MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is the main goal of implementing account policies in cybersecurity?
   a. Increase account privileges
   b. Restrict unauthorized access
   c. Allow password sharing
   d. Eliminate password requirements
   Answer: b. Restrict unauthorized accesspearsonitcertification+1
2. Which of the following is typically controlled by account policies?
   a. Display settings
   b. Wallpaper selection
   c. Password requirements
   d. Clipboard history
   Answer: c. Password requirementsexamradar
3. What does the password complexity setting enforce?
   a. Use of screen savers
   b. Minimum number of password characters
   c. Combination of uppercase, lowercase, numbers, and symbols
   d. Number of open windows
   Answer: c. Combination of uppercase, lowercase, numbers, and symbolsexamradar
4. Which setting determines how long a password can be used before it must be changed?
   a. Maximum Password Age
   b. Minimum Password Age
   c. Password History
   d. Account Lockout Duration
   Answer: a. Maximum Password Agescribd
5. An account is temporarily disabled after several failed login attempts due to which policy?
   a. Firewall policy
   b. Account Lockout Policy
   c. Network Policy
   d. Antivirus policy
   Answer: b. Account Lockout Policysciencedirect+1
6. What is the recommended minimum password length for secure policy?
   a. 4
   b. 6
   c. 8
   d. 10
   Answer: c. 8examradar
7. Why use password expiration policies?
   a. To allow easier password recall
   b. To reduce password resets
   c. To limit how long a compromised password can be used
   d. To make passwords simple
   Answer: c. To limit how long a compromised password can be usedscribd+1
8. Which statement about password reuse is correct?
   a. Is recommended for convenience
   b. Can open risks if one account is compromised
   c. Is enforced by all systems
   d. Is a default policy
   Answer: b. Can open risks if one account is compromisedexamradar
9. What is the function of password history in account policies?
   a. Saves browser passwords
   b. Prevents recent passwords from being reused
   c. Stores account creation date
   d. Tracks user locations
   Answer: b. Prevents recent passwords from being reusedscribd
10. Account lockout threshold refers to:
    a. Number of users per account
    b. Maximum storage per account
    c. Number of failed login attempts before lockout
    d. File size limits
    Answer: c. Number of failed login attempts before lockoutgauthmath+1
11. What could occur if account lockout duration is set too long?
    a. Users can always log in
    b. Increased risk of Denial of Service
    c. Accounts never lock
    d. No security change
    Answer: b. Increased risk of Denial of Servicesciencedirect
12. Which of the following describes multi-factor authentication?
    a. Password only
    b. Username only
    c. Password and another verification method
    d. Single sign-on
    Answer: c. Password and another verification methodtestbook
13. Allowing administrator accounts to be locked out is generally:
    a. Recommended for all environments
    b. Not recommended for reliability
    c. Required by default
    d. Irrelevant to security
    Answer: b. Not recommended for reliabilitygauthmath
14. The minimum password age policy prevents users from doing what?
    a. Changing wallpaper
    b. Quickly cycling through passwords to reuse old ones
    c. Logging in from mobile devices
    d. Sharing files
    Answer: b. Quickly cycling through passwords to reuse old onesscribd
15. Which policy can help prevent brute force attacks?
    a. Extended screen timeout
    b. Account Lockout Policy
    c. File Encryption Policy
    d. Software Update Policy
    Answer: b. Account Lockout Policyaskfilo+1
16. What does the reset account lockout counter after policy define?
    a. How soon a forgotten password can be reset
    b. How long after a failed attempt the lockout counter resets
    c. Boot time for the system
    d. Number of devices allowed
    Answer: b. How long after a failed attempt the lockout counter resetssciencedirect
17. Password complexity requirements do NOT include:
    a. Lowercase letters
    b. Special characters
    c. User’s username
    d. Numbers
    Answer: c. User’s usernameexamradar
18. What happens if an account lockout threshold is set to zero?
    a. Accounts are always locked
    b. Accounts are never locked out
    c. Passwords expire faster
    d. All users need MFA
    Answer: b. Accounts are never locked outsciencedirect
19. Storing passwords in browsers is:
    a. Secure by default
    b. A best practice
    c. Not recommended due to risk of theft
    d. Mandatory for all users
    Answer: c. Not recommended due to risk of theftview.ceros
20. A common minimum for “password history” to prevent reuse is:
    a. 1
    b. 3
    c. 5
    d. 50
    Answer: c. 5scribd
21. Which is NOT a benefit of strong account policies?
    a. Enhanced security
    b. Reduced password sharing
    c. Increased phishing risk
    d. Mitigated brute force attacks
    Answer: c. Increased phishing risktestbook+1
22. Which of the following helps secure remote logins?
    a. Open Wi-Fi
    b. Simple passwords
    c. Enforced MFA
    d. Shared accounts
    Answer: c. Enforced MFAtestbook
23. Enabling account lockout policy impacts which attack?
    a. Phishing
    b. Brute-force attacks
    c. Ransomware
    d. Rootkits
    Answer: b. Brute-force attackssciencedirect+1
24. The purpose of a maximum password age is to:
    a. Allow indefinite password use
    b. Encourage regular password updates
    c. Increase system boot speed
    d. Reduce lockouts
    Answer: b. Encourage regular password updatesscribd
25. Which of the following is a common account lockout threshold value?
    a. 2
    b. 3
    c. 10
    d. 50
    Answer: b. 3gauthmath+1
26. Enabling password hints:
    a. Is mandatory in all systems
    b. Can reveal password clues to attackers
    c. Is a secure default
    d. Prevents brute force
    Answer: b. Can reveal password clues to attackersexamradar
27. What is the effect of a high account lockout threshold?
    a. Increased password complexity
    b. Less frequent lockouts
    c. More exposure to brute force
    d. Reduced access
    Answer: c. More exposure to brute forcesciencedirect
28. Which policy restricts how many times a password can be changed in a given period?
    a. Maximum Password Age
    b. Minimum Password Age
    c. Password History
    d. Account Lockout Duration
    Answer: b. Minimum Password Agescribd
29. Which of the following improves password retention and security?
    a. Password managers
    b. Writing passwords on paper
    c. Using simple passwords
    d. Saving in emails
    Answer: a. Password managersview.ceros+1
30. Account lockout duration set to zero means:
    a. Account never unlocks automatically
    b. Account unlocks after 5 minutes
    c. No lockout occurs
    d. Threshold is ignored
    Answer: a. Account never unlocks automaticallysciencedirect
31. What happens if a password expires?
    a. Account is deleted
    b. User is prompted to set a new password
    c. System login is bypassed
    d. User gets admin rights
    Answer: b. User is prompted to set a new passwordexamradar+1
32. Which principle helps minimize the risk by granting only the needed access?
    a. Least Privilege
    b. Most Privilege
    c. Open Access
    d. Role Switching
    Answer: a. Least Privilegeexamradar
33. A weak password is often:
    a. Short and simple
    b. Unique and complex
    c. System-assigned
    d. Randomized
    Answer: a. Short and simpleexamradar
34. What is the result of not applying any account policy?
    a. Increased security
    b. Higher risk of unauthorized access
    c. Reduced password resets
    d. Improved speed
    Answer: b. Higher risk of unauthorized accesspearsonitcertification+1
35. Which authentication method is considered most secure?
    a. Password only
    b. Password and token
    c. Username only
    d. Password hint
    Answer: b. Password and tokentestbook
36. Passwords should never include:
    a. Lowercase characters
    b. User’s personal information
    c. Numbers
    d. Special characters
    Answer: b. User’s personal informationexamradar
37. Locking an account after repeated failed attempts helps to:
    a. Allow unlimited tries
    b. Reduce lockouts
    c. Defend against automated password guessing
    d. Increase user satisfaction
    Answer: c. Defend against automated password guessingsciencedirect
38. When should passwords be shared?
    a. Only with trusted friends
    b. Never
    c. On weekends
    d. With IT administrators always
    Answer: b. Neverexamradar
39. User account policy reviews should be conducted:
    a. Only at initial setup
    b. Periodically as part of regular security maintenance
    c. When users request
    d. Every ten years
    Answer: b. Periodically as part of regular security maintenanceexamradar+1
40. What should be done if a user suspects their password is compromised?
    a. Ignore it
    b. Change password immediately
    c. Tell coworker
    d. Remove account lockout
    Answer: b. Change password immediatelyexamradar
41. Which technique can be used to enforce unique user credentials?
    a. Shared logins
    b. Strong authentication policies
    c. Guest accounts
    d. No password requirements
    Answer: b. Strong authentication policiesexamradar
42. A best practice for password policy is to:
    a. Allow simple, short passwords
    b. Require regular changes and complexity
    c. Never expire passwords
    d. Allow default passwords
    Answer: b. Require regular changes and complexityexamradar
43. An account disabled after inactivity is due to which policy?
    a. Account Lockout
    b. Account Expiration/Disable policy
    c. Password History
    d. MFA
    Answer: b. Account Expiration/Disable policyexamradar
44. Why should user accounts be disabled after an employee leaves?
    a. Reduce costs
    b. Prevent unauthorized access
    c. Allow memory of past users
    d. Increase speed
    Answer: b. Prevent unauthorized accessexamradar
45. Shared accounts pose a risk because:
    a. They provide administrative oversight
    b. They obscure accountability and are harder to track
    c. They reduce attacks
    d. They are more secure
    Answer: b. They obscure accountability and are harder to trackexamradar
46. Which policy can require users to update their password every 60 days?
    a. Minimum Password Age
    b. Maximum Password Age
    c. Password Complexity
    d. Password History
    Answer: b. Maximum Password Agescribd
47. To limit concurrent sessions by a user, which policy is used?
    a. Password Complexity
    b. Session Limiting or Concurrent Logon policy
    c. Account Lockout
    d. Password Expiration
    Answer: b. Session Limiting or Concurrent Logon policyexamradar
48. What should NOT be used for answers to security questions?
    a. User’s birthday
    b. Randomized information
    c. Nonsense words
    d. Unique data
    Answer: a. User’s birthdayexamradar
49. An audit of account changes can help detect:
    a. Unauthorized activity
    b. Increased productivity
    c. Password length issues
    d. Network congestion
    Answer: a. Unauthorized activityexamradar
50. Which principle ensures that users have only the access they need to perform their duties?
    a. Least Privilege Principle
    b. Deny All Principle
    c. Open Access Principle
    d. Redundancy Principle
    Answer: a. Least Privilege Principleexamradar

1. https://www.pearsonitcertification.com/articles/article.aspx?p=3197450&seqNum=6
2. https://examradar.com/user-management-and-access-control-mcqs-multiple-choice-questions-with-answer/
3. https://examradar.com/password-policies-and-best-practices-in-web-security-mcqs/
4. https://www.scribd.com/document/869709840/Practice-MCQs-200
5. https://www.sciencedirect.com/topics/computer-science/account-lockout-policy
6. https://askfilo.com/user-question-answers-smart-solutions/which-policy-or-set-of-rules-temporarily-disables-an-account-3334353739343735
7. https://www.gauthmath.com/solution/1811363329497093/-8-of-19-Match-the-following-Lockout-policies-with-their-best-setting-as-discuss
8. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
9. https://view.ceros.com/fidelity-interactive/password-security-quiz
10. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
11. https://www.interviewbit.com/cyber-security-mcq/
12. https://www.studocu.com/in/document/rashtrasant-tukadoji-maharaj-nagpur-university/cyber-security/cyber-law-and-security-policy-mcq/16482442
13. https://otech.guam.gov/cybersecquiz/
14. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
15. https://cybersafework.com/password-security-quiz/
16. https://www.scribd.com/document/528019182/MCQ-Cyber-Law
17. https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/quiz/basics
18. https://www.igmguru.com/blog/cyber-security-mcqs
19. https://purplegriffon.com/quizzes/cyber-security-quiz-questions-and-answers
20. https://concertium.com/managed-cybersecurity-services/password-security-quiz/