alleryStart learning →CEH Information Security — practice questions
Explore 22 free Information Security questions in CEH Cybersecurity. Each question opens with answer choices, the correct answer and a worked solution.
Practise Information Security with Quill →Information Security MCQs with answers
Showing questions 1–22 of 22.
Viruses, worms, Trojans, spyware and botnets that damage machines or open unauthorised access are grouped as:Read the answer and worked solution →A fake email posing as a bank asks a customer for her login details. That trick is:Read the answer and worked solution →On an unsecured public network, an attacker quietly sits between two parties and intercepts their traffic. That attack is:Read the answer and worked solution →A web form allows crafted input to reach the database and run hostile code. Databases must be protected against:Read the answer and worked solution →An attacker spoofs source addresses to flood a service until it cannot answer real users. That is a:Read the answer and worked solution →A former contractor still has credentials and misuses them. That danger is described as an:Read the answer and worked solution →Protecting wired and Wi-Fi networks from intrusion is called:Read the answer and worked solution →Building protection into software during design, covering data handling and user authentication, is called:Read the answer and worked solution →The process that confirms the identity and authorisation of a person or device using a system is:Read the answer and worked solution →A bank asks for a password and then a code sent to a separate device. That approach is:Read the answer and worked solution →Access approaches listed include privileged user accounts, multifactor authentication, user life cycle management and:Read the answer and worked solution →A design principle keeps privileged operation modules as small as possible. That principle is:Read the answer and worked solution →Safeguards that promote data resilience include immutable, isolated copies that can be restored quickly, plus:Read the answer and worked solution →Planning to keep key operations running through an outage covers business continuity and:Read the answer and worked solution →Beyond simply securing systems, organisations must create and govern processes that protect against costly:Read the answer and worked solution →In a cloud arrangement, shared responsibility covers patching, incident response and:Read the answer and worked solution →A project launched in 2001 to secure web applications gave the world a well-known set of guidance. That project is:Read the answer and worked solution →Using a cloud provider means the customer must extend something to that provider. Cloud security requires users to:Read the answer and worked solution →Laptops and phones are the frontline of many attacks, so firms promote security awareness to strengthen:Read the answer and worked solution →Security policies are said to address privacy, authenticity, service availability, integrity and:Read the answer and worked solution →Attacks demanding payment to unlock systems are spreading to nonprofits and local governments. Those attacks are:Read the answer and worked solution →A content delivery network leaked HTTPS data after one classic memory fault. That fault was a:Read the answer and worked solution →
How to practise
- Choose a Information Security question and try to work out your answer.
- Open the question to check the correct answer and read its worked solution.
- Continue in the app for bite-sized lessons, explanations and review with Quill. You can start without creating an account.