🏠 Home
MCQ Practice

Technological Knowledge MCQs

What is the difference between a virus and a worm in malware classification?

  • A. A worm requires a host file; a virus does not
  • B. A virus self-replicates; a worm needs a host file
  • C. A virus requires a host file; a worm self-replicates and spreads autonomously
  • D. No difference; they are synonyms
Explanation:
Viruses require host programs to propagate, whereas worms can self-replicate and spread without attaching to files.

In a Zero Trust security model, which of the following principles is emphasized?

  • A. Assume the network perimeter is secure
  • B. Verify explicitly every access request
  • C. Trust any device inside the office network
  • D. Use static passwords only
Explanation:
Zero Trust means "never trust, always verify" – everything must be authenticated and authorized.

Which of the following is an example of multi-factor authentication?

  • A. Password-only login
  • B. Fingerprint plus PIN entry
  • C. Single sign-on (SSO) via Google
  • D. CAPTCHA challenge only
Explanation:
A fingerprint (something you are) plus a PIN (something you know) is multi-factor authentication.

Why is SHA-256 generally preferred over MD5 for hashing in security applications?

  • A. SHA-256 is faster
  • B. SHA-256 produces shorter hashes
  • C. SHA-256 is more collision-resistant
  • D. SHA-256 is symmetric encryption
Explanation:
SHA-256 is considered secure against collisions, whereas MD5 is vulnerable to collision attacks.

What is phishing in the context of cybersecurity?

  • A. Exploiting software vulnerabilities
  • B. Forging digital certificates
  • C. Deceiving users into revealing credentials
  • D. Analyzing network traffic
Explanation:
Phishing is a social engineering attack that tricks users into giving up sensitive information.

Which protocol is used to encrypt web traffic between a browser and a server securely?

  • A. FTP
  • B. HTTP
  • C. TLS
  • D. SMTP
Explanation:
TLS (Transport Layer Security) provides encryption for HTTPS traffic.

What is the purpose of a firewall in network security?

  • A. To block unauthorized access based on rules
  • B. To store sensitive data
  • C. To physically connect network cables
  • D. To encrypt Wi-Fi connections
Explanation:
Firewalls monitor and filter incoming/outgoing network traffic using security rules.

Which of these is NOT considered part of a "defense-in-depth" cybersecurity strategy?

  • A. Firewall
  • B. Antivirus
  • C. Segregation of duties
  • D. Tunneling
Explanation:
Tunneling (e.g., VPN tunneling) is a technique, not a security control like a firewall or antivirus.

Which of these is NOT part of the CIA triad in cybersecurity?

  • A. Confidentiality
  • B. Integrity
  • C. Availability
  • D. Privacy
Explanation:
The CIA triad consists of Confidentiality, Integrity, and Availability; Privacy is a related concept but not one of the three.

What method do astronomers use when they detect exoplanets by observing a star's light dimming at regular intervals?

  • A. Radial velocity method
  • B. Transit method
  • C. Direct imaging
  • D. Astrometry
Explanation:
The transit method identifies exoplanets by periodic dips in a star's brightness as a planet crosses its face.