MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which of the following is a result of using default administrative credentials?
   a. Increased encryption
   b. Enhanced security
   c. Weak configuration
   d. Reduced vulnerability
   Answer: c. Weak configurationtarlogic+1​
2. An example of insecure protocol usage is:
   a. HTTPS
   b. SFTP
   c. HTTP
   d. SSH
   Answer: c. HTTPcodecademy​youtube​
3. What happens if antivirus software is disabled?
   a. Higher CPU usage
   b. Weak security configuration
   c. Faster boot time
   d. Enhanced authentication
   Answer: b. Weak security configurationbalbix​
4. Which practice increases risk due to open permissions?
   a. Principle of least privilege
   b. Default-deny scheme
   c. Granting access to everyone
   d. Role-based access control
   Answer: c. Granting access to everyonecodecademy​
5. Why are unpatched systems considered a weak configuration?
   a. Enables encryption
   b. Prevents malware
   c. Leaves known vulnerabilities exploitable
   d. Improves performance
   Answer: c. Leaves known vulnerabilities exploitablequalysec+1​
6. Using ‘admin/admin’ as credentials is an example of:
   a. Strong authentication
   b. Secure defaults
   c. Default account settings
   d. Privilege escalation
   Answer: c. Default account settingstarlogic+1​
7. Revealing errors in software contribute to:
   a. Better debugging for attackers
   b. Stronger password management
   c. Secure configuration
   d. Reduced visibility
   Answer: a. Better debugging for attackerscodecademy​
8. What is a common consequence of open network ports?
   a. Performance boost
   b. Increased vulnerability
   c. Reduced bandwidth
   d. Enhanced privacy
   Answer: b. Increased vulnerabilityyoutube​codecademy​
9. Failure to encrypt sensitive files results in:
   a. Bypassing authentication
   b. Weak configuration
   c. Faster data transfer
   d. Strong compliance
   Answer: b. Weak configurationbalbix​
10. Inadequate access controls can lead to:
    a. Unauthorized data exposure
    b. Limited user access
    c. Enhanced network security
    d. Reduced attack surface
    Answer: a. Unauthorized data exposurebalbix+1​
11. Why is it risky to retain default software configurations?
    a. Enables multifactor authentication
    b. Allows unauthorized access
    c. Boosts system speed
    d. Increases memory usage
    Answer: b. Allows unauthorized accessepicbrokers+1​
12. Which setting should be updated immediately after software installation?
    a. GUI changes
    b. Default credentials
    c. Screen resolution
    d. System logs
    Answer: b. Default credentialstarlogic+1​
13. Which is a weak configuration in database management?
    a. Strong encryption
    b. Limited access
    c. Unpatched database engines
    d. Enable logging
    Answer: c. Unpatched database enginesqualysec+1​
14. Not enforcing password complexity policies may result in:
    a. Secure login
    b. Weak configuration
    c. Lower system latency
    d. Default admin block
    Answer: b. Weak configurationjit+1​
15. What describes using legacy protocols like Telnet?
    a. Strong security
    b. Weak configuration
    c. Improved reliability
    d. Enhanced privacy
    Answer: b. Weak configurationextrahop+1​
16. Which scenario indicates weak encryption in communication?
    a. Use of AES-256
    b. Use of deprecated algorithms
    c. Use of HTTPS
    d. Use of VPN tunnel
    Answer: b. Use of deprecated algorithmscodecademy+1​
17. What is the impact of poor coding practices?
    a. Reduced risk
    b. Introduction of vulnerabilities
    c. Enhanced application speed
    d. Secure configuration
    Answer: b. Introduction of vulnerabilitiesbalbix​
18. Allowing remote root logins is considered:
    a. Secure by design
    b. Weak configuration
    c. Strong encryption
    d. Privileged management
    Answer: b. Weak configurationyoutube​codecademy​
19. Misconfigured firewall rules often result in:
    a. Stronger security
    b. Open access to network
    c. Improved DNS
    d. Secure sockets layer
    Answer: b. Open access to networkepicbrokers+1​
20. Why are default VPN credentials dangerous?
    a. Improve VPN speed
    b. Enable unauthorized network access
    c. Reduce network latency
    d. Restrict admin rights
    Answer: b. Enable unauthorized network accesstarlogic​
21. What misconfiguration can cause compliance failure?
    a. Strong password management
    b. Secure endpoints
    c. Unencrypted sensitive data
    d. Up-to-date patches
    Answer: c. Unencrypted sensitive databalbix​
22. Which control is essential to mitigate open permissions?
    a. Allow-all access
    b. Role-based access control
    c. Weak authentication
    d. Public network sharing
    Answer: b. Role-based access controljit+1​
23. What are risks of not monitoring configurations?
    a. No compliance issues
    b. Unnoticed vulnerabilities
    c. Better log management
    d. Improved performance
    Answer: b. Unnoticed vulnerabilitiesjit+1​
24. Which configuration mistake is likely to expose personal data?
    a. Encrypted backups
    b. Unencrypted storage
    c. Access audits
    d. Multi-factor authentication
    Answer: b. Unencrypted storagebalbix​
25. Disabled logging is an example of:
    a. Strong monitoring
    b. Weak configuration
    c. Enhanced performance
    d. Improved troubleshooting
    Answer: b. Weak configurationjit​
26. What is likely if users are given administrator access unnecessarily?
    a. Role confinement
    b. Elevated risk
    c. Privilege downgrading
    d. Secure baseline
    Answer: b. Elevated riskepicbrokers+1​
27. What must be done to reduce misconfiguration risk after hardware installation?
    a. Use default settings
    b. Review all configurations
    c. Ignore vendor guidelines
    d. Avoid access checks
    Answer: b. Review all configurationscodecademy​
28. Why should weak encryption be replaced regularly?
    a. Increases system downtime
    b. Eliminates deprecated vulnerabilities
    c. Boosts data loss
    d. Enables faster networks
    Answer: b. Eliminates deprecated vulnerabilitiesmicromindercs+1​
29. Which misconfiguration can make malware infections easier?
    a. Disabled antivirus
    b. Encrypted files
    c. Secure root access
    d. Multi-factor authentication
    Answer: a. Disabled antivirusyoutube​balbix​
30. The sum of entry points exploitable by attackers is called:
    a. Attack surface
    b. Firewall rulebase
    c. Patch level
    d. Audit trail
    Answer: a. Attack surfacesanfoundry​
31. Not changing default SNMP community strings exposes:
    a. Performance logging
    b. Device vulnerabilities
    c. Policy enforcement
    d. Strong privacy
    Answer: b. Device vulnerabilitiesextrahop+1​
32. Failure to patch web servers is a classic case of:
    a. Secure deployment
    b. Weak configuration
    c. Optimized hosting
    d. Effective monitoring
    Answer: b. Weak configurationqualysec+1​
33. Direct user access to admin dashboards without checks is:
    a. Role-based restriction
    b. Configuration error
    c. Increased compliance
    d. Privilege separation
    Answer: b. Configuration errortarlogic+1​
34. Allowing open database ports to the internet leads to:
    a. Strong encryption
    b. Data exposure risk
    c. Improved access time
    d. Secure replication
    Answer: b. Data exposure riskmicromindercs+1​
35. Which action prevents weak configurations in new applications?
    a. Skipping security review
    b. Applying vendor defaults
    c. Conducting configuration audits
    d. Allowing public access
    Answer: c. Conducting configuration auditsjit+1​
36. Which is a sign of weak configuration in cloud services?
    a. Publicly accessible resources
    b. Encryption at rest
    c. Identity federation
    d. Audit logging
    Answer: a. Publicly accessible resourcesmicromindercs+1​
37. Not separating user and admin roles may result in:
    a. Least-privilege enforcement
    b. Privilege escalation
    c. Secure delegation
    d. Password rotation
    Answer: b. Privilege escalationepicbrokers+1​
38. Failing to sanitize user inputs can lead to:
    a. Secure transactions
    b. Configuration vulnerability
    c. Blocked access
    d. Hardened code
    Answer: b. Configuration vulnerabilityqualysec+1​
39. Leaving unused services enabled can result in:
    a. Lower risk profile
    b. Additional attack vectors
    c. Improved patch management
    d. Streamlined performance
    Answer: b. Additional attack vectorsextrahop+1​
40. Which error exposes version information to attackers?
    a. Generic error logging
    b. Detailed error messages
    c. Limited output
    d. Signed certificates
    Answer: b. Detailed error messagescodecademy​
41. Poor backup configuration may cause:
    a. Faster data recovery
    b. Data loss risk
    c. Improved monitoring
    d. Stronger firewalls
    Answer: b. Data loss riskmicromindercs+1​
42. Why are weak encryption keys problematic?
    a. Enable secure transmission
    b. Allow brute force attacks
    c. Enforce data privacy
    d. Improve checksum accuracy
    Answer: b. Allow brute force attackscodecademy+1​
43. Allowing direct internet access to production environments is:
    a. Secure segmentation
    b. Weak network configuration
    c. Hardened access control
    d. Efficient scaling
    Answer: b. Weak network configurationextrahop+1​
44. Not updating firmware on devices can result in:
    a. New features added
    b. Retention of vulnerabilities
    c. Reduced compatibility
    d. Fast boot times
    Answer: b. Retention of vulnerabilitiesqualysec+1​
45. Absence of multi-factor authentication enables:
    a. Secure transactions
    b. Easy unauthorized access
    c. Enhanced user verification
    d. Strong identity management
    Answer: b. Easy unauthorized accessjit+1​
46. Which configuration weakens API protection?
    a. Solid authorization checks
    b. Unrestricted API access
    c. Secure tokens used
    d. Enforced rate limits
    Answer: b. Unrestricted API accessjit​
47. Which mistake makes phishing easier in organizations?
    a. User awareness training
    b. Weak email filtering rules
    c. Strong DKIM enforcement
    d. Secure mail gateways
    Answer: b. Weak email filtering rulesepicbrokers+1​
48. Poor mobile device management leads to:
    a. Restricted app installation
    b. Increased attack surface
    c. Reduced system risk
    d. Hardened configurations
    Answer: b. Increased attack surfacesanfoundry+1​
49. Why should revealing server headers be mitigated?
    a. Improved response times
    b. Server details exposed to attackers
    c. Upgraded SSL certificate
    d. Secure DNS resolution
    Answer: b. Server details exposed to attackerscodecademy​
50. The best way to minimize risk from weak configurations is:
    a. Ignore configuration checks
    b. Regular vulnerability assessments
    c. Disable monitoring
    d. Allow public network access
    Answer: b. Regular vulnerability assessmentsqualysec+1​

1. https://www.tarlogic.com/blog/top-ten-cybersecurity-misconfigurations/
2. https://www.balbix.com/insights/security-misconfiguration-impact-examples-and-prevention/
3. https://www.codecademy.com/article/weak-configurations
4. https://www.youtube.com/watch?v=xhSQaiD49Hs
5. https://qualysec.com/vulnerability-assessment-methodology/
6. https://www.epicbrokers.com/insights/top-ten-network-misconfigurations/
7. https://www.jit.io/resources/app-security/common-security-misconfigurations-and-how-to-avoid-them
8. https://www.extrahop.com/blog/top-10-network-misconfigurations
9. https://www.micromindercs.com/blog/vulnerability-assessment-table-top-exercises
10. https://www.sanfoundry.com/cyber-security-questions-answers-bugs-vulnerabilities/
11. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
12. https://www.igmguru.com/blog/cyber-security-mcqs
13. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
14. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
15. https://testbook.com/objective-questions/mcq-on-owasp-top-10-vulnerabilities–5eea6a0d39140f30f369e30b
16. https://www.securityscientist.net/blog/12-questions-answered-on-vulnerabilities/
17. https://www.interviewbit.com/cyber-security-mcq/
18. https://www.sentinelone.com/cybersecurity-101/cybersecurity/cyber-security-risk-assessment/
19. https://www.includehelp.com/mcq/cyber-security-mcqs.aspx
20. https://www.scribd.com/document/524434738/mcq-questions-on-cyber-security