SSCP Systems and Application Security Quiz

1. True or False: A firewall can prevent all types of cyberattacks.

True

False

2. Which framework provides security assessment guidelines for organizations?

NIST Cybersecurity Framework

ISO 27001

Both A and B

Neither A nor B

3. True or False: Social engineering is a technical vulnerability.

True

False

4. What does HTTPS provide that HTTP does not?

Faster data transmission

Encryption and authentication

Better caching

Improved routing

5. Which secure development practice involves checking code before merging?

Code deployment

Code review

Code compilation

Code documentation

6. What is a zero-day vulnerability?

A vulnerability patched immediately upon discovery

A previously unknown vulnerability with no available patch

A vulnerability found in legacy systems

A vulnerability affecting zero users

7. True or False: Encryption alone is sufficient to protect sensitive data.

True

False

8. Which vulnerability allows attackers to execute arbitrary code on a server?

Cross-site Request Forgery (CSRF)

Remote Code Execution (RCE)

Broken authentication

Sensitive data exposure

9. What is the purpose of security logging and monitoring?

Improve application speed

Detect and respond to security incidents

Reduce storage costs

Simplify user access

10. Which access control model bases permissions on user roles?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Mandatory Access Control (MAC)

Attribute-Based Access Control (ABAC)

11. Which security model ensures that data cannot be modified without authorization?

Confidentiality

Integrity

Availability

Accountability

12. What does a digital signature provide?

Encryption of data

Authentication and non-repudiation

Data compression

Network routing

13. Which security testing method involves examining code without executing it?

Dynamic testing

Penetration testing

Static analysis

Fuzzing

14. What is the primary goal of input validation?

Improve application performance

Prevent malicious or malformed data from entering the system

Reduce database queries

Enhance user experience

15. Which encryption algorithm is asymmetric?

AES

DES

RSA

RC4

16. What is a buffer overflow attack?

Overloading a network with traffic

Writing data beyond allocated memory boundaries

Exceeding storage capacity limits

Flooding a database with queries

17. Which authentication method combines something you know and something you have?

Single-factor authentication

Multi-factor authentication

Biometric authentication

Password authentication

18. What does the principle of least privilege require?

Users have maximum access by default

Users receive only necessary permissions for their role

All users share identical access rights

Administrators monitor all user activity

19. Which of the following is NOT a common vulnerability in the OWASP Top 10?

SQL Injection

Cross-site Scripting (XSS)

Poor color contrast

Insecure deserialization

20. What is the primary purpose of secure code review?

Improve code readability

Identify security vulnerabilities before deployment

Reduce development time

Enhance user interface design

SSCP Systems and Application Security Quiz

1. True or False: A firewall can prevent all types of cyberattacks.

2.

What first name or nickname would you like us to use?

2. Which framework provides security assessment guidelines for organizations?

3. True or False: Social engineering is a technical vulnerability.

4. What does HTTPS provide that HTTP does not?

5. Which secure development practice involves checking code before merging?

6. What is a zero-day vulnerability?

7. True or False: Encryption alone is sufficient to protect sensitive data.

8. Which vulnerability allows attackers to execute arbitrary code on a server?

9. What is the purpose of security logging and monitoring?

10. Which access control model bases permissions on user roles?

11. Which security model ensures that data cannot be modified without authorization?

12. What does a digital signature provide?

13. Which security testing method involves examining code without executing it?

14. What is the primary goal of input validation?

15. Which encryption algorithm is asymmetric?

16. What is a buffer overflow attack?

17. Which authentication method combines something you know and something you have?

18. What does the principle of least privilege require?

19. Which of the following is NOT a common vulnerability in the OWASP Top 10?

20. What is the primary purpose of secure code review?