MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is the primary function of a captive portal in network security?
   a. To encrypt data traffic
   b. To authenticate users before granting network access
   c. To monitor network bandwidth
   d. To prevent unauthorized software installation
   Answer: btechtarget+2
2. Which type of authentication is commonly used by captive portals in public Wi-Fi hotspots?
   a. Biometric authentication
   b. One-Time Password (OTP) verification
   c. Multi-factor authentication
   d. Passwordless login
   Answer: bhfcl
3. What happens to a user’s HTTP/HTTPS traffic before authentication on a captive portal-enabled network?
   a. It is encrypted end-to-end
   b. It is redirected to the authentication server
   c. It bypasses the network firewall
   d. It is dropped by the switch
   Answer: btechtarget
4. Why do captive portals often require users to accept terms and conditions?
   a. To enforce acceptable use policies and limit liability
   b. To collect payment
   c. To improve network speed
   d. To enable VPN services
   Answer: ahfcl+1
5. What kind of attacks are captive portals vulnerable to, as described in SSL stripping?
   a. Phishing attacks
   b. SSL stripping downgrades HTTPS to HTTP
   c. Man-in-the-middle attacks on encrypted VPNs
   d. DNS cache poisoning
   Answer: bcsie.ntu
6. On which network port do captive portals primarily operate to intercept user traffic?
   a. Port 22
   b. Port 80
   c. Port 443
   d. Port 21
   Answer: btechtarget
7. What is one potential privacy concern when using captive portals?
   a. Restriction of file downloads
   b. Capture and misuse of user browsing histories
   c. Slower internet speeds
   d. Frequent disconnections
   Answer: beff+1
8. Which technology is sometimes used to mitigate captive portal security warnings on modern devices?
   a. VPN tunneling
   b. Captive portal detection requests
   c. IP address masking
   d. Firewall bypassing
   Answer: bportnox+1
9. What are captive portal mini-browsers?
   a. Lightweight browsers used exclusively for captive portal login
   b. Mobile IP tracking tools
   c. VPN clients for captive portals
   d. Full-featured browsers with captive portal plugins
   Answer: acsie.ntu
10. Which authentication method provides ease of access with minimal user interaction in captive portals?
    a. Voucher-based authentication
    b. Click-through authentication
    c. OTP verification
    d. Certificate-based authentication
    Answer: bhfcl
11. What do voucher-based captive portals enable?
    a. Unlimited network access for all users
    b. Controlled access durations and privileges per user
    c. Anonymous browsing
    d. Automatic firewall configuration
    Answer: bhfcl
12. How do captive portals handle wired network users differently?
    a. They deny access automatically
    b. They drop all non-DHCP/DNS packets until authenticated
    c. They provide full access without login
    d. They require VPN usage
    Answer: btechtarget
13. What is a key security recommendation for captive portals regarding HTTPS connections?
    a. Use self-signed certificates for all captive portals
    b. Reject unknown hostnames on port 443 instead of serving invalid certificates
    c. Intercept all HTTPS traffic to monitor content
    d. Redirect HTTPS always to HTTP
    Answer: beff
14. Why is WPA2 Enterprise preferred over captive portals for securing wireless access?
    a. It uses simpler authentication
    b. It supports per-user credentials and stronger encryption
    c. It is free and open source
    d. It allows guest user access
    Answer: beff
15. What information can an attacker steal via a malicious captive portal?
    a. Only network bandwidth usage
    b. User credentials and browsing history
    c. Firmware versions
    d. IP routing tables
    Answer: bcsie.ntu
16. What is the main reason captive portals generate security warnings on client devices?
    a. They use expired SSL certificates or intercept HTTPS traffic
    b. They block all traffic by default
    c. They have slow response times
    d. They have complex login flows
    Answer: aeff
17. Which protocol is NOT typically allowed before captive portal authentication succeeds?
    a. ARP
    b. DHCP
    c. HTTPS to external domains
    d. DNS
    Answer: ctechtarget+1
18. In what kind of venues are captive portals most commonly deployed?
    a. Corporate internal networks
    b. Public Wi-Fi networks such as airports and cafes
    c. Government secure networks
    d. Home networks
    Answer: bportnox+2
19. What is the effect of captive portal detection functionality on devices?
    a. It disables Wi-Fi scanning
    b. It triggers a special browser to open for login
    c. It installs antivirus software
    d. It blocks network access
    Answer: beff
20. How do captive portals contribute to network management?
    a. They automatically upgrade firmware
    b. They allow control of session lengths and bandwidth
    c. They install firewall rules on clients
    d. They encrypt all traffic
    Answer: bhfcl
21. What is a common user experience issue caused by captive portals?
    a. Network speed degradation
    b. Interruption by multiple login pages
    c. Total loss of signal
    d. Inability to connect to VPNs
    Answer: beff
22. What security layer primarily monitors traffic through captive portals?
    a. Physical layer
    b. Application layer
    c. Network layer
    d. Data link layer
    Answer: bzenarmor+1
23. Which of the following is a recommended practice for captive portal security?
    a. Use self-signed certificates extensively
    b. Ensure login pages work in restricted captive portal environments
    c. Allow anonymous connections
    d. Avoid HTTPS entirely
    Answer: beff
24. What is one way attackers create fake captive portals?
    a. Using a falsified SSL certificate
    b. Stealing bandwidth
    c. Blocking all HTTP traffic
    d. Using strong encryption
    Answer: acsie.ntu
25. How do captive portals handle unknown devices?
    a. Automatically grant access
    b. Require authentication before network access
    c. Block DHCP requests
    d. Redirect to VPN
    Answer: btechtarget
26. Which of the following is NOT a typical component of a captive portal system?
    a. Authentication server
    b. Redirect server
    c. Payment gateway
    d. Traffic filter
    Answer: chfcl+1
27. What role does DNS play in captive portal operation before authentication?
    a. Block all DNS queries
    b. Resolve hostname for captive portal redirection
    c. Encrypt DNS traffic
    d. None
    Answer: btechtarget
28. What challenge do captive portals pose to HTTPS traffic?
    a. They break encryption by intercepting HTTPS
    b. They pass HTTPS transparently without issue
    c. They do not affect HTTPS traffic
    d. They certify all HTTPS sites
    Answer: aeff
29. Why is captive portal detection important for security?
    a. To bypass firewalls
    b. To detect and respond to fake portals
    c. To increase data throughput
    d. To enforce VPN policies
    Answer: bportnox+1
30. What is the consequence of a captive portal serving invalid certificates?
    a. Devices raise security warnings
    b. Connection speeds improve
    c. Users gain automatic access
    d. Network bandwidth decreases
    Answer: aeff
31. Which packet types does a captive portal forward before user authentication?
    a. HTTPS and FTP
    b. ARP, DHCP, DNS, and NetBIOS
    c. SSH and Telnet
    d. ICMP only
    Answer: btechtarget
32. How does a captive portal typically verify if a user has authenticated?
    a. By IP address
    b. By maintaining a session or token after login
    c. Using MAC address only
    d. By device type
    Answer: bhfcl+1
33. What are “evil twin” attacks in the context of captive portals?
    a. Legitimate access points
    b. Rogue access points mimicking real portals
    c. VPN bypass methods
    d. Firewall rules
    Answer: bcsie.ntu
34. Which of the following can captive portals be used for besides security?
    a. Delivering advertisements and promotions
    b. Running antivirus scans
    c. Encrypting user data
    d. Auto-updating device firmware
    Answer: ahfcl+1
35. What does the term “click-through authentication” mean?
    a. User clicks a link to download software
    b. User accepts terms and conditions before access
    c. User inputs a password
    d. Biometric scan
    Answer: bhfcl
36. What type of network traffic do captive portals primarily intercept?
    a. Network management protocols
    b. User HTTP and HTTPS requests
    c. Encrypted VPN traffic
    d. Email traffic
    Answer: btechtarget
37. How do captive portals support legal compliance?
    a. By blocking all traffic
    b. By requiring user agreement to acceptable use policies
    c. By encrypting all user data
    d. By anonymizing users
    Answer: btechtarget
38. What happens if a captive portal is configured to allow HTTPS login?
    a. It can cause security warnings if certificates are invalid
    b. It guarantees user privacy
    c. It disables user login
    d. It prevents network access
    Answer: aeff
39. Why are captive portals suitable for guest Wi-Fi access?
    a. They provide strong encryption
    b. They provide controlled and monitored access without complex credentials
    c. They prevent all cyber attacks
    d. They ensure only corporate devices connect
    Answer: bspaces.cisco+1
40. What vulnerability arises from captive portals lacking TLS/HTTPS?
    a. Man-in-the-middle attacks steal credentials
    b. Loss of user anonymity
    c. Increased network latency
    d. Multiple device connections blocked
    Answer: acsie.ntu+1
41. What is the common user interface for captive portals?
    a. Command line prompt
    b. Web page requiring user action
    c. Mobile app
    d. SMS notification
    Answer: bhfcl+1
42. Which of the following is an example of a captive portal attack?
    a. SQL injection
    b. History-stealing using malicious portals
    c. Buffer overflow attack
    d. Cross-site scripting
    Answer: bcsie.ntu
43. What is a recommended practice to improve captive portal UX?
    a. Simple and clear login flow with minimal steps
    b. Use multiple redirects
    c. Require complex passwords only
    d. Block all pop-ups
    Answer: acloudi-fi
44. Why might captive portal mini-browsers be vulnerable?
    a. They lack full-featured security controls
    b. They are only for VPNs
    c. They automatically reject HTTPS
    d. They require passwords
    Answer: acsie.ntu
45. How can captive portals interfere with wireless security?
    a. They block all HTTPS traffic
    b. They can cause users to ignore security warnings
    c. They prevent network scanning
    d. They downgrade encryption standards
    Answer: beff
46. Why do some captive portals use advertisements?
    a. To generate revenue and offset costs
    b. To distract users
    c. To slow down connection speeds
    d. To enforce network rules
    Answer: atechtarget+1
47. What technology can captive portals integrate with to enhance security?
    a. Firewall policies
    b. 802.1X authentication
    c. Cloud storage
    d. FTP servers
    Answer: bspaces.cisco
48. What is the limitation of captive portals compared to WPA2 Enterprise?
    a. Captive portals require hardware tokens
    b. Captive portals provide weaker security and less granular user control
    c. Captive portals need client certificates
    d. Captive portals restrict device connections
    Answer: bspaces.cisco+1
49. How do network admins monitor usage on captive portals?
    a. By checking router logs
    b. By tracking authenticated sessions and bandwidth use
    c. Manually connecting to each device
    d. Using packet sniffers only
    Answer: bspaces.cisco+1
50. Why is it recommended to not interfere with captive portal detection software?
    a. To reduce false authentications
    b. To allow devices to open proper login interfaces
    c. To enable quicker network throughput
    d. To avoid firewall blocks
    Answer: beff

1. https://www.techtarget.com/searchmobilecomputing/definition/captive-portal
2. https://www.portnox.com/blog/network-security/understanding-the-use-of-captive-portal-detection/
3. https://io.hfcl.com/resources/blogs/captive-portals-for-secure-public-wi-fi-access
4. https://www.csie.ntu.edu.tw/~hchsiao/pub/2023_ACNS_WiFi_Chameleon.pdf
5. https://www.eff.org/deeplinks/2017/08/how-captive-portals-interfere-wireless-security-and-privacy
6. https://www.zenarmor.com/docs/network-security-tutorials/what-is-captive-portal
7. https://spaces.cisco.com/six-best-practices-for-guest-wi-fi-security/
8. https://www.cloudi-fi.com/blog/7-ways-to-secure-your-wifi-captive-portal
9. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
10. https://www.interviewbit.com/cyber-security-mcq/
11. https://www.includehelp.com/mcq/cyber-security-mcqs.aspx
12. https://www.studocu.com/in/quiz/cyber-security-mcq-multiple-choice-questions-javatpoint/1671227?origin=document
13. https://instrumentationtools.com/cyber-security-multiple-choice-questions-and-answers/
14. https://www.studocu.com/in/quiz/mcq-questions-on-cyber-security/5569378
15. https://www.scribd.com/document/516169743/Cyber-Security-MCQ-Set-1-5
16. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
17. https://en.wikipedia.org/wiki/Captive_portal
18. https://www.freetimelearning.com/online-quiz/cyber-security-quiz
19. https://ostec.blog/en/general/best-practices-captive-portal/
20. https://byjus.com/gate/cyber-security-mcqs/