is applied before a security event occurs?

8. True or False: Encryption provides both confidentiality and authentication by itself.

9. In Security Engineering, what does STRIDE stand for?

10. What is the purpose of a security baseline in system hardening?

11. Which security principle ensures that systems remain functional and accessible during an attack?

12. True or False: Multi-factor authentication uses only password-based verification.

13. In Public Key Infrastructure (PKI), what does a digital certificate contain?

14. What does the principle of least privilege (PoLP) ensure?

15. Which protocol is commonly used to secure web traffic?

16. True or False: A zero-trust security model assumes all users and devices are trustworthy by default.

17. What is defense-in-depth in security architecture?

18. Which access control model grants permissions based on user identity and defined policies?

19. In cryptography, what does a symmetric key algorithm require?

20. What is the primary goal of threat modeling in Security Engineering?