Start Exam
Login / Register

Blog

MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

  1. In _________________ attacks, the attacker manages to get an application to execute an SQL query created by the attacker.
    a. SQL injection
    b. SQL
    c. Direct
    d. Application
    Answer: asanfoundry
  2. A website that allows users to enter text, such as a comment or a name, and then stores it and later displays it to other users, is potentially vulnerable to a kind of attack called a ___________________ attack.
    a. Two-factor authentication
    b. Cross-site request forgery
    c. Cross-site scripting
    d. Cross-site scoring scripting
    Answer: csanfoundry
  3. _________ is an attack which forces an end user to execute unwanted actions on a web application in which he/she is currently authenticated.
    a. Two-factor authentication
    b. Cross-site request forgery
    c. Cross-site scripting
    d. Cross-site scoring scripting
    Answer: bsanfoundry
  4. Many applications use _________________ where two independent factors are used to identify a user.
    a. Two-factor authentication
    b. Cross-site request forgery
    c. Cross-site scripting
    d. Cross-site scoring scripting
    Answer: asanfoundry
  5. Even with two-factor authentication, users may still be vulnerable to_____________ attacks.
    a. Radiant
    b. Cross attack
    c. Scripting
    d. Man-in-the-middle
    Answer: dsanfoundry
  6. A single ______________ further allows the user to be authenticated once, and multiple applications can then verify the user’s identity through an authentication service without requiring reauthentication.
    a. OpenID
    b. Sign-on system
    c. Security Assertion Markup Language (SAML)
    d. Virtual Private Database (VPD)
    Answer: bsanfoundry
  7. The ___________________ is a standard for exchanging authentication and authorization information between different security domains, to provide cross-organization single sign-on.
    a. OpenID
    b. Sign-on system
    c. Security Assertion Markup Language (SAML)
    d. Virtual Private Database (VPD)
    Answer: csanfoundry
  8. The __________ standard is an alternative for single sign-on across organizations.
    a. OpenID
    b. Single-site system
    c. Security Assertion Markup Language (SAML)
    d. Virtual Private Database (VPD)
    Answer: asanfoundry
  9. _______________ allows a system administrator to associate a function with a relation; the function returns a predicate that must be added to any query that uses the relation.
    a. OpenID
    b. Single-site system
    c. Security Assertion Markup Language (SAML)
    d. Virtual Private Database (VPD)
    Answer: dsanfoundry
  10. VPD provides authorization at the level of specific tuples, or rows, of a relation, and is therefore said to be a _____________ mechanism.
    a. Row-level authorization
    b. Column-level authentication
    c. Row-type authentication
    d. Authorization security
    Answer: asanfoundry
  11. When an attempt is to make a machine or network resource unavailable to its intended users, the attack is called:
    a. Denial-of-service attack
    b. Slow read attack
    c. Spoofed attack
    d. Starvation attack
    Answer: apdearmacs
  12. The code segment that misuses its environment is called a:
    a. Internal thief
    b. Trojan horse
    c. Code stacker
    d. None of the mentioned
    Answer: bpdearmacs
  13. The internal code of any software that will set off a malicious function when specified conditions are met is called:
    a. Logic bomb
    b. Trap door
    c. Code stacker
    d. None of the mentioned
    Answer: apdearmacs
  14. The pattern that can be used to identify a virus is known as:
    a. Stealth
    b. Virus signature
    c. Armoured
    d. Multipartite
    Answer: bpdearmacs
  15. Which one of the following is a process that uses the spawn mechanism to ravage the system performance?
    a. Worm
    b. Trojan
    c. Threat
    d. Virus
    Answer: apdearmacs
  16. What is a trap door in a program?
    a. Security hole, inserted at programming time in the system for later use
    b. Type of antivirus
    c. Security hole in a network
    d. None of the mentioned
    Answer: apdearmacs
  17. Which one of the following is not an attack, but a search for vulnerabilities to attack?
    a. Denial of service
    b. Port scanning
    c. Memory access violation
    d. Dumpster diving
    Answer: bpdearmacs
  18. File virus attaches itself to the:
    a. Source file
    b. Object file
    c. Executable file
    d. All of the mentioned
    Answer: cpdearmacs
  19. Multipartite viruses attack:
    a. Files
    b. Boot sector
    c. Memory
    d. All of the mentioned
    Answer: dpdearmacs
  20. In asymmetric encryption:
    a. Same key is used for encryption and decryption
    b. Different keys are used for encryption and decryption
    c. No key is required
    d. None of the mentioned
    Answer: bpdearmacs
  21. In computer security, which of the following means that computer system assets can be modified only by authorized parties?
    a. Confidentiality
    b. Integrity
    c. Availability
    d. Authenticity
    Answer: bpdearmacs
  22. In computer security, which means that information in a computer system is accessible for reading only by authorized parties?
    a. Confidentiality
    b. Integrity
    c. Availability
    d. Authenticity
    Answer: apdearmacs
  23. Which threats on the security of a computer system or network are correct?
    a. Interruption, Interception, Modification, Creation
    b. Interception, Modification, Creation, Fabrication
    c. Interruption, Interception, Modification, Fabrication
    d. All: Interruption, Interception, Modification, Creation, Fabrication
    Answer: cpdearmacs
  24. Which of the following is an independent malicious program that does not need any host program?
    a. Trap doors
    b. Trojan horse
    c. Virus
    d. Worm
    Answer: dpdearmacs
  25. The code that recognizes some special sequence of input or is triggered by certain user ID or events is called:
    a. Trap doors
    b. Trojan horse
    c. Logic bomb
    d. Virus
    Answer: apdearmacs
  26. The code embedded in some legitimate program that is set to “explode” when certain conditions are met is called:
    a. Trap doors
    b. Trojan horse
    c. Logic bomb
    d. Virus
    Answer: cpdearmacs
  27. Which of the following malicious programs do not replicate automatically?
    a. Trojan Horse
    b. Virus
    c. Worm
    d. Zombie
    Answer: apdearmacs
  28. _______ programs can be used to accomplish functions indirectly that an unauthorized user could not accomplish directly.
    a. Zombie
    b. Worm
    c. Trojan Horse
    d. Logic Bomb
    Answer: cpdearmacs
  29. State whether the following is True or False:
    i) A worm mails a copy of itself to other systems.
    ii) A worm executes a copy of itself on another system.
    a. True, False
    b. False, True
    c. True, True
    d. False, False
    Answer: cpdearmacs
  30. A ________ is a program that can infect other programs by modifying them, the modification includes a copy of the virus program.
    a. Worm
    b. Virus
    c. Zombie
    d. Trap doors
    Answer: bpdearmacs
  31. First model designed for the information security is:
    a. Bell-LaPadula model
    b. Biba Model
    c. Clark-Wilson Model
    d. Chinese Wall model
    Answer: apdearmacs
  32. The main important thing about Biba model is:
    a. Confidentiality
    b. Integrity
    c. Availability
    d. Preventing data
    Answer: bpdearmacs
  33. Ability to read information from a company only once is the goal of:
    a. Bell-LaPadula model
    b. Biba Model
    c. Clark-Wilson Model
    d. Chinese Wall model
    Answer: dpdearmacs
  34. The Clark-Wilson model includes ___________ of the data for security.
    a. Confidentiality
    b. Integrity
    c. Availability
    d. Preventing data
    Answer: apdearmacs
  35. What are the priority for security levels?
    a. Unclassified data > Secret > Confidential > Top secret
    b. Secret > Confidential > Unclassified data > Top secret
    c. Top secret > Secret > Confidential > Unclassified data
    d. Unclassified data > Confidential > Secret > Top secret
    Answer: cpdearmacs
  36. ________ is to protect data and passwords.
    a. Encryption
    b. Authentication
    c. Authorization
    d. Non-repudiation
    Answer: apdearmacs
  37. The primary goal of the _______ protocol is to provide a private channel between communicating applications.
    a. SSL
    b. ESP
    c. TSL
    d. PSL
    Answer: apdearmacs
  38. _________ is used to provide integrity check, authentication, and encryption to IP datagram.
    a. SSL
    b. ESP
    c. TSL
    d. PSL
    Answer: bpdearmacs
  39. In _______ mode, a common technique in packet-switched networks consists of wrapping a packet in a new one.
    a. Tunneling
    b. Encapsulation
    c. Both A and B
    d. None of the above
    Answer: cpdearmacs
  40. At the lower layer of SSL, the protocol for transferring data using a variety of predefined cipher and authentication combinations is called the:
    a. SSL handshake protocol
    b. SSL authentication protocol
    c. SSL record protocol
    d. SSL cipher protocol
    Answer: cpdearmacs
  41. On the upper layer of SSL, the protocol for initial authentication and transfer of encryption keys is called:
    a. SSL handshake protocol
    b. SSL authentication protocol
    c. SSL record protocol
    d. SSL cipher protocol
    Answer: apdearmacs
  42. What is used for database security?
    a. Data encryption
    b. A view
    c. Fingerprint
    d. All of the above
    Answer: dpdearmacs
  43. Prevention of access to the database by unauthorized users is referred to as:
    a. Integrity
    b. Productivity
    c. Security
    d. Reliability
    Answer: cpdearmacs
  44. Authentication refers to:
    a. Methods of restricting user access to system
    b. Controlling access to portions of database
    c. Controlling the operation on the data
    d. All of the above
    Answer: dpdearmacs
  45. Data integrity means:
    a. Providing first access to stored data
    b. Ensuring correctness and consistency of data
    c. Providing data sharing
    d. None of the above
    Answer: bpdearmacs
  46. Operating system security is the process of ensuring OS integrity, confidentiality, and ____________.
    a. Threats
    b. Virus
    c. Techniques
    d. Availability
    Answer: dpdearmacs
  47. In computer security, a ________ is a weakness which allows an attacker to reduce a system’s information assurance.
    a. Vulnerability
    b. Integrity
    c. Hacking
    d. Risk
    Answer: apdearmacs
  48. ________ is an example of vulnerabilities.
    a. Personnel
    b. Hardware
    c. Software
    d. All of the above
    Answer: dpdearmacs
  49. ________ is a common type of software flaw that leads to vulnerabilities.
    a. SQL injection
    b. Social engineering
    c. Management
    d. Firewalls
    Answer: apdearmacs
  50. Microsoft no longer provides updates for __________ operating system.
    a. Windows XP
    b. Apple
    c. Linux
    d. Windows NT
    Answer: apdearmacs

 

  1. https://www.sanfoundry.com/database-mcqs-application-security/
  2. https://pdearmacs.edu.in/CyberSecurity/41_MCQ’s%20with%20Solutions.pdf
  3. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
  4. https://www.igmguru.com/blog/cyber-security-mcqs
  5. https://www.interviewbit.com/cyber-security-mcq/
  6. https://www.crowdstrike.com/en-us/cybersecurity-101/application-security/
  7. https://examradar.com/mobile-application-security-mcqs-multiple-choice-questions-with-answer/
  8. https://www.scribd.com/document/488601324/Cyber-security-MCQ-NOTES
  9. https://www.balbix.com/insights/application-security-appsec-and-its-importance/
  10. https://testbook.com/objective-questions/mcq-on-owasp-top-10-vulnerabilities–5eea6a0d39140f30f369e30b
  11. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
  12. https://www.fortinet.com/resources/cyberglossary/application-security
  13. https://qaautomation.expert/2025/03/04/multiple-choice-questions-for-security-testing-on-web-application/
  14. https://byjus.com/gate/cyber-security-mcqs/
  15. https://www.ibm.com/think/topics/application-security
  16. https://timoh6.github.io/WebAppSecQuiz/answers.html
  17. https://www.broadcom.com/topics/application-security
  18. https://www.scribd.com/document/750579856/Web-Application-and-Security-MCQ
  19. https://www.imperva.com/learn/application-security/application-security/
  20. https://csiplearninghub.com/web-application-and-security-class-10-mcq-questions/
Picture of Systemethic Technologies

Systemethic Technologies

All Posts »

Leave a Reply

Your email address will not be published. Required fields are marked *

error: Content is protected !!