MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is a password key in cybersecurity?
   a. A physical key for a computer
   b. A cryptographic key used for authentication
   c. A username for login
   d. An encryption algorithm
   Answer: b. A cryptographic key used for authenticationloginradius+1​
2. Which of the following best describes a passkey?
   a. Traditional password with numbers only
   b. Cryptographic key pair consisting of a public and private key
   c. Password written on paper
   d. Biometric data
   Answer: b. Cryptographic key pair consisting of a public and private keydevelopers.google+1​
3. In password authentication, what is the role of the private key?
   a. To be shared publicly
   b. To encrypt the password file
   c. To securely sign challenges from the server
   d. To reset the password
   Answer: c. To securely sign challenges from the servermalwarebytes+1​
4. The public key in passkeys is stored where?
   a. On the user’s smartphone only
   b. On the authentication server
   c. On a USB drive
   d. On a paper printout
   Answer: b. On the authentication serverloginradius​
5. What major vulnerability do passkeys eliminate compared to traditional passwords?
   a. Forgotten passwords
   b. Password reuse and phishing attacks
   c. Password length issues
   d. Logout timeout
   Answer: b. Password reuse and phishing attacksmalwarebytes+1​
6. Which factor is NOT required to unlock a private key in password key systems?
   a. Fingerprint
   b. Face scan
   c. Server IP address
   d. PIN code
   Answer: c. Server IP addressmalwarebytes​
7. What is a common characteristic of a strong password key?
   a. Contains only letters
   b. Contains a mix of letters, numbers, and symbols
   c. Is less than 6 characters
   d. Is the user’s birthdate
   Answer: b. Contains a mix of letters, numbers, and symbolssanfoundry+1​
8. Which of the following is NOT a type of password attack?
   a. Brute force attack
   b. Phishing attack
   c. Public key encryption
   d. Dictionary attack
   Answer: c. Public key encryptiononelogin​
9. Password keys improve cybersecurity primarily by:
   a. Making passwords easier to remember
   b. Using cryptographic methods instead of plain text passwords
   c. Allowing password sharing
   d. Reducing password length
   Answer: b. Using cryptographic methods instead of plain text passwordsloginradius+1​
10. What is the recommended minimum length for a secure password key?
    a. 4 characters
    b. 6 characters
    c. 8 characters
    d. 16 characters
    Answer: c. 8 charactersexamradar​
11. A password key stored securely on a device and never shared is called a:
    a. Public key
    b. Private key
    c. Shared secret
    d. Backup key
    Answer: b. Private keyloginradius​
12. Which is true regarding the difference between passkeys and passwords?
    a. Passkeys are easier to guess
    b. Passkeys cannot be stolen via phishing attacks
    c. Passkeys are shared openly to servers
    d. Passkeys must be changed monthly
    Answer: b. Passkeys cannot be stolen via phishing attacksmalwarebytes+1​
13. Why are password keys considered resistant to brute-force attacks?
    a. Because they are very short
    b. Because they use complex cryptographic algorithms
    c. Because they auto-expire
    d. Because they reuse old passwords
    Answer: b. Because they use complex cryptographic algorithmsloginradius​
14. Which describes an offline password attack?
    a. Guessing passwords while connected online
    b. Cracking stored password hashes without network access
    c. Phishing for password credentials
    d. Using biometrics to access password files
    Answer: b. Cracking stored password hashes without network accesssanfoundry​
15. What is a network security key in the context of cybersecurity?
    a. A password for wireless networks
    b. An encryption key for wired connections
    c. A default username
    d. A hardware device key
    Answer: a. A password for wireless networksitarian​
16. What may happen if password keys are reused across multiple sites?
    a. Increased security
    b. Password compromise on multiple accounts if one is breached
    c. Password managers block reuse
    d. Passkeys replace them automatically
    Answer: b. Password compromise on multiple accounts if one is breachedloginradius​
17. Which one of the following is a measure to avoid forgetting strong passwords?
    a. Writing them on paper
    b. Using password managers
    c. Using very simple passwords
    d. Sharing with colleagues
    Answer: b. Using password managersletsfindcourse​
18. What is the primary purpose of password encryption?
    a. To store passwords visibly
    b. To scramble passwords so they cannot be read without a key
    c. To make passwords shorter
    d. To transmit passwords in clear text
    Answer: b. To scramble passwords so they cannot be read without a keybeyondtrust​
19. Which best describes multi-factor authentication involving password keys?
    a. Using a password only
    b. Using a password plus a second factor such as biometrics or OTP
    c. Using username only
    d. Using public key as the only factor
    Answer: b. Using a password plus a second factor such as biometrics or OTPloginradius​
20. What is the consequence of password expiration policies?
    a. Passwords never change
    b. Forcing users to change passwords regularly to reduce risk
    c. Users can reuse old passwords
    d. Password length decreases
    Answer: b. Forcing users to change passwords regularly to reduce riskexamradar​
21. Which of the following is NOT a feature of modern passkeys?
    a. Stored securely on the user’s device
    b. Requires sharing private key with a server
    c. Uses strong cryptographic algorithms
    d. Resistant to phishing
    Answer: b. Requires sharing private key with a serverdevelopers.google+1​
22. What does “password cracking” typically refer to?
    a. Generating strong passwords
    b. Attempting to recover passwords from stored data by attackers
    c. Resetting passwords
    d. Encrypting passwords
    Answer: b. Attempting to recover passwords from stored data by attackerssanfoundry​
23. Which type of password attack involves trying every possible combination?
    a. Dictionary attack
    b. Brute force attack
    c. Phishing attack
    d. Man-in-the-middle attack
    Answer: b. Brute force attackonelogin​
24. How do hardware security modules contribute to password key protection?
    a. By storing keys in physical secure devices
    b. By generating weak passwords
    c. By delaying login
    d. By sharing keys publicly
    Answer: a. By storing keys in physical secure devices [common cybersecurity knowledge]
25. What is a guest account regarding password keys?
    a. An account without a password
    b. A generic account with limited privileges
    c. An administrator account
    d. A root account
    Answer: b. A generic account with limited privileges [common cybersecurity knowledge]
26. What does geotagging have to do with password keys?
    a. It reveals the location of password use for security audit
    b. It keeps password offline
    c. It generates password strength
    d. It creates password backups
    Answer: a. It reveals the location of password use for security audit [common cybersecurity knowledge]
27. How do passkeys improve compliance with data protection regulations?
    a. By maintaining strong authentication without storing passwords centrally
    b. By disabling multi-factor authentication
    c. By requiring monthly password resets
    d. By reducing password complexity
    Answer: a. By maintaining strong authentication without storing passwords centrallyloginradius​
28. Which method is NOT used to reset a password key?
    a. Email verification
    b. Biometric authentication
    c. Physical mail
    d. Private key sharing
    Answer: d. Private key sharing [common cybersecurity knowledge]
29. What is the key difference between symmetric and asymmetric keys in password key systems?
    a. Symmetric uses one key; asymmetric uses a key pair
    b. Both use one key
    c. Both use key pairs
    d. Symmetric is unencrypted
    Answer: a. Symmetric uses one key; asymmetric uses a key pair [common cryptography knowledge]
30. Password keys are especially useful for protecting against which type of attack?
    a. Malware infection
    b. Credential phishing and replay attacks
    c. Physical theft of device
    d. Overheating computer
    Answer: b. Credential phishing and replay attacksloginradius​
31. What is “credential stuffing”?
    a. Using weak passwords only
    b. Using stolen passwords on multiple sites automatically
    c. Encrypting password files
    d. A form of password manager
    Answer: b. Using stolen passwords on multiple sites automaticallyloginradius​
32. Which is a common best practice for password key management?
    a. Share keys openly
    b. Use multi-factor authentication and strong cryptographic storage
    c. Use short and simple keys
    d. Avoid key rotation
    Answer: b. Use multi-factor authentication and strong cryptographic storageexamradar​
33. Passkeys rely on which cryptographic principle?
    a. Hashing only
    b. Public-key cryptography
    c. Plain text storage
    d. Symmetric key only
    Answer: b. Public-key cryptographyloginradius​
34. What type of attack involves stealing passwords by pretending to be a trustworthy site?
    a. Man-in-the-middle
    b. Phishing
    c. Brute force
    d. DoS attack
    Answer: b. Phishingonelogin​
35. What is a limitation of traditional password keys?
    a. They can’t be reset
    b. They are vulnerable to reuse and guessing
    c. They are always long
    d. They require hardware tokens
    Answer: b. They are vulnerable to reuse and guessingloginradius​
36. What does a password manager do?
    a. Cracks passwords
    b. Generates, stores, and fills passwords securely
    c. Shares passwords with friends
    d. Deletes old passwords
    Answer: b. Generates, stores, and fills passwords securelyletsfindcourse​
37. What generally improves password key strength?
    a. Using user’s name
    b. Increasing length and complexity (letters, numbers, symbols)
    c. Using short numeric keys
    d. Reusing passwords
    Answer: b. Increasing length and complexity (letters, numbers, symbols)examradar​
38. What term describes stealing encrypted password databases and attempting offline attacks?
    a. Replay attack
    b. Offline password attack
    c. Shoulder surfing
    d. Keylogging
    Answer: b. Offline password attacksanfoundry​
39. Which is NOT a recommended practice for password keys?
    a. Use unique passwords for each account
    b. Use two-factor authentication
    c. Use the same password everywhere
    d. Update passwords regularly
    Answer: c. Use the same password everywhereloginradius​
40. What is a benefit of biometrics combined with password keys?
    a. Eliminates need for user authentication
    b. Adds a layer of security by verifying user identity
    c. Replaces password key completely
    d. Allows sharing passwords easily
    Answer: b. Adds a layer of security by verifying user identitymalwarebytes​
41. To verify a passkey, an online service uses:
    a. The user’s private key
    b. The public key stored on the server
    c. The user’s password in plain text
    d. A shared secret key
    Answer: b. The public key stored on the serverloginradius​
42. What does the term “password complexity” usually refer to?
    a. Password length only
    b. Inclusion of different types of characters like uppercase, lowercase, numbers, symbols
    c. Password expiration time
    d. Frequency of password change
    Answer: b. Inclusion of different types of characters like uppercase, lowercase, numbers, symbolsexamradar​
43. Which is NOT a type of password mentioned in cybersecurity?
    a. Passphrase
    b. PIN
    c. Passkey
    d. Firewall password
    Answer: d. Firewall passwordsanfoundry​
44. What is “social engineering” in the context of password keys?
    a. Hacking a password file
    b. Manipulating people to give out passwords
    c. Using brute force
    d. Encrypting passwords
    Answer: b. Manipulating people to give out passwords [common cybersecurity knowledge]
45. Why is unique password key per site recommended?
    a. To avoid clustering
    b. To limit damage from one breached account
    c. To remember fewer passwords
    d. To reduce typing time
    Answer: b. To limit damage from one breached accountloginradius​
46. What is a common use of password keys in cloud computing?
    a. File encryption
    b. User authentication without passwords
    c. Network routing
    d. Data compression
    Answer: b. User authentication without passwords [common knowledge]
47. Which attack is mitigated by using passkeys?
    a. DDoS attacks
    b. Credential phishing
    c. SQL injection
    d. Ransomware
    Answer: b. Credential phishingloginradius​
48. How do passkeys affect user convenience?
    a. Makes login process complicated
    b. Removes need to remember and manage multiple passwords
    c. Increases password changes
    d. Requires manual key sharing
    Answer: b. Removes need to remember and manage multiple passwordsloginradius​
49. What happens if a device storing a private key is lost?
    a. The user loses access and must recover or reset credentials
    b. Passwords become public
    c. The server stores the private key
    d. Passwords reset automatically
    Answer: a. The user loses access and must recover or reset credentials [common knowledge]
50. Which of the following is true about password keys?
    a. Password keys never expire
    b. Password keys protect against unauthorized access using cryptography
    c. Password keys are easy to guess
    d. Password keys should be shared with others
    Answer: b. Password keys protect against unauthorized access using cryptographymalwarebytes+1​

1. https://www.loginradius.com/blog/identity/online-security-passkeys
2. https://www.malwarebytes.com/cybersecurity/basics/passkey
3. https://developers.google.com/identity/passkeys
4. https://www.sanfoundry.com/cyber-security-questions-answers-password-cracking-security-measures-1/
5. https://letsfindcourse.com/cyber-security-mcq/secure-password-mcq-questions-and-answers
6. https://www.onelogin.com/learn/6-types-password-attacks
7. https://examradar.com/password-policies-and-best-practices-in-web-security-mcqs/
8. https://www.itarian.com/blog/what-is-a-network-security-key/
9. https://www.beyondtrust.com/blog/entry/password-encryption-101-what-it-is-and-why-it-matters-for-credential-security
10. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
11. https://www.igmguru.com/blog/cyber-security-mcqs
12. https://www.scribd.com/document/865399924/Cyber-Security-Awareness-MCQs
13. https://www.passkeys.com/what-are-passkeys
14. https://www.studocu.com/in/document/rajiv-gandhi-proudyogiki-vishwavidyalaya/cyber-security/cybersecurity-mcq-quiz-5-key-concepts-and-strong-passwords/124647391
15. https://fidoalliance.org/passkeys/
16. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
17. https://www.microsoft.com/en-us/security/business/security-101/what-is-passkey
18. https://www.loginradius.com/blog/identity/what-are-security-keys
19. https://www.ncsc.gov.uk/static-assets/documents/ECW21-RAF-Digby-Password-Quiz-Wordsearch-Answers.pdf
20. https://www.techtarget.com/whatis/definition/passkey