MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which of the following is an example of a preventive control?
   a. Security Audit
   b. Firewall configuration
   c. Incident recovery
   d. Threat detection
   Answer: b. Firewall configurationaws.amazon+1​
2. The primary objective of preventive controls in cybersecurity is to:
   a. Recover systems after attack
   b. Identify security breaches
   c. Prevent unauthorized access
   d. Monitor internal communications
   Answer: c. Prevent unauthorized accesssprinto+1​
3. Password strength enforcement belongs to which type of security control?
   a. Preventive
   b. Detective
   c. Corrective
   d. Compensating
   Answer: a. Preventivepathlock+1​
4. Multi-factor authentication (MFA) serves as what type of control?
   a. Corrective
   b. Preventive
   c. Detective
   d. Compensating
   Answer: b. Preventiveaws.amazon+1​
5. Network segmentation ensures:
   a. System recovery
   b. Activity logging
   c. Unauthorized access prevention
   d. Damage detection
   Answer: c. Unauthorized access preventionsprinto+1​
6. Which of the following best represents a preventive technical control?
   a. Backup restoration
   b. Firewalls
   c. Forensic analysis
   d. Security event logs
   Answer: b. Firewallslinfordco+1​
7. Access control lists (ACLs) are an example of:
   a. Detective control
   b. Preventive control
   c. Corrective control
   d. Compensating control
   Answer: b. Preventive controllinfordco+1​
8. Security awareness training is categorized as what type of control?
   a. Physical
   b. Preventive
   c. Corrective
   d. Detective
   Answer: b. Preventivepathlock+1​
9. Which of the following prevents privilege escalation in cloud systems?
   a. IAM policies and role separation
   b. SIEM analytics
   c. Incident response
   d. Intrusion detection
   Answer: a. IAM policies and role separationaws.amazon​
10. Segregation of duties helps to:
    a. Prevent unauthorized privilege use
    b. Enhance vulnerability reporting
    c. Recover compromised data
    d. Detect insider threat
    Answer: a. Prevent unauthorized privilege useaws.amazon​
11. What category includes password expiration policies?
    a. Detective controls
    b. Preventive controls
    c. Corrective controls
    d. Directive controls
    Answer: b. Preventive controlslinfordco+1​
12. Encryption is primarily classified as a:
    a. Corrective measure
    b. Preventive measure
    c. Detection measure
    d. Monitoring measure
    Answer: b. Preventive measuresprinto+1​
13. Restricting root user access is a:
    a. Preventive measure
    b. Corrective measure
    c. Detective measure
    d. Physical measure
    Answer: a. Preventive measureaws.amazon​
14. Background checks during hiring are what type of control?
    a. Detective
    b. Preventive
    c. Compensating
    d. Corrective
    Answer: b. Preventivelinfordco​
15. Physical barriers like fences are examples of:
    a. Preventive physical controls
    b. Detective security tools
    c. Corrective controls
    d. Responsive controls
    Answer: a. Preventive physical controlspathlock+1​
16. Locks and mantraps are typically used as:
    a. Preventive physical controls
    b. Corrective administrative controls
    c. Detective physical controls
    d. Compensating controls
    Answer: a. Preventive physical controlslinfordco​
17. Antivirus software functions primarily as:
    a. Preventive control
    b. Detective control
    c. Corrective control
    d. Deterrent control
    Answer: a. Preventive controlpathlock+1​
18. Patch management belongs to which control class?
    a. Preventive
    b. Corrective
    c. Detective
    d. Directive
    Answer: a. Preventivesprinto​
19. Restricting application access ensures:
    a. Preventive protection
    b. Corrective recovery
    c. Detective validation
    d. Audit compliance
    Answer: a. Preventive protectionsprinto+1​
20. Secure protocols like HTTPS are considered:
    a. Preventive controls
    b. Detective controls
    c. Corrective controls
    d. Directive controls
    Answer: a. Preventive controlslinfordco​
21. Data classification policies are best described as:
    a. Preventive administrative controls
    b. Detective technical controls
    c. Corrective compensating measures
    d. Diagnostic practices
    Answer: a. Preventive administrative controlslinfordco​
22. Security baselines and configuration locks help with:
    a. Preventive enforcement
    b. Corrective maintenance
    c. Policy auditing
    d. Incident detection
    Answer: a. Preventive enforcementaws.amazon​
23. Limiting administrator privileges prevents:
    a. Unauthorized system changes
    b. Physical intrusion
    c. Data restoration
    d. Detection of attacks
    Answer: a. Unauthorized system changessprinto+1​
24. Which of the following is NOT preventive?
    a. System backup
    b. Multi-factor authentication
    c. Encryption
    d. Firewall
    Answer: a. System backupsprinto+1​
25. The function of preventive controls is primarily:
    a. To stop threats before they occur
    b. To alert after compromise
    c. To repair damaged systems
    d. To archive security logs
    Answer: a. To stop threats before they occurnotes.kodekloud+1​
26. The phrase “first line of defense” best applies to:
    a. Preventive controls
    b. Detective controls
    c. Corrective controls
    d. Compensating controls
    Answer: a. Preventive controlspathlock+1​
27. Constrained user interfaces belong to which type?
    a. Preventive technical controls
    b. Detective monitoring tools
    c. Corrective backups
    d. Directive control
    Answer: a. Preventive technical controlslinfordco​
28. Automatic logout on idle devices is a:
    a. Preventive control
    b. Detective control
    c. Corrective control
    d. Compensating control
    Answer: a. Preventive controlyoutube​linfordco​
29. Ensuring secure software updates prevents:
    a. Vulnerability exploitation
    b. Data recovery
    c. Breach notification
    d. Log auditing
    Answer: a. Vulnerability exploitationtotalprosource+1​
30. Employee onboarding security checks are:
    a. Preventive administrative controls
    b. Detective procedural controls
    c. Recovery planning measures
    d. Corrective strategies
    Answer: a. Preventive administrative controlslinfordco​
31. The least-privilege principle is an example of:
    a. Preventive control
    b. Detective control
    c. Corrective control
    d. Deterrent control
    Answer: a. Preventive controllinfordco​
32. Regular vulnerability scanning acts as:
    a. Preventive detection mechanism
    b. Corrective restoration system
    c. Backup validation process
    d. Compensating guideline
    Answer: a. Preventive detection mechanismaws.amazon+1​
33. Security compliance policies act as:
    a. Preventive administrative controls
    b. Detective audit measures
    c. Corrective contingency plans
    d. Operational standards
    Answer: a. Preventive administrative controlslinfordco​
34. Portable device encryption prevents:
    a. Data theft from lost devices
    b. Detection failures
    c. Incident recurrence
    d. Backup corruption
    Answer: a. Data theft from lost devicessprinto+1​
35. Preventive controls reduce:
    a. Likelihood of incidents
    b. Forensic accuracy
    c. Backup requirements
    d. Breach response times
    Answer: a. Likelihood of incidentsnotes.kodekloud+1​
36. Static code analysis is an example of:
    a. Preventive control
    b. Corrective control
    c. Detective measure
    d. Directive measure
    Answer: a. Preventive controllinfordco​
37. Role-based access control ensures:
    a. Access limits aligned with job roles
    b. Incident correction
    c. Post-event analysis
    d. Threat detection logging
    Answer: a. Access limits aligned with job rolesaws.amazon+1​
38. Installing content filters helps prevent:
    a. Inappropriate web access
    b. Malware recovery
    c. Policy violation detection
    d. Log auditing
    Answer: a. Inappropriate web accesstotalprosource+1​
39. Preventive physical access control includes:
    a. Biometric scanners
    b. Event correlation systems
    c. Disaster recovery sites
    d. Antivirus alerts
    Answer: a. Biometric scannerslinfordco​
40. Preventive security focuses on:
    a. Avoiding incidents before they occur
    b. Restoring backup data post-attack
    c. Monitoring event logs for breaches
    d. Punishing responsible staff
    Answer: a. Avoiding incidents before they occurnotes.kodekloud+1​
41. Security patches are primarily what kind of control?
    a. Preventive
    b. Corrective
    c. Detective
    d. Compensating
    Answer: a. Preventivesprinto​
42. Firewalls function mainly to:
    a. Block unauthorized connections
    b. Alert to active intrusion
    c. Recover compromised files
    d. Track user activity
    Answer: a. Block unauthorized connectionssprinto+1​
43. Which control mitigates risks before any unauthorized action occurs?
    a. Preventive
    b. Detective
    c. Corrective
    d. Deterrent
    Answer: a. Preventivenotes.kodekloud+1​
44. Policy enforcement mechanisms are:
    a. Preventive controls
    b. Corrective controls
    c. Adaptive measures
    d. Recovery actions
    Answer: a. Preventive controlsaws.amazon​
45. Anti-malware tools exemplify:
    a. Preventive controls
    b. Detective controls
    c. Corrective controls
    d. Directive measures
    Answer: a. Preventive controlspathlock+1​
46. Employing secure password policies serves to:
    a. Prevent credential compromise
    b. Detect brute-force attacks
    c. Correct data corruption
    d. Direct employee access
    Answer: a. Prevent credential compromisesprinto+1​
47. Preventive administrative controls include:
    a. Hiring procedures and documentation
    b. Data recovery operations
    c. Intrusion monitoring
    d. Post-incident review
    Answer: a. Hiring procedures and documentationlinfordco​
48. A company that locks configurations to enforce minimum baselines applies:
    a. Preventive enforcement
    b. Corrective adjustment
    c. Detective alert
    d. Directive training
    Answer: a. Preventive enforcementaws.amazon​
49. Privilege management systems primarily implement:
    a. Preventive controls
    b. Detective controls
    c. Corrective actions
    d. Deterrent measures
    Answer: a. Preventive controlsaws.amazon​
50. Preventive cybersecurity controls are generally:
    a. Proactive measures to block threats
    b. Reactive detection mechanisms
    c. Restorative counteractions
    d. Advisory guidelines
    Answer: a. Proactive measures to block threatsnotes.kodekloud+2​

1. https://docs.aws.amazon.com/prescriptive-guidance/latest/aws-security-controls/preventative-controls.html
2. https://sprinto.com/blog/types-of-security-controls/
3. https://pathlock.com/blog/internal-controls/types-of-internal-controls/
4. https://linfordco.com/blog/importance-of-preventive-controls/
5. https://notes.kodekloud.com/docs/CompTIA-Security-Certification/Controls-and-Security-Concepts/Types-of-Controls
6. https://www.youtube.com/watch?v=mfauxLOl-qo
7. https://blog.totalprosource.com/8-preventative-security-controls-you-should-consider
8. https://siteforinfotech.com/mcqs-on-security-control-types-comptia-security
9. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
10. https://www.igmguru.com/blog/cyber-security-mcqs
11. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
12. https://www.scribd.com/document/809299013/CYBER-SECURITY-MCQ-UNIT-V
13. https://www.sanfoundry.com/cyber-security-questions-answers-elements-security/
14. https://docs.aws.amazon.com/prescriptive-guidance/latest/aws-security-controls/security-control-types.html
15. https://instrumentationtools.com/cyber-security-multiple-choice-questions-and-answers/
16. https://cyberzoni.com/standards/iso-27001/control-type/
17. https://study.com/academy/practice/quiz-worksheet-access-control-in-cybersecurity.html
18. https://purplesec.us/learn/security-controls/
19. https://www.cycognito.com/learn/exposure-management/security-controls.php
20. https://destcert.com/resources/types-security-controls/