MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which PowerShell cmdlet retrieves the current execution policy of the session?
   a. Set-ExecutionPolicy
   b. Get-ExecutionPolicy
   c. Test-ExecutionPolicy
   d. Update-ExecutionPolicy
   Answer: b. Get-ExecutionPolicylearn.microsoft+1​
2. Which cmdlet is used to convert a plain text string into a secure string?
   a. Set-SecureString
   b. ConvertTo-SecureString
   c. ConvertFrom-SecureString
   d. Encrypt-String
   Answer: b. ConvertTo-SecureStringlearn.microsoft​
3. What PowerShell command allows running scripts signed by a trusted publisher only?
   a. Restricted
   b. AllSigned
   c. Bypass
   d. RemoteSigned
   Answer: b. AllSignedcodecademy​
4. Which PowerShell module contains cmdlets to manage basic Windows security features?
   a. Microsoft.PowerShell.Security
   b. Microsoft.PowerShell.Network
   c. Microsoft.PowerShell.Management
   d. Microsoft.PowerShell.Advanced
   Answer: a. Microsoft.PowerShell.Securitylearn.microsoft​
5. Which cmdlet encrypts content using the Cryptographic Message Syntax format?
   a. Protect-CmsMessage
   b. Encrypt-Content
   c. Secure-Text
   d. ConvertTo-EncryptedMessage
   Answer: a. Protect-CmsMessagelearn.microsoft​
6. Which command retrieves a list of all running services on a system?
   a. Get-Service
   b. Get-Process
   c. Get-Command
   d. Get-NetService
   Answer: a. Get-Servicecodecademy​
7. What does the Set-Acl cmdlet do in PowerShell?
   a. Creates new file permissions
   b. Changes the security descriptor of an item
   c. Views registry keys
   d. Encrypts sensitive files
   Answer: b. Changes the security descriptor of an itemlearn.microsoft​
8. Which command can be used to stop a malicious process by its ID?
   a. Stop-Service
   b. End-Task
   c. Stop-Process
   d. Remove-Item
   Answer: c. Stop-Processcodecademy​
9. What is the purpose of Get-Acl?
   a. Get Active Directory logs
   b. Get access control list of a resource
   c. Perform audit checks
   d. Remove user privileges
   Answer: b. Get access control list of a resourcelearn.microsoft​
10. Which cmdlet digitally signs PowerShell scripts?
    a. Sign-Item
    b. Get-AuthenticodeSignature
    c. Set-AuthenticodeSignature
    d. Protect-Script
    Answer: c. Set-AuthenticodeSignaturelearn.microsoft​
11. The Restricted policy in PowerShell allows what?
    a. Running unsigned scripts
    b. Running only interactive commands
    c. Running all scripts freely
    d. Running only remote scripts
    Answer: b. Running only interactive commandsinterviewbit​
12. Which command unencrypts CMS messages?
    a. Decode-Message
    b. Unprotect-CmsMessage
    c. Decrypt-Content
    d. Remove-Encryption
    Answer: b. Unprotect-CmsMessagelearn.microsoft​
13. How can a cybersecurity analyst detect PowerShell misuse?
    a. Monitor obfuscated and encoded commands
    b. Disable all PowerShell modules
    c. Restrict login attempts
    d. Limit DNS lookups
    Answer: a. Monitor obfuscated and encoded commandscodecademy​
14. Which cmdlet retrieves system event logs?
    a. Get-Log
    b. Get-Event
    c. Get-EventLog
    d. Show-Event
    Answer: c. Get-EventLogcodecademy​
15. What command provides information about PFX certificate files?
    a. Get-AuthCertificate
    b. Get-PfxCertificate
    c. Read-Cert
    d. Get-SystemCertificate
    Answer: b. Get-PfxCertificatelearn.microsoft​
16. Which PowerShell command is used to resolve a hostname to an IP address?
    a. Get-IP
    b. Resolve-DnsName
    c. Get-DnsAddress
    d. Lookup-Host
    Answer: b. Resolve-DnsNamecodecademy​
17. How can analysts restrict PowerShell script execution for security?
    a. Change Set-ExecutionPolicy to Restricted
    b. Disable PowerShell
    c. Use Get-NetConnection
    d. Modify AclSettings
    Answer: a. Change Set-ExecutionPolicy to Restrictedcodecademy​
18. The ConvertFrom-SecureString cmdlet is used for what purpose?
    a. Exporting secure strings as encrypted text
    b. Importing plain text
    c. Converting ASCII to Unicode
    d. None of the above
    Answer: a. Exporting secure strings as encrypted textlearn.microsoft​
19. Which command starts a remote PowerShell session?
    a. Start-Session
    b. Enter-PSSession
    c. Open-Remote
    d. Invoke-Remote
    Answer: b. Enter-PSSessioncodecademy​
20. What does Test-NetConnection primarily verify?
    a. Ethernet cable connection
    b. Network connectivity
    c. DNS configuration only
    d. Firewall policies
    Answer: b. Network connectivitycodecademy​
21. Which PowerShell cmdlet creates cryptographic hashes for files?
    a. Set-Catalog
    b. New-FileCatalog
    c. Protect-Hash
    d. New-HashMap
    Answer: b. New-FileCataloglearn.microsoft​
22. Which cmdlet checks execution policy enforcement before running scripts?
    a. Review-ExecutionPolicy
    b. Check-SecurityPolicy
    c. Get-ExecutionPolicy
    d. Test-ScriptExecution
    Answer: c. Get-ExecutionPolicycodecademy​
23. What can be used to view or modify file permissions?
    a. Get-Acl and Set-Acl
    b. Get-File and Remove-File
    c. Export-Acl only
    d. Test-Permissions
    Answer: a. Get-Acl and Set-Acllearn.microsoft​
24. What is the highest-risk PowerShell execution policy?
    a. Restricted
    b. AllSigned
    c. Unrestricted
    d. RemoteSigned
    Answer: c. Unrestrictedinterviewbit​
25. Which cmdlet retrieves stored credentials?
    a. Get-Secure
    b. Get-Credential
    c. Retrieve-Password
    d. Get-Key
    Answer: b. Get-Credentiallearn.microsoft​
26. What cmdlet is used to capture and log malicious process details?
    a. Get-Process
    b. Get-LogDetails
    c. Capture-Event
    d. Monitor-Execution
    Answer: a. Get-Processcodecademy​
27. Which PowerShell object can be piped between commands for automation?
    a. CSV files
    b. Objects
    c. Parameters
    d. Logs
    Answer: b. Objectscodecademy​
28. The Set-ExecutionPolicy cmdlet can define what security mode?
    a. Input restriction
    b. Script execution control
    c. Cmdlet logging
    d. Registry scanning
    Answer: b. Script execution controlcodecademy​
29. What PowerShell policy type ignores all warnings or prompts?
    a. Restricted
    b. Default
    c. Bypass
    d. AllSigned
    Answer: c. Bypassinterviewbit​
30. What does the Get-AuthenticodeSignature command retrieve?
    a. Certificate chain
    b. System signature
    c. File signature details
    d. Key fingerprints
    Answer: c. File signature detailslearn.microsoft​
31. Which PowerShell command is commonly used for ping testing?
    a. Invoke-Ping
    b. Test-NetConnection
    c. Net-Ping
    d. Network-Test
    Answer: b. Test-NetConnectioncodecademy​
32. What is the recommended way to prevent script tampering?
    a. Script signing
    b. Obfuscation
    c. Random naming
    d. Execution bypass
    Answer: a. Script signingcodecademy​
33. Which cmdlet retrieves DNS client information from a computer?
    a. Get-DnsClient
    b. Show-DnsConfig
    c. Get-DnsCache
    d. Display-DNS
    Answer: a. Get-DnsClientcodecademy​
34. The PowerShell pipe ‘|’ allows what function?
    a. Combine strings
    b. Redirect output to another cmdlet
    c. Encrypt text streams
    d. None
    Answer: b. Redirect output to another cmdletcodecademy​
35. Which command allows a user to run commands on multiple remote computers?
    a. Invoke-Command
    b. Enter-Command
    c. Merge-Session
    d. Remote-Exec
    Answer: a. Invoke-Commandcodecademy​
36. What PowerShell command can list current user sessions?
    a. Get-Session
    b. Get-Process
    c. Get-Login
    d. List-Sessions
    Answer: a. Get-Sessioncodecademy​
37. Which cmdlet tests catalog integrity and hash consistency?
    a. Test-FileCatalog
    b. Check-File
    c. Test-Integrity
    d. Verify-File
    Answer: a. Test-FileCataloglearn.microsoft​
38. What modules are commonly used for threat hunting in PowerShell?
    a. PowerView and Defender
    b. NetworkAnalysis and UserAudit
    c. CMDTools only
    d. PowerPack
    Answer: a. PowerView and Defendercodecademy​
39. Which PowerShell command displays all available help topics?
    a. Show-Help
    b. Get-Help
    c. Read-Manual
    d. Find-Command
    Answer: b. Get-Helpcodecademy​
40. What module should you import for PKI operations?
    a. CertificateMgmt
    b. PKI
    c. Secure-Cert
    d. CryptoModule
    Answer: b. PKIcodecademy​
41. What cmdlet can identify rogue IP addresses via configuration listing?
    a. Test-IP
    b. Get-NetIPConfiguration
    c. Ping-IP
    d. Get-IPV4
    Answer: b. Get-NetIPConfigurationcodecademy​
42. What cmdlet encrypts output into a CMS message?
    a. Protect-CmsMessage
    b. Encrypt-Content
    c. ConvertTo-Secure
    d. Secure-File
    Answer: a. Protect-CmsMessagelearn.microsoft​
43. How can PowerShell track suspicious activity logs?
    a. Through Get-EventLog
    b. With Run-History
    c. Using Write-Event
    d. Using Watch-Process
    Answer: a. Through Get-EventLogcodecademy​
44. Which policy allows local unsigned scripts but restricts remote ones?
    a. RemoteSigned
    b. Restricted
    c. AllSigned
    d. Undefined
    Answer: a. RemoteSignedinterviewbit​
45. What PowerShell feature can automate repetitive security operations?
    a. Pipelines
    b. Hotkeys
    c. Manual typing
    d. Batch tasks
    Answer: a. Pipelinescodecademy​
46. Which module helps with certificates for code integrity verification?
    a. Microsoft.PowerShell.Security
    b. PSNetworkMonitor
    c. PowerView
    d. CryptoCore
    Answer: a. Microsoft.PowerShell.Securitylearn.microsoft​
47. What is the safest PowerShell execution mode for production?
    a. Restricted
    b. Bypass
    c. Unrestricted
    d. AllSigned
    Answer: d. AllSignedinterviewbit​
48. What command group helps cybersecurity analysts to detect malware?
    a. Get-Process and Stop-Process
    b. New-Item
    c. List-Logs
    d. Configure-Alerts
    Answer: a. Get-Process and Stop-Processcodecademy​
49. Which flag in Get-Content reads the last few lines of a file?
    a. -Bottom
    b. -Tail
    c. -End
    d. -Last
    Answer: b. -Tailcodecademy​
50. Which cmdlet retrieves Authenticode signature details to validate script authenticity?
    a. Get-AuthenticodeSignature
    b. Get-ScriptAuth
    c. Read-CertInfo
    d. Verify-FileSignature
    Answer: a. Get-AuthenticodeSignaturelearn.microsoft+1​

1. https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.security/?view=powershell-7.5
2. https://www.codecademy.com/article/powershell-commands-for-cybersecurity-analysts
3. https://www.interviewbit.com/powershell-interview-questions/
4. https://www.igmguru.com/blog/cyber-security-mcqs
5. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
6. https://interviewkickstart.com/blogs/articles/cyber-security-mcqs-answers
7. https://www.sanfoundry.com/cyber-security-questions-answers-mcqs/
8. https://examradar.com/user-management-and-access-control-mcqs-multiple-choice-questions-with-answer/
9. https://www.koenig-solutions.com/ms-55039-windows-powershell-scripting-and-toolmaking-quiz-questions-answers
10. https://letsfindcourse.com/powershell-mcq-questions/powershell-mcq-questions-and-answers
11. https://www.scribd.com/document/846150330/Cyber-Security-MCQ
12. https://www.nsoftware.com/kb/articles/powershell-server-security-questions-and-answers.rst
13. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
14. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
15. https://codeinterview.io/interview-questions/powershell-questions-answers
16. https://www.scribd.com/document/921384428/PowerShell-Azure-MCQ-Question-Bank
17. https://www.sanfoundry.com/cyber-security-questions-answers-windows-security/
18. https://www.koenig-solutions.com/powershell-fundamentals-1-day-quiz-questions-answers
19. https://www.yeahhub.com/cyber-security-penetration-testing-multiple-choice-questions/
20. https://www.yeahhub.com/cyber-security-mcq-35-questions-with-answers/