SecurityX Engineering Quiz: Can You Build It Secure?

1. Which type of attack intercepts communication between two parties without their knowledge?

Brute force attack

Man-in-the-Middle (MITM) attack

Denial of Service (DoS)

SQL injection

2. In secure system design, what does 'secure by design' mean?

Security features added after development

Security integrated into every phase of system development

Using only expensive security tools

Applying security only to the database

3. True or False: A firewall can prevent all types of cyberattacks.

True

False

4. What is the main difference between a vulnerability and a threat in security?

They are the same thing

A vulnerability is a weakness; a threat is the potential exploitation of that weakness

A threat is a weakness; a vulnerability is an attack

Vulnerabilities only exist in software

5. Which security control is applied before a security event occurs?

Detective control

Preventive control

Corrective control

Compensating control

6. True or False: Encryption provides both confidentiality and authentication by itself.

True

False

7. What is the purpose of a security baseline in system hardening?

To maximize system performance

To establish minimum security standards for systems

To eliminate all user restrictions

To reduce encryption overhead

8. Which security principle ensures that systems remain functional and accessible during an attack?

Confidentiality

Availability

Integrity

Non-repudiation

9. True or False: Multi-factor authentication uses only password-based verification.

True

False

10. What does the principle of least privilege (PoLP) ensure?

Users have maximum access to all resources

Users have only the minimum access needed for their role

All users share the same access level

Administrators have unlimited access

11. Which protocol is commonly used to secure web traffic?

HTTP

HTTPS/TLS

FTP

Telnet

12. True or False: A zero-trust security model assumes all users and devices are trustworthy by default.

True

False

13. What is defense-in-depth in security architecture?

Using only one strong firewall

Implementing multiple layers of security controls

Hiring more security staff

Encrypting all data once

14. Which access control model grants permissions based on user identity and defined policies?

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

Attribute-Based Access Control (ABAC)

Mandatory Access Control (MAC)

15. What is the primary goal of threat modeling in Security Engineering?

Eliminate all possible threats

Identify and prioritize potential security risks

Eliminate the security team

Reduce system performance

16. In Public Key Infrastructure (PKI), what does a digital certificate contain?

Only the public key

Only the private key

Public key, identity info, and issuer signature

Encrypted passwords

17. In cryptography, what does a symmetric key algorithm require?

Two different keys for encryption and decryption

The same key for both encryption and decryption

A public and private key pair

Three separate keys for security

18. Which framework provides guidelines for security controls and risk management?

NIST Cybersecurity Framework

ISO/IEC 27001

CIS Controls

All of the above

19. In Security Engineering, what does STRIDE stand for?

System Threat Risk Identification Development Exchange

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege

Secure Transfer and Real-time Integrated Data Encryption

System Testing and Risk Investigation Design Environment

20. In cryptographic hashing, what property ensures that even a small input change produces a different hash?

Reversibility

Collision resistance

Avalanche effect

Key derivation

SecurityX Engineering Quiz: Can You Build It Secure?

1. Which type of attack intercepts communication between two parties without their knowledge?

2.

What first name or nickname would you like us to use?

2. In secure system design, what does 'secure by design' mean?

3. True or False: A firewall can prevent all types of cyberattacks.

4. What is the main difference between a vulnerability and a threat in security?

5. Which security control is applied before a security event occurs?

6. True or False: Encryption provides both confidentiality and authentication by itself.

7. What is the purpose of a security baseline in system hardening?

8. Which security principle ensures that systems remain functional and accessible during an attack?

9. True or False: Multi-factor authentication uses only password-based verification.

10. What does the principle of least privilege (PoLP) ensure?

11. Which protocol is commonly used to secure web traffic?

12. True or False: A zero-trust security model assumes all users and devices are trustworthy by default.

13. What is defense-in-depth in security architecture?

14. Which access control model grants permissions based on user identity and defined policies?

15. What is the primary goal of threat modeling in Security Engineering?

16. In Public Key Infrastructure (PKI), what does a digital certificate contain?

17. In cryptography, what does a symmetric key algorithm require?

18. Which framework provides guidelines for security controls and risk management?

19. In Security Engineering, what does STRIDE stand for?

20. In cryptographic hashing, what property ensures that even a small input change produces a different hash?