Start learning →

CISSP Information Security — practice questions

Explore 30 free Information Security questions in CISSP Cybersecurity. Open each question or exercise to read its content, reference answers and available explanation.

Practise Information Security with Quill →

Information Security questions and exercises with answers

Showing questions 1–30 of 30.

Viruses, worms, Trojans, spyware and botnets that damage machines or open unauthorised access are grouped as:Read the answer and worked solution →A fake email posing as a bank asks a customer for her login details. That trick is:Read the answer and worked solution →On an unsecured public network, an attacker quietly sits between two parties and intercepts their traffic. That attack is:Read the answer and worked solution →A web form allows crafted input to reach the database and run hostile code. Databases must be protected against:Read the answer and worked solution →An attacker spoofs source addresses to flood a service until it cannot answer real users. That is a:Read the answer and worked solution →A former contractor still has credentials and misuses them. That danger is described as an:Read the answer and worked solution →Protecting wired and Wi-Fi networks from intrusion is called:Read the answer and worked solution →Building protection into software during design, covering data handling and user authentication, is called:Read the answer and worked solution →The process that confirms the identity and authorisation of a person or device using a system is:Read the answer and worked solution →A bank asks for a password and then a code sent to a separate device. That approach is:Read the answer and worked solution →Access approaches listed include privileged user accounts, multifactor authentication, user life cycle management and:Read the answer and worked solution →A design principle keeps privileged operation modules as small as possible. That principle is:Read the answer and worked solution →Safeguards that promote data resilience include immutable, isolated copies that can be restored quickly, plus:Read the answer and worked solution →Planning to keep key operations running through an outage covers business continuity and:Read the answer and worked solution →Beyond simply securing systems, organisations must create and govern processes that protect against costly:Read the answer and worked solution →In a cloud arrangement, shared responsibility covers patching, incident response and:Read the answer and worked solution →A project launched in 2001 to secure web applications gave the world a well-known set of guidance. That project is:Read the answer and worked solution →Using a cloud provider means the customer must extend something to that provider. Cloud security requires users to:Read the answer and worked solution →Laptops and phones are the frontline of many attacks, so firms promote security awareness to strengthen:Read the answer and worked solution →Security policies are said to address privacy, authenticity, service availability, integrity and:Read the answer and worked solution →Attacks demanding payment to unlock systems are spreading to nonprofits and local governments. Those attacks are:Read the answer and worked solution →A content delivery network leaked HTTPS data after one classic memory fault. That fault was a:Read the answer and worked solution →Catch the attacksRead the answer and worked solution →Pop the security qualitiesRead the answer and worked solution →Run the security gatesRead the answer and worked solution →Slice the security wordsRead the answer and worked solution →Attack or defenceRead the answer and worked solution →Sort the security wordsRead the answer and worked solution →Type the numberRead the answer and worked solution →Cybersecurity bingoRead the answer and worked solution →

Worked practice questions

Viruses, worms, Trojans, spyware and botnets that damage machines or open unauthorised access are grouped as:

  1. Malware
  2. Firmware
  3. Freeware
  4. Shareware
Show answer and solution

Correct answer: A. Malware

1. All of them are hostile software. 2. Damage or unauthorised access is the aim. 3. They are malware. _Source: OpenStax Introduction to Computer Science, Chapter 14, Cyber Resources Qualities and Cyber Computing Governance._

Open this question →

A fake email posing as a bank asks a customer for her login details. That trick is:

  1. Patching
  2. Phishing
  3. Pairing
  4. Polling
Show answer and solution

Correct answer: B. Phishing

1. It is a form of social engineering. 2. The message pretends to be legitimate. 3. It is phishing. _Source: OpenStax Introduction to Computer Science, Chapter 14, Cyber Resources Qualities and Cyber Computing Governance._

Open this question →

On an unsecured public network, an attacker quietly sits between two parties and intercepts their traffic. That attack is:

  1. Middle listener
  2. Password spray
  3. Brute forcing
  4. Buffer overflow
Show answer and solution

Correct answer: A. Middle listener

1. Two parties think they talk directly. 2. Data is stolen in transit. 3. It is the middle listener attack. _Source: OpenStax Introduction to Computer Science, Chapter 14, Cyber Resources Qualities and Cyber Computing Governance._

Open this question →

How to practise

  1. Choose a Information Security question and try to work out your answer.
  2. Open the question to check the correct answer and read its worked solution.
  3. Continue in the app for bite-sized lessons, explanations and review with Quill. You can start without creating an account.

More Cybersecurity topics

CybersecurityCybersecurity FoundationsInformation Technology