MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is password reuse in cybersecurity?
   a. Using the same password across multiple accounts
   b. Creating a new password for every account
   c. Storing all passwords in a password manager
   d. Using biometrics instead of a password
   Answer: a. Using the same password across multiple accounts1kosmos+1​
2. Why is password reuse considered dangerous?
   a. It makes accounts easier to remember
   b. It allows synchronized breaches if one site is compromised
   c. It reduces login time
   d. It supports multi-factor authentication
   Answer: b. It allows synchronized breaches if one site is compromisedjetpack+1​
3. Which attack type exploits reused passwords across multiple sites?
   a. Phishing
   b. Ransomware
   c. Credential stuffing
   d. Social engineering
   Answer: c. Credential stuffingsecurebrain+1​
4. What increases the risk of credential stuffing attacks?
   a. Strong unique passwords
   b. Reused passwords
   c. Encrypted passwords
   d. Two-factor authentication
   Answer: b. Reused passwordsjetpack​
5. Password reuse reduces all accounts’ security to the level of:
   a. The strongest site
   b. The least secure site
   c. The most secure network
   d. The administrator’s credentials
   Answer: b. The least secure sitejetpack​
6. What can organizations use to detect password reuse breaches?
   a. Firewall logs
   b. Compromised credential monitoring
   c. Email filters
   d. Network switches
   Answer: b. Compromised credential monitoringsbscyber+1​
7. Which method can help discourage password reuse among employees?
   a. Single Sign-On (SSO) systems
   b. Plain text password storage
   c. Weak password policies
   d. Password sharing
   Answer: a. Single Sign-On (SSO) systemssbscyber​
8. Credential stuffing tools typically rely on:
   a. Unique encryption keys
   b. Stolen credentials from breaches
   c. Random token generation
   d. SSL certificates
   Answer: b. Stolen credentials from breachesjetpack​
9. Which of the following is not a result of password reuse?
   a. Identity theft
   b. Enhanced account security
   c. Financial fraud
   d. Data breaches
   Answer: b. Enhanced account securitysecurebrain+1​
10. What policy helps prevent the use of the same password across accounts?
    a. Password reuse restriction policy
    b. Account recovery policy
    c. Email encryption policy
    d. User activity policy
    Answer: a. Password reuse restriction policystudocu+1​
11. Password reuse makes which type of attack easier?
    a. Zero-day exploit
    b. Brute force attack
    c. DoS attack
    d. SQL injection
    Answer: b. Brute force attackjetpack​
12. Which technique can detect reused passwords during login attempts?
    a. Password hashing comparison
    b. Packet sniffing
    c. Port scanning
    d. DNS caching
    Answer: a. Password hashing comparisonstudocu​
13. One reason people reuse passwords is:
    a. Memorization convenience
    b. Security awareness
    c. Policy enforcement
    d. Use of biometrics
    Answer: a. Memorization convenience1kosmos+1​
14. Password reuse can lead to compromised:
    a. Firewalls
    b. Multi-factor authentication codes
    c. Linked accounts
    d. DNS servers
    Answer: c. Linked accountssecurebrain+1​
15. What tool reduces the need for password reuse?
    a. Password manager
    b. Proxy server
    c. Network sniffer
    d. Encryption algorithm
    Answer: a. Password manager1kosmos+1​
16. Why should users avoid reusing work passwords for personal accounts?
    a. It isolates security domains
    b. It simplifies login
    c. It bypasses encryption
    d. It prevents two-factor use
    Answer: a. It isolates security domainssbscyber+1​
17. What is the best way to manage multiple unique passwords?
    a. Password manager
    b. Password sharing
    c. Sticky notes
    d. Email storage
    Answer: a. Password manager1kosmos+1​
18. What can multi-factor authentication (MFA) do in case of password reuse?
    a. Eliminate all risks
    b. Add extra protection even if the password is reused
    c. Disable password rotation
    d. Let users skip passwords
    Answer: b. Add extra protection even if the password is reused1kosmos+1​
19. Which practice discourages password reuse by policy?
    a. Enforcing unique passwords per account
    b. Allowing password sharing
    c. Disabling password change
    d. Storing passwords in plaintext
    Answer: a. Enforcing unique passwords per accountsbscyber​
20. Password reuse increases the risk due to what type of breach?
    a. Data breach exposing credentials
    b. Hardware failure
    c. Software upgrade
    d. Power outage
    Answer: a. Data breach exposing credentialssecurebrain+1​
21. What human factor contributes most to password reuse?
    a. Lack of training
    b. MFA enforcement
    c. Secure servers
    d. Automated logins
    Answer: a. Lack of trainingsbscyber+1​
22. What is a company’s first line of defense against password reuse attacks?
    a. User education
    b. Network encryption
    c. Backup power
    d. Antivirus scans
    Answer: a. User education1kosmos+1​
23. What can happen if a reused password is part of a data breach?
    a. Multiple accounts can be compromised
    b. Accounts get locked safely
    c. MFA automatically activates
    d. Security remains intact
    Answer: a. Multiple accounts can be compromisedsecurebrain+1​
24. Organizations can mandate password uniqueness via:
    a. Automated compliance tracking
    b. Manual reminders
    c. Email warnings
    d. Disabling MFA
    Answer: a. Automated compliance trackingsbscyber​
25. Which password storage method prevents attackers from retrieving plaintext passwords?
    a. Hashing
    b. Plain text saving
    c. Clipboard copying
    d. Cloud syncing
    Answer: a. Hashingstudocu+1​
26. A reused password across multiple platforms forms what kind of security risk?
    a. Cascading failure
    b. Increased redundancy
    c. Reduced latency
    d. Layered defense
    Answer: a. Cascading failurejetpack​
27. What should companies use to monitor compromised passwords online?
    a. Dark web monitoring
    b. Cloud storage
    c. Email automation
    d. Network printers
    Answer: a. Dark web monitoring1kosmos​
28. What does enforcing a password history policy do?
    a. Prevents reuse of old passwords
    b. Allows repeated use
    c. Disables complexity checks
    d. Reduces password length
    Answer: a. Prevents reuse of old passwordsstudocu+1​
29. What authentication model can eliminate password reuse entirely?
    a. Passwordless authentication
    b. Shared credentials
    c. Default administrative access
    d. Local caching
    Answer: a. Passwordless authentication1kosmos​
30. During a credential stuffing attack, attackers rely on what habit of users?
    a. Reusing passwords
    b. Changing passwords too often
    c. Using MFA
    d. Randomizing passwords
    Answer: a. Reusing passwordsjetpack​
31. Limiting failed login attempts primarily protects against:
    a. Brute force and credential stuffing attacks
    b. Network routing manipulation
    c. DNS hijacking
    d. URL phishing
    Answer: a. Brute force and credential stuffing attacksjetpack​
32. Why is frequent forced password change sometimes counterproductive?
    a. Users may reuse old or weaker passwords
    b. It strengthens password security
    c. It encourages unique passwords
    d. It reduces hack risks
    Answer: a. Users may reuse old or weaker passwords1kosmos​
33. Which system module in Linux helps check passwords for similarity before reuse?
    a. PAM cracklib
    b. SSHD service
    c. Cron daemon
    d. IPTables
    Answer: a. PAM cracklibstudocu​
34. What is a common mistake leading to password reuse at work?
    a. Using personal devices for work accounts
    b. MFA implementation
    c. Password rotation
    d. Account isolation
    Answer: a. Using personal devices for work accountssbscyber+1​
35. In a security context, reusing passwords can create what?
    a. A single point of failure
    b. Distributed protection
    c. Enhanced resilience
    d. Encrypted redundancy
    Answer: a. A single point of failuresecurebrain+1​
36. What online behavior commonly leads to reused passwords being attacked?
    a. Signing up on multiple websites
    b. Using VPNs
    c. Running antivirus software
    d. Avoiding updates
    Answer: a. Signing up on multiple websitesjetpack​
37. What helps organizations ensure password integrity during reuse checks?
    a. Secure hashing algorithms
    b. Plain text comparison
    c. Clipboard backups
    d. File logs
    Answer: a. Secure hashing algorithmsstudocu+1​
38. What factor often determines how quickly attackers exploit reused passwords?
    a. Automation level of credential stuffing tools
    b. Manual password testing
    c. Security policy updates
    d. Server uptime
    Answer: a. Automation level of credential stuffing toolsjetpack​
39. What kind of users are most targeted by reused password exploits?
    a. Users with overlapping personal and work credentials
    b. Admins with MFA
    c. Users with unique passphrases
    d. Offline account holders
    Answer: a. Users with overlapping personal and work credentialssecurebrain+1​
40. Which preventive technology minimizes manual password entry?
    a. Single Sign-On (SSO)
    b. VPN protocols
    c. Router ACLs
    d. Firewall rules
    Answer: a. Single Sign-On (SSO)sbscyber​
41. What should users do after learning their password was part of a breach?
    a. Immediately change passwords on all accounts
    b. Ignore the warning
    c. Use the same password again
    d. Wait for an administrator
    Answer: a. Immediately change passwords on all accounts1kosmos+1​
42. Which common policy enforces password change after compromise?
    a. Mandatory reset policy
    b. Idle timeout
    c. Encryption policy
    d. Backup schedule
    Answer: a. Mandatory reset policysbscyber​
43. Organizations should prevent password reuse primarily to avoid:
    a. Chain breach effects
    b. Overuse of MFA
    c. High bandwidth usage
    d. Software conflicts
    Answer: a. Chain breach effectssecurebrain+1​
44. What type of authentication allows access without reusing passwords?
    a. Biometric authentication
    b. Text-based login
    c. Password replication
    d. Token caching
    Answer: a. Biometric authentication1kosmos​
45. A reused password exposed in one breach may lead to unauthorized access to:
    a. All linked accounts
    b. Encrypted databases
    c. Local devices only
    d. External backups
    Answer: a. All linked accountsjetpack​
46. What habit should organizations encourage to fight password reuse?
    a. Use of password generators
    b. Sharing credentials
    c. Storing passwords in browsers
    d. Skipping password changes
    Answer: a. Use of password generatorssbscyber+1​
47. What employee action most compromises security integrity?
    a. Using the same credentials for cloud tools and social media
    b. Logging out of unused sessions
    c. Using MFA tokens
    d. Setting long passwords
    Answer: a. Using the same credentials for cloud tools and social mediasecurebrain+1​
48. The editing distance between two passwords measures:
    a. How similar a new password is to an old one
    b. Password encryption strength
    c. Keyboard typing speed
    d. Hashing algorithm type
    Answer: a. How similar a new password is to an old onestudocu​
49. How can organizations verify password reuse without storing plain text?
    a. Compare hashed passwords
    b. Store them unencrypted
    c. Monitor keystrokes
    d. Backup databases
    Answer: a. Compare hashed passwordsstudocu​
50. The ultimate solution to password reuse vulnerabilities is:
    a. Implementing passwordless systems
    b. Allowing users to choose simple passwords
    c. Disabling MFA
    d. Using shared company passwords
    Answer: a. Implementing passwordless systemssbscyber+1​

1. https://www.1kosmos.com/security-glossary/password-reuse/
2. https://jetpack.com/resources/password-reuse/
3. https://www.securebrain.co.jp/eng/blog/password-reuse-cybersecurity-risks/
4. https://sbscyber.com/blog/password-reuse-prevention
5. https://www.studocu.com/in/document/sikkim-manipal-university/information-communication-technology/some-websites-wont-allow-you-to-reuse-an-old-password-when-changing-your-current-one-if-the-administrator-does-not-store-your-past-passwords-how-does-it-know-if-one-of-your-new-passwords-matches-an/32126368
6. https://www.sanfoundry.com/cyber-security-questions-answers-password-cracking-security-measures-1/
7. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
8. https://examradar.com/password-policies-and-best-practices-in-web-security-mcqs/
9. https://www.scribd.com/document/862261556/Unit-5-Cyber-Security-MCQs
10. https://www.enzoic.com/blog/the-consequences-of-password-reuse/
11. https://cybersecurityventures.com/wp-content/uploads/2020/03/Cybersecurity-Quiz.pdf
12. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
13. https://www.cyber.gc.ca/en/guidance/rethink-your-password-habits-protect-your-accounts-hackers-itsap30036
14. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
15. https://delinea.com/blog/20-password-management-best-practices
16. https://johnopdenakker.com/security-awareness-quiz-answers/
17. https://www.techtarget.com/searchsecurity/quiz/Quiz-Security-awareness-for-end-users
18. https://kb.wisc.edu/security/148150
19. https://www.studocu.com/en-us/messages/question/6166293/is-reusing-passwords-by-users-considered-being-a-cybersecurity-vulnerability-question-36answer-a
20. https://blog.barracuda.com/2025/10/08/cybersecurity-awareness-month-make-strong-password-security-habits