MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Security groups in cybersecurity are most commonly associated with which environment?
   a. Physical network devices
   b. Cloud computing platforms
   c. Operating systems
   d. IoT networks
   Answer: b. Cloud computing platformsalooba​
2. Which of the following best describes the purpose of a security group?
   a. Manages DNS resolution and routing
   b. Controls allowed traffic to and from cloud resources
   c. Stores cryptographic keys for encryption
   d. Handles server monitoring duties
   Answer: b. Controls allowed traffic to and from cloud resourcesalooba​
3. In AWS, a security group acts as a:
   a. Stateless firewall
   b. Stateful firewall
   c. Packet sniffer
   d. Traffic load balancer
   Answer: b. Stateful firewallaws.amazon​
4. In cloud computing, security groups are typically applied to:
   a. Databases only
   b. Compute instances and network interfaces
   c. User authentication systems
   d. Operating system processes
   Answer: b. Compute instances and network interfacesoracle​
5. A security group rule defines which of the following parameters?
   a. CPU cores and memory allocations
   b. Allowed protocols and ports for traffic
   c. Encryption level settings
   d. Log file sizes
   Answer: b. Allowed protocols and ports for trafficaws.amazon​
6. Which company uses the term “Network Security Group” to describe its virtual firewall resource?
   a. Amazon Web Services
   b. Microsoft Azure
   c. Google Cloud
   d. Oracle Cloud
   Answer: b. Microsoft Azurelearn.microsoft​
7. AWS security groups can control traffic based on:
   a. IP addresses and ports
   b. Usernames and passwords
   c. Encrypted keys
   d. Digital certificates only
   Answer: a. IP addresses and portsaws.amazon​
8. Security groups in Azure operate at which network layer?
   a. Layer 1
   b. Layer 3
   c. Layer 4
   d. Layer 7
   Answer: c. Layer 4learn.microsoft​
9. Which of the following statements about AWS security groups is true?
   a. Rules are prioritized sequentially
   b. Rules are processed as a unified set without order
   c. The last rule always overrides previous ones
   d. Rules apply only to internal traffic
   Answer: b. Rules are processed as a unified set without orderaws.amazon​
10. In cloud security, the default behavior of a security group is to:
    a. Allow all incoming traffic
    b. Deny all outbound traffic
    c. Deny all inbound and allow all outbound
    d. Deny all traffic by default
    Answer: c. Deny all inbound and allow all outboundaws.amazon​
11. Security groups are primarily used instead of which traditional network component?
    a. MAC addresses
    b. Static routing tables
    c. On-premise firewalls
    d. User control panels
    Answer: c. On-premise firewallsalooba​
12. What is an ingress rule in a security group?
    a. A rule controlling outbound data
    b. A rule controlling inbound data
    c. A log inspection rule
    d. A user authentication step
    Answer: b. A rule controlling inbound dataaws.amazon​
13. Which of the following is not a valid element of a security group rule?
    a. Protocol type
    b. Source/destination port range
    c. Instance ID
    d. Source IP address
    Answer: c. Instance IDaws.amazon​
14. In AWS, outbound traffic is defined by which term in security group configuration?
    a. Egress rule
    b. Ingress rule
    c. Session key rule
    d. ACL rule
    Answer: a. Egress ruleaws.amazon​
15. A key difference between Network ACLs and Security Groups is that:
    a. ACLs are stateful, Security Groups are stateless
    b. ACLs are stateless, Security Groups are stateful
    c. Both are stateless
    d. Both are stateful
    Answer: b. ACLs are stateless, Security Groups are statefulcybr​
16. In Oracle Cloud, what does an NSG (Network Security Group) secure?
    a. Groups of VNICs attached to compute instances
    b. Only subnet gateways
    c. Storage buckets
    d. Operating system kernels
    Answer: a. Groups of VNICs attached to compute instancesoracle​
17. Which AWS component must be associated with a security group?
    a. S3 bucket
    b. EC2 instance
    c. Lambda function
    d. CloudFormation stack
    Answer: b. EC2 instanceaws.amazon​
18. What type of control do security groups enforce?
    a. Identity-based access
    b. Network-based access
    c. File permissions control
    d. Application logic control
    Answer: b. Network-based accessalooba​
19. Azure Network Security Groups (NSGs) are applied to:
    a. Virtual Networks and Resource Groups
    b. Subnets and Network Interfaces
    c. Resource Manager templates
    d. Azure Key Vaults
    Answer: b. Subnets and Network Interfaceslearn.microsoft​
20. Security groups help organizations meet compliance requirements such as:
    a. PCI DSS and HIPAA
    b. SMTP and DNS
    c. API and SDK
    d. TCP/IP
    Answer: a. PCI DSS and HIPAAalooba​
21. Which default action applies if no rule matches traffic in AWS Security Groups?
    a. Allow traffic
    b. Deny traffic
    c. Log and alert
    d. Queue traffic for administrator review
    Answer: b. Deny trafficaws.amazon​
22. Security groups in GCP are functionally similar to which feature?
    a. IAM roles
    b. Firewall rules
    c. Resource labels
    d. Route tables
    Answer: b. Firewall rulescloudoptimo​
23. Which layer of the OSI model relates most to security group functionality?
    a. Application layer
    b. Network layer
    c. Transport layer
    d. Physical layer
    Answer: c. Transport layerlearn.microsoft​
24. Azure NSG rules include which priority features?
    a. User-defined priorities
    b. Predefined uneditable order
    c. Hash-based evaluation
    d. Alphabetical sorting
    Answer: a. User-defined prioritieslearn.microsoft​
25. AWS security group rules are evaluated based on:
    a. Explicit allow lists
    b. Implicit deny lists
    c. Sequential rule order
    d. Random selection
    Answer: a. Explicit allow listsaws.amazon​
26. Oracle Cloud NSG rules can control:
    a. Database encryption algorithms
    b. Traffic flow between different virtual tiers
    c. Cloud console authentication
    d. IAM group permissions
    Answer: b. Traffic flow between different virtual tiersoracle​
27. AWS Security Groups can be referenced by:
    a. Other security groups
    b. S3 bucket policies
    c. Lambda triggers
    d. Route 53 records
    Answer: a. Other security groupsaws.amazon​
28. Which AWS protocol is often allowed for SSH access in security groups?
    a. TCP port 22
    b. UDP port 67
    c. TCP port 443
    d. UDP port 161
    Answer: a. TCP port 22aws.amazon​
29. Security groups ensure that:
    a. Resources are isolated from unauthorized traffic
    b. Logs are encrypted
    c. IAM roles are configured
    d. Data is automatically backed up
    Answer: a. Resources are isolated from unauthorized trafficalooba​
30. Which Azure resource is protected by NSGs?
    a. Azure Virtual Machine
    b. Microsoft 365 mailbox
    c. Power BI dataset
    d. Azure Cosmos DB
    Answer: a. Azure Virtual Machinelearn.microsoft​
31. Oracle Network Security Groups primarily help:
    a. Connect private endpoints
    b. Enforce consistent policies across compute tiers
    c. Replicate configurations automatically
    d. Manage SQL injections
    Answer: b. Enforce consistent policies across compute tiersoracle​
32. GCP’s network security equivalent of an NSG uses:
    a. VPC firewall rules
    b. Bucket ACLs
    c. Project IAM bindings
    d. Pub/Sub permissions
    Answer: a. VPC firewall rulescloudoptimo​
33. Security groups can help detect abnormal traffic patterns through:
    a. Flow logs
    b. JSON templates
    c. Access tokens
    d. Session cookies
    Answer: a. Flow logsalooba​
34. Which AWS tool logs activity related to security group changes?
    a. CloudWatch
    b. CloudTrail
    c. Inspector
    d. Shield
    Answer: b. CloudTrailaws.amazon​
35. A security group in AWS VPC applies at the:
    a. Instance level
    b. VPC level
    c. Region level
    d. Subnet level
    Answer: a. Instance levelaws.amazon​
36. Security groups differ from ACLs because they:
    a. Track traffic state
    b. Reject all output by default
    c. Use a higher priority list
    d. Operate outside VPCs
    Answer: a. Track traffic statecybr​
37. Azure NSGs can be associated with multiple:
    a. Subnets or network interfaces
    b. Virtual machines only
    c. Key vaults
    d. Azure AD tenants
    Answer: a. Subnets or network interfaceslearn.microsoft​
38. What happens when you delete an AWS security group attached to a resource?
    a. It automatically replaces itself
    b. The resource becomes unprotected
    c. The system assigns the default security group
    d. Traffic continues uninterrupted
    Answer: c. The system assigns the default security groupaws.amazon​
39. Which protocol is commonly restricted in security groups to prevent data exfiltration?
    a. ICMP
    b. SMTP
    c. HTTPS
    d. POP3
    Answer: b. SMTPalooba​
40. Security groups are enforced by:
    a. Kernel-level packet filtering
    b. Virtualized network layer
    c. Hardware firewalls
    d. Application proxies
    Answer: b. Virtualized network layerlearn.microsoft​
41. AWS allows a maximum of how many rules per security group by default?
    a. 10
    b. 20
    c. 60
    d. 100
    Answer: d. 100aws.amazon​
42. An inbound rule in AWS that permits SSH from any IP should specify:
    a. 0.0.0.0/0
    b. 127.0.0.1
    c. 10.0.0.0/16
    d. 192.168.1.0/24
    Answer: a. 0.0.0.0/0aws.amazon​
43. Azure NSG rules can be created using:
    a. PowerShell, CLI, or Portal
    b. AWS CLI
    c. SSH terminal only
    d. Microsoft Teams
    Answer: a. PowerShell, CLI, or Portallearn.microsoft​
44. Which factor differentiates egress and ingress rules?
    a. Direction of traffic
    b. Encryption requirement
    c. Application dependency
    d. Storage location
    Answer: a. Direction of trafficaws.amazon​
45. When no security group is assigned to an AWS instance, which applies?
    a. No traffic passes
    b. A default security group is attached
    c. The instance is inaccessible
    d. User is prompted to create one
    Answer: b. A default security group is attachedaws.amazon​
46. Oracle NSGs can work together to control:
    a. Tier-to-tier communication
    b. IAM authentication
    c. File system replication
    d. Container image scanning
    Answer: a. Tier-to-tier communicationoracle​
47. In Azure, NSG rules can be labeled for:
    a. Logging and auditing
    b. Replication
    c. Licensing
    d. Temporary caching
    Answer: a. Logging and auditinglearn.microsoft​
48. Google Cloud allows security group-like enforcement through:
    a. Hierarchical firewall policies
    b. IAM role constraints
    c. Organizational bindings
    d. VPN-only routes
    Answer: a. Hierarchical firewall policiescloudoptimo​
49. Security groups are crucial for compliance because they:
    a. Enforce least privilege network access
    b. Store private encryption keys
    c. Maintain user passwords
    d. Log identity changes automatically
    Answer: a. Enforce least privilege network accessalooba​
50. The best practice for managing security groups in cloud environments is to:
    a. Enable least privilege and review regularly
    b. Allow all traffic for easy testing
    c. Delete all egress rules
    d. Disable default logging
    Answer: a. Enable least privilege and review regularlyalooba​

1. https://www.alooba.com/skills/tools/networking-400/firewalls-and-security-groups/
2. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-groups.html
3. https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/networksecuritygroups.htm
4. https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
5. https://cybr.com/cloud-security/network-access-control-lists-nacls-and-security-groups-sgs/
6. https://www.cloudoptimo.com/blog/aws-vs-azure-vs-gcp-evaluating-cross-cloud-security-models/
7. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
8. https://www.igmguru.com/blog/cyber-security-mcqs
9. https://byjus.com/gate/cyber-security-mcqs/
10. https://www.placementpreparation.io/mcq/cyber-security/
11. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
12. https://www.pluralsight.com/resources/blog/cloud/cloud-security-comparison-aws-vs-azure-vs-gcp
13. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
14. https://cloud.google.com/docs/get-started/aws-azure-gcp-service-comparison
15. https://www.fortinet.com/resources/cyberglossary/what-is-network-access-control
16. https://www.w3schools.com/cybersecurity/cybersecurity_quiz.php
17. https://www.interviewbit.com/cyber-security-mcq/
18. https://www.sysdig.com/learn-cloud-native/threat-detection-in-the-cloud-defender-vs-guardduty-vs-security-command-center
19. https://www.scribd.com/document/488601324/Cyber-security-MCQ-NOTES
20. https://interviewkickstart.com/blogs/articles/cyber-security-mcqs-answers