Get Your CertSecurity FundamentalsPlayCompete
‹ Security Fundamentals tests

Security Fundamentals practice questions

10 questions in 1 test. Open one to answer it on its own, or take a whole test.

Test 1

Take Test 1 ›
  1. A retailer's online store is flooded with junk traffic from thousands of compromised devices and becomes unreachable for customers for six hours. No data was read, copied, or… · Core Security Principles
  2. An employee signs in to the company intranet with the correct password and one-time code, and the home page loads. When she opens the payroll administration page, she gets "403… · Identity & Access Management
  3. A bank is reviewing four proposed login flows for its customer portal. Which one is NOT multi-factor authentication? · Identity & Access Management
  4. During a code review you find a database password stored in a config file as c3VwZXJzZWNyZXQ=. The developer says: "It's fine, it's Base64-encrypted." What is the problem with… · Cryptography Basics
  5. Asymmetric (public-key) cryptography solves the problem of agreeing on a secret with a server you have never met. Yet after a TLS connection is established, the web page itself… · Cryptography Basics
  6. A startup is building its own user login. The goal is to limit the damage if the user table is ever stolen. How should the application store user passwords? · Cryptography Basics
  7. A new reporting tool needs to run a nightly query that reads the sales table in the company database. It never writes data. An administrator is creating the database account the… · Core Security Principles
  8. A penetration test finds that an application's search box is vulnerable to SQL injection. The code builds its query by concatenating the user's search text into the SQL string… · Application Security
  9. A customer is logged in to her bank's website in one browser tab. In another tab she opens a link to an unrelated page. That page silently submits a hidden form to the bank's… · Application Security
  10. An employee receives an email saying his payroll account is locked, with a link to https://payroll-verify-portal.example. The page shows a valid HTTPS padlock with no browser… · Social Engineering & Trust