#1
What is a common method to mitigate phishing attacks?
Using strong passwords
Never accessing emails
Regularly updating antivirus software
Training employees to recognize suspicious emails
#2
What is the main goal of a DDoS (Distributed Denial of Service) attack?
To steal sensitive information
To gain unauthorized access to a system
To disrupt or disable services
To distribute malware
#3
What is the term used to describe the practice of disguising data so it appears to be something else?
Encryption
Steganography
Decryption
Obfuscation
#4
Which of the following is NOT a common type of phishing attack?
Spear phishing
Whaling
Vishing
Brute force attack
#5
Which of the following is an example of a physical security measure?
Firewall
Two-factor authentication
Security camera
Data encryption
#6
Which of the following is NOT a physical security measure?
Security guards
Biometric access controls
Firewalls
Fencing
#7
What does the term 'social engineering' refer to in the context of security?
Hacking into social media accounts
Using psychological manipulation to deceive individuals
Engineering social interactions
Developing social networking software
#8
Which of the following is NOT a recommended practice for securing mobile devices?
Enabling device encryption
Downloading apps only from trusted sources
Sharing passwords with friends and family
Regularly updating the operating system and apps
#9
What is a common method used for secure data disposal?
Throwing away physical documents in the trash
Overwriting data multiple times with random patterns
Leaving data untouched on old hard drives
Posting data on social media
#10
Which of the following is NOT a common factor in a strong password?
Use of personal information
Long length
Mix of uppercase and lowercase letters
Inclusion of special characters
#11
Which of the following is a principle of least privilege?
Providing users with unlimited access to all resources
Granting users the least amount of access necessary to perform their tasks
Sharing all passwords among team members
Never updating security permissions
#12
What is the purpose of a VPN (Virtual Private Network) in operational security?
To create a secure connection over an unsecured network
To enhance physical security measures
To prevent social engineering attacks
To encrypt data stored on servers
#13
Which of the following is NOT a type of malware?
Trojan horse
Spyware
Firewall
Ransomware
#14
What is the purpose of penetration testing in operational security?
To exploit vulnerabilities in systems
To test the effectiveness of security controls
To deploy malware in the network
To create secure passwords
#15
What is the difference between symmetric and asymmetric encryption?
Symmetric encryption uses one key, while asymmetric encryption uses two keys
Symmetric encryption is slower than asymmetric encryption
Asymmetric encryption is only used for securing emails
There is no difference between symmetric and asymmetric encryption