💻
Software & Security Quiz
Software & Security · Timed
20 questions · 10 min timer · Instant feedback
Software is the set of instructions that tell computer hardware what to do - encompassing operating systems, applications, databases, and the code that powers the internet. Softwar...
Playing as a guest
You can play free without an account. Create one to save scores and resume later.
Question of
Explanation:
Choose an answer to continue. Correct answers are revealed after you finish.
Time is up! Quiz Complete!
Your score
Correct
Wrong
Want this score saved?
Create a free account to store quiz history, track streaks, and pick up where you left off. Guests can keep playing without signup.
No questions available for this topic yet.
All 20 questions in this Software & Security quiz
-
What is 'Salting' in the context of password security?
- A. Adding random data to a password before it is hashed
- B. Storing passwords in a very cold environment
- C. Changing the password every 30 days
- D. Sharing a password with multiple users
-
What is a 'Rootkit' primarily designed to do?
- A. To speed up the computer's boot time
- B. To provide an attacker with high-level administrative access while hiding its presence from the OS
- C. To monitor the temperature of the CPU
- D. To create a backup of the system registry
-
What is 'DNS Spoofing' (or DNS Cache Poisoning)?
- A. Changing the name of a website
- B. An attack that introduces false information into a DNS resolver's cache, redirecting users to a malicious website
- C. Blocking access to the internet
- D. A way to make the internet faster
-
What is 'Whitelisting'?
- A. A list of people who are allowed to use a computer
- B. A security practice that blocks all programs or IP addresses except for those specifically approved
- C. A way to make a computer screen brighter
- D. A list of websites that use a lot of white space
-
In the context of container security, what is the practice of scanning a 'Docker Image' for known vulnerabilities before it is deployed?
- A. Image Hardening
- B. Static Analysis
- C. Static Vulnerability Scanning
- D. Dynamic Debugging
-
What is the name of the hardware vulnerability found in modern CPUs that allows a malicious program to steal data from the memory of other running apps?
- A. Spectre
- B. Heartbleed
- C. BlueKeep
- D. Log4Shell
-
Which company developed Android?
- A. Microsoft
- B. Samsung
- C. Apple
- D. Google
-
What is a 'Brute Force' attack?
- A. Physically breaking into a server room
- B. A trial-and-error method used by application programs to decode encrypted data such as passwords
- C. Using a very heavy computer to hack
- D. Attacking a server with a sledgehammer
-
What type of attack tricks a user's browser into performing an unwanted action on a different website where the user is currently authenticated?
- A. SQL Injection
- B. Cross-Site Request Forgery (CSRF)
- C. Phishing
- D. Brute Force
-
Which encryption standard is currently the most widely used in the world and was selected by the U.S. government to protect classified information?
- A. DES
- B. AES (Advanced Encryption Standard)
- C. RSA
- D. MD5
-
What is 'Biometric' security?
- A. Security that only works on computers made of biological parts
- B. The use of unique physical or behavioral traits, such as fingerprints or facial patterns, to verify identity
- C. A system that requires a plant to be present to log in
- D. Using a biological virus to hack a system
-
What is the purpose of 'Docker'?
- A. Containerization
- B. Gaming
- C. Photo editing
- D. Word processing
-
Which security tool is used to monitor and filter incoming and outgoing network traffic based on an organization's previously established security policies?
- A. Antivirus
- B. Firewall
- C. VPN
- D. Router
-
What is the primary difference between traditional Antivirus (AV) and Endpoint Detection and Response (EDR)?
- A. AV only works on Windows, while EDR works on everything
- B. EDR continuously monitors system behavior and records data to detect sophisticated, multi-stage attacks
- C. AV is faster at scanning files
- D. EDR is only for mobile phones
-
Which company created Windows?
- A. Apple
- B. Microsoft
- C. Google
- D. IBM
-
Which type of cyberattack involves an attacker injecting malicious scripts into a trusted website that are then executed by the victim's browser?
- A. SQL Injection
- B. Cross-Site Scripting (XSS)
- C. Denial of Service (DoS)
- D. Man-in-the-Middle
-
What is 'SSL Pinning' used for in mobile app security?
- A. To make the app icon stay on the home screen
- B. To prevent Man-in-the-Middle attacks by ensuring the app only communicates with a server that has a specific, trusted certificate
- C. To speed up the app's loading time
- D. To encrypt the phone's storage
-
Which type of malicious software encrypts a victim's files and demands payment in exchange for the decryption key?
- A. Adware
- B. Spyware
- C. Ransomware
- D. Rootkit
-
What does 'CIA' stand for in the basic model of information security?
- A. Central Intelligence Agency
- B. Confidentiality, Integrity, and Availability
- C. Computer Information Analysis
- D. Correlation, Identification, and Authentication
-
In the context of cybersecurity, what does the 'Principle of Least Privilege' (PoLP) advocate?
- A. Giving every employee administrative access to the network
- B. Providing users with only the minimum levels of access or permissions needed to perform their jobs
- C. Changing passwords every 24 hours
- D. Encrypting all files with the same master key