Cyber Security & Digital Safety - MCQ Question

Bank

# Multiple Choice Questions (MCQs)

Module 1: Introduction to Cybersecurity

1. Cybersecurity is mainly concerned with:

a) Designing video games b) Protecting digital devices and data from attacks
c) Installing operating systems d) Making websites load faster
Answer: b) Protecting digital devices and data from attacks
2. Which of the following is NOT a goal of cybersecurity?
a) Confidentiality b) Integrity c) Availability d) Profitability
Answer: d) Profitability
3. In the CIA Triad, “Confidentiality” means:
a) Keeping data available for everyone
b) Keeping data private and accessible only to authorized people
c) Backing up data regularly d) Making data easy to share
Answer: b) Keeping data private and accessible only to authorized people
4. Which objective of cybersecurity ensures that data is not changed by unauthorized people?
a) Confidentiality b) Integrity c) Availability d) Accessibility
Answer: b) Integrity
5. “Availability” in cybersecurity means:
a) Data should always be accessible to authorized users b) Data should be free for everyone
c) Data should be hidden from everyone d) Data should be stored on the cloud
only
Answer: a) Data should always be accessible to authorized users
6. Which of the following is an example of malware?
a) Antivirus software b) Worm c) Firewall d) Encryption
Answer: b) Worm
7. Malware stands for:
a) Malicious Warehouse b) Malicious Software
c) Multiple Software d) Managed Software
Answer: b) Malicious Software
8. A program that looks safe but secretly contains harmful code is called:
a) Trojan b) Worm c) Spyware d) Firewall
Answer: a) Trojan
9. Software that secretly monitors user activity is called:
a) Spyware b) Worm c) Ransomware d) Trojan
Answer: a) Spyware
10. Which cyberattack tricks people into giving personal information by pretending to be a trusted
source?
a) Malware b) Phishing c) Hacking d) Ransomware
Answer: b) Phishing
11. A phishing attack often happens through:
a) Phone calls only b) Fake emails and websites
c) USB devices only d) Computer hardware
Answer: b) Fake emails and websites
12. Ransomware is designed to:
a) Speed up your computer b) Lock your files and demand payment to unlock them
OVERSEAS TECHNOLOGIES
37
c) Remove viruses from your computer d) Send you advertisements
Answer: b) Lock your files and demand payment to unlock them
13. Which of the following is a safe practice to avoid phishing?
a) Clicking all links in emails b) Checking the website URL before entering details
c) Using the same password everywhere d) Ignoring software updates
Answer: b) Checking the website URL before entering details
14. The best way to protect against ransomware damage is to:
a) Never use the internet b) Keep backups of important files
c) Disable antivirus software d) Share your passwords with friends
Answer: b) Keep backups of important files
15. Which type of malware spreads automatically without user action?
a) Trojan b) Worm c) Spyware d) Keylogger
Answer: b) Worm
16. Cybersecurity is important for:
a) Only government organizations b) Only large companies
c) Everyone using digital devices d) Only students
Answer: c) Everyone using digital devices
17. Which is NOT an example of a cyber threat?
a) Phishing b) Malware c) Ransomware d) Antivirus
Answer: d) Antivirus
18. Integrity in data means:
a) Data is private b) Data is correct and unchanged
c) Data is available 24/7 d) Data is encrypted
Answer: b) Data is correct and unchanged
19. If your phone shows unwanted ads and slows down suddenly, it might be:
a) Overheated battery b) Malware infection
c) Low storage space only d) Too many contacts saved
Answer: b) Malware infection
20. In phishing, hackers often:
a) Encrypt your files and demand payment b) Pretend to be a trusted source to steal data
c) Damage your computer hardware physically d) Upgrade your software for free
Answer: b) Pretend to be a trusted source to steal data

# MCQs – Module 2: Cybersecurity Fundamentals

1. What is a cybersecurity framework?

a) A software program b) A set of guidelines and best practices for protecting
systems
c) A physical security device d) A type of malware
Answer: b) A set of guidelines and best practices for protecting systems
2. Which organization developed the NIST Cybersecurity Framework?
a) International Security Office b) National Institute of Standards and Technology
c) Internet Safety Organization d) Network Information Security Team
Answer: b) National Institute of Standards and Technology
3. Which is NOT one of the five functions of the NIST Framework?
a) Identify b) Protect c) Destroy d) Respond
Answer: c) Destroy
OVERSEAS TECHNOLOGIES
38
4. In the NIST framework, which function focuses on restoring systems after an attack?
a) Detect b) Respond c) Recover d) Identify
Answer: c) Recover
5. ISO/IEC 27001 is mainly concerned with:
a) Manufacturing computers b) Information Security Management System (ISMS)
c) Physical security of buildings d) Cybercrime law enforcement
Answer: b) Information Security Management System (ISMS)
6. Which of the following is a best practice in cybersecurity?
a) Using the same password for all accounts b) Ignoring software updates
c) Training employees on security awareness d) Sharing passwords with colleagues
Answer: c) Training employees on security awareness
7. Keeping software up to date is important because:
a) It adds more advertisements b) It improves video quality
c) It fixes security vulnerabilities d) It changes the design of websites
Answer: c) It fixes security vulnerabilities
8. Secure coding means:
a) Writing code in secret locations b) Writing software to prevent security vulnerabilities
c) Writing code only in English d) Writing code for games only
Answer: b) Writing software to prevent security vulnerabilities
9. Which is NOT a principle of secure coding?
a) Validating user input b) Hardcoding passwords
c) Handling errors safely d) Updating code with security patches
Answer: b) Hardcoding passwords
10. Encryption is used to:
a) Convert data into an unreadable form for unauthorized users b) Delete old files from
a computer
c) Store data without a password d) Speed up internet
connections
Answer: a) Convert data into an unreadable form for unauthorized users
11. In symmetric encryption:
a) The same key is used for encryption and decryption
b) A public key is used for both encryption and decryption
c) Data cannot be decrypted
d) No key is required
Answer: a) The same key is used for encryption and decryption
12. Which encryption method is used in secure website communications (HTTPS)?
a) Symmetric only b) Asymmetric only
c) Both symmetric and asymmetric together d) No encryption
Answer: c) Both symmetric and asymmetric together
13. Authentication is the process of:
a) Encrypting files b) Proving the identity of a user
c) Deleting user accounts d) Updating passwords
Answer: b) Proving the identity of a user
14. Which is an example of Two -Factor Authentication (2FA)?
a) Only using a password b) Password + OTP sent to phone
c) Face recognition only d) Using a guest login
Answer: b) Password + OTP sent to phone
15. Which authentication method uses fingerprints or facial scans?
a) Password authentication b) Biometric authentication
OVERSEAS TECHNOLOGIES
39
c) OTP authentication d) Key -based authentication
Answer: b) Biometric authentication
16. Multi -Factor Authentication (MFA) means:
a) Using only one method to log in b) Using two or more authentication methods
c) Using a random password every time d) Changing passwords weekly
Answer: b) Using two or more authentication methods
17. Which is the first step in the NIST Cybersecurity Framework?
a) Protect b) Identify c) Respond d) Detect
Answer: b) Identify
18. The “Protect” function in NIST involves:
a) Recovering from an attack b) Stopping attackers from accessing systems
c) Monitoring for attacks d) Identifying all assets
Answer: b) Stopping attackers from accessing systems
19. ISO 27001 requires organizations to:
a) Create advertisements for security products
b) Set up an Information Security Management System
c) Build new physical offices
d) Avoid software updates
Answer: b) Set up an Information Security Management System
20. Which of the following is a common best practice in cybersecurity?
a) Disabling firewalls b) Using weak passwords
c) Limiting access to sensitive information d) Clicking unknown links
Answer: c) Limiting access to sensitive information

# MCQs – Module 3: Personal Digital Safety

1. A strong password should be at least:

a) 4 characters b) 6 characters c) 8 characters d) 12 characters
Answer: d) 12 characters
2. Which of the following should NOT be used in a password?
a) Numbers and symbols b) Your date of birth
c) Upper and lowercase letters d) Random combinations
Answer: b) Your date of birth
3. Using the same password for all accounts is:
a) Safe b) Risky c) Recommended d) A best practice
Answer: b) Risky
4. Which tool can help you generate and store strong passwords?
a) Password Manager b) Calculator c) Photo Editor d) PDF Reader
Answer: a) Password Manager
5. Two-Factor Authentication (2FA) means:
a) Using two accounts for login b) Using a password plus another method like OTP
c) Logging in from two devices d) Sharing your password with two people
Answer: b) Using a password plus another method like OTP
6. What is the safest way to store passwords?
a) Save them in browser on public computers b) Write them on sticky notes
c) Use a password manager d) Tell them to friends
Answer: c) Use a password manager
OVERSEAS TECHNOLOGIES
40
7. Which is a good privacy practice on social media?
a) Keeping profile public for everyone b) Sharing real -time locations
c) Hiding phone number and address d) Accepting friend requests from
strangers
Answer: c) Hiding phone number and address
8. Why should you avoid posting real -time locations on social media?
a) It slows down internet speed b) Criminals could track your movements
c) It uses more mobile data d) It reduces profile likes
Answer: b) Criminals could track your movements
9. Which is NOT a sign of a phishing email?
a) Spelling mistakes b) Urgent requests for personal info
c) Links to official websites d) Strange sender addresses
Answer: c) Links to official websites
10. How can you check if a link in an email is suspicious?
a) Click it immediately b) Hover over the link to see the real URL
c) Delete the email without looking d) Forward it to all contacts
Answer: b) Hover over the link to see the real URL
11. What should you do if you receive a suspicious email claiming to be from your bank?
a) Reply with your account details b) Click the link inside
c) Verify by contacting the bank directly d) Share it on social media
Answer: c) Verify by contacting the bank directly
12. Which is NOT a secure email practice?
a) Logging out from public computers b) Using strong email passwords
c) Opening attachments from unknown senders
d) Enabling Two -Factor Authentication
Answer: c) Opening attachments from unknown senders
13. A secure website for transactions should have:
a) HTTP b) HTTPS c) FTP d) IP address only
Answer: b) HTTPS
14. The lock icon in a browser’s address bar indicates:
a) The website is under maintenance b) The website has a secure HTTPS connection
c) The website is blocked d) The website is loading slowly
Answer: b) The website has a secure HTTPS connection
15. Which is the safest way to use public Wi -Fi for sensitive tasks?
a) Without any protection b) Using a VPN
c) Using incognito mode only d) Using a free proxy website
Answer: b) Using a VPN
16. One way to protect personal data on your phone is:
a) Keeping it unlocked b) Using PIN, password, or biometric lock
c) Sharing it with everyone d) Avoiding software updates
Answer: b) Using PIN, password, or biometric lock
17. Why should you avoid downloading software from unverified websites?
a) They load slowly b) They may contain malware
c) They cost more d) They need more storage
Answer: b) They may contain malware
18. In phishing scams, attackers often:
a) Offer free gifts to get your details b) Repair your computer for free
c) Install antivirus for you d) Improve your internet speed
Answer: a) Offer free gifts to get your details
OVERSEAS TECHNOLOGIES
41
19. Checking your Sent and Trash folders in email helps:
a) Free up storage space b) Detect unauthorized activity
c) Increase internet speed d) Save battery life
Answer: b) Detect unauthorized activity
20. Which is a safe browsing habit?
a) Using outdated browsers b) Ignoring security warnings
c) Visiting HTTPS sites d) Disabling antivirus software
Answer: c) Visiting HTTPS sites

MCQs – Module 4: Securing Devices and Networks

1. Which of the following is the most secure way to unlock a mobile device?
a) Pattern lock b) PIN c) Fingerprint or Face recognition d) Swipe to
unlock
Answer: c) Fingerprint or Face recognition
2. What does "app permissions" refer to in mobile security?
a) The list of apps you have installed b) Access rights an app requests (e.g., camera, location)
c) The license of an app d) The update history of an app
Answer: b) Access rights an app requests (e.g., camera, location)
3. Which of the following is NOT a mobile security best practice?
a) Installing apps only from official app stores b) Avoiding public Wi -Fi without a VPN
c) Using outdated operating system versions d) Enabling screen lock
Answer: c) Using outdated operating system versions
4. Why is device encryption important?
a) It improves battery life b) It hides the device from hackers
c) It ensures stored data is unreadable without the correct key d) It speeds up internet
browsing
Answer: c) It ensures stored data is unreadable without the correct key
5. Which of the following helps prevent unauthorized access to your phone?
a) Airplane mode b) Strong lock screen security
c) Low screen brightness d) Silent mode
Answer: b) Strong lock screen security
6. Which app permission should you be most cautious about granting unnecessarily?
a) Calendar access b) Camera and microphone access
c) Alarm setting access d) Volume control access
Answer: b) Camera and microphone access
7. How often should you update your mobile operating system for security?
a) Once a year b) Only if something stops working
c) Whenever updates are available d) Never
Answer: c) Whenever updates are available
8. What is the purpose of remote wipe in mobile security?
a) To clean the phone screen b) To delete all data if the device is lost or stolen
c) To reset the phone wallpaper d) To clear browsing history
Answer: b) To delete all data if the device is lost or stolen
9. Which type of network connection is safest for online banking on a mobile device?
a) Public Wi -Fi b) Home Wi -Fi with encryption
c) Open hotspot d) Bluetooth tethering
Answer: b) Home Wi -Fi with encryption
OVERSEAS TECHNOLOGIES
42
10. What is the role of antivirus apps in mobile security?
a) They improve battery life b) They protect against malware and phishing attacks
c) They speed up your phone d) They block spam calls only
Answer: b) They protect against malware and phishing attack
11. Which Wi -Fi encryption method is most secure for home networks?
a) WEP b) WPA2/WPA3 c) Open (no password) d) Shared key
Answer: b) WPA2/WPA3
12. Why should you change the default router password?
a) To make Wi -Fi faster b) To prevent hackers from easily accessing the router
c) To reset the router settings d) To hide your Wi -Fi name
Answer: b) To prevent hackers from easily accessing the router
13. What does disabling SSID broadcast do?
a) Makes Wi -Fi faster b) Hides the network name from casual
scanning
c) Blocks all devices from connecting d) Increases internet data speed
Answer: b) Hides the network name from casual scanning
14. Which of the following is NOT a basic router security practice?
a) Changing default login credentials b) Updating router firmware regularly
c) Disabling firewall d) Enabling strong Wi -Fi encryption
Answer: c) Disabling firewall
15. What is MAC address filtering used for in home networks?
a) Blocking certain websites b) Allowing only specific devices to connect
c) Increasing network speed d) Assigning IP addresses automatically
Answer: b) Allowing only specific devices to connect
16. Why should you update your router firmware?
a) To increase internet speed b) To fix security vulnerabilities
c) To change the Wi -Fi name d) To block social media sites
Answer: b) To fix security vulnerabilities
17. Which is the safest password type for your Wi -Fi network?
a) Short and easy to remember b) Combination of letters, numbers, and symbols
c) Your phone number d) The word "password"
Answer: b) Combination of letters, numbers, and symbols
18. What does a firewall do for your home network?
a) Speeds up internet b) Blocks unauthorized access while allowing safe traffic
c) Stores passwords securely d) Cleans junk files from the network
Answer: b) Blocks unauthorized access while allowing safe traffic
19. Which is a sign your Wi -Fi network might be hacked?
a) Internet speed suddenly drops b) Wi -Fi signal strength is too high
c) Router lights never blink d) Your device battery lasts longer
Answer: a) Internet speed suddenly drops
20. Why should you disable remote router management unless needed?
a) To save electricity b) To prevent outsiders from controlling your router settings
c) To hide the Wi -Fi password d) To make Wi -Fi faster
Answer: b) To prevent outsiders from controlling your router settings

MCQs - Module 5: Cybersecurity in the Workplace

OVERSEAS TECHNOLOGIES
43
1. What is the main purpose of cybersecurity training for employees?
A) To teach employees coding skills
B) To reduce the risk of human errors causing cyber incidents
C) To improve internet speed
D) To avoid software updates
Answer: B
2. Which is a type of social engineering attack?
A) Phishing B) Firewall breach C) Software crash D) Hardware upgrade
Answer: A) Phishing
3. What is "vishing"?
A) Video phishing B) Voice phishing via phone calls
C) Virus phishing D) Visual phishing
Answer: B) Voice phishing via phone calls
4. Smishing is done through:
A) Social media posts B) SMS messages C) Video calls D) Email
Answer: B) SMS messages
5. Following someone into a restricted area without authorization is called:
A) Phishing B) Tailgating C) Pretexting D) Spoofing
Answer: B) Tailgating
6. What is the safest action if you receive a suspicious email?
A) Reply immediately B) Click the link to check
C) Report it to IT/security team D) Ignore and delete
Answer: C) Report it to IT/security team
7. Which security measure encrypts internet traffic for remote workers?
A) VPN B) Firewall C) Antivirus D) Router
Answer: A) VPN
8. Multi -Factor Authentication (MFA) adds:
A) Faster logins B) More passwords to remember
C) An extra layer of security D) Access to all devices
Answer: C) An extra layer of security
9. Why should employees avoid public Wi -Fi for work?
A) It’s too slow B) It’s unsafe and can be hacked easily
C) It’s expensive D) It has ads
Answer: B) It’s unsafe and can be hacked easily
10. Which device is considered an endpoint?
A) Printer B) Laptop C) Scanner D) All of the above
Answer: D) All of the above
11. What should be done before accessing company systems remotely?
A) Disable antivirus B) Connect to a VPN
C) Turn off Wi -Fi D) Install games
Answer: B) Connect to a VPN
12. Which of these is NOT a social engineering method?
A) Pretexting B) Smishing C) Brute force attack D) Vishing
Answer: C
13. Endpoint protection includes:
A) Installing antivirus software B) Enabling firewalls
C) Device encryption D) All of the above
Answer: D) All of the above
OVERSEAS TECHNOLOGIES
44
14. A VPN hides your:
A) Email address B) Password C) IP address D) Computer name
Answer: C) IP address
15. The first step in responding to a suspected social engineering attack is to:
A) Share the information with a colleague
B) Inform the IT/security team immediately
C) Ignore it
D) Change your wallpaper
Answer: B) Inform the IT/security team immediately
16. Why is employee awareness important in cybersecurity?
A) Employees can detect threats early B) Employees manage all networks
C) Employees can design firewalls D) Employees can write antivirus programs
Answer: A) Employees can detect threats early
17. Pretexting is:
A) Sending text messages before meetings B) Creating a false story to obtain information
C) Encrypting a text message D) Pre -scheduling emails
Answer: B) Creating a false story to obtain information
18. What should you do if your work laptop is lost?
A) Do nothing B) Inform the company immediately
C) Buy a new one D) Tell a friend
Answer: B) Inform the company immediately
19. Which is an example of endpoint protection?
A) Turning off the computer at night B) Installing a firewall
C) Keeping files in folders D) Using sticky notes for passwords
Answer: B) Installing a firewall
20. What does encryption do?
A) Deletes old files B) Converts information into unreadable code
C) Speeds up the internet D) Backs up data
Answer: B) Converts information into unreadable code

MCQs - Module 6: Cyber Hygiene and Incident Response

1. Which of the following is a cyber hygiene practice?
a) Ignoring software updates b) Using strong passwords
c) Sharing passwords with friends d) Using public Wi -Fi without a VPN
Answer: b) Using strong passwords
2. Why are regular software updates important?
a) They make the computer slow b) They fix security vulnerabilities
c) They delete old files d) They increase internet speed
Answer: b) They fix security vulnerabilities
3. Which of these is an example of a data backup method?
a) Copying files to an external hard drive b) Sending files to a friend
c) Printing all documents d) Using outdated USB drives
Answer: a) Copying files to an external hard drive
4. How often should critical data be backed up?
a) Once a year b) Only before a holiday
OVERSEAS TECHNOLOGIES
45
c) Regularly, depending on usage d) Never
Answer: c) Regularly, depending on usage
5. Which of the following is NOT a good cyber hygiene habit?
a) Updating antivirus software b) Clicking unknown email links
c) Using two -factor authentication d) Monitoring account activity
Answer: b) Clicking unknown email links
6. Incident reporting in cyber hygiene means:
a) Telling friends about your problems b) Reporting suspicious activities to IT/security teams
c) Changing your computer wallpaper d) Deleting all files without checking
Answer: b) Reporting suspicious activities to IT/security teams
7. Which is the safest way to store backup data?
a) Same device as the original data b) Cloud storage with encryption
c) Public file -sharing websites d) USB drive without password
Answer: b) Cloud storage with encryption
8. What is the purpose of regular password changes?
a) To make them harder to remember b) To reduce the risk of stolen credentials
c) To confuse hackers d) To reset email accounts
Answer: b) To reduce the risk of stolen credentials
9. Which device setting can improve cyber hygiene?
a) Automatic updates b) Disabling firewall
c) Turning off encryption d) Sharing location with everyone
Answer: a) Automatic updates
10. What is a sign that your device may be compromised?
a) Faster internet speed b) Unusual pop -ups and slow performance
c) Lower electricity bill d) Longer battery life
Answer: b) Unusual pop -ups and slow performance
11. What is the first step in incident response?
a) Recovery b) Eradication c) Preparation d) Reporting to the police
Answer: c) Preparation
12. An incident response plan helps organizations:
a) Prevent cyber attacks b) Respond quickly and effectively to incidents
c) Avoid paying salaries d) Increase software costs
Answer: b) Respond quickly and effectively to incidents
13. Which phase involves identifying if an incident has occurred?
a) Containment b) Identification c) Recovery d) Lessons learned
Answer: b) Identification
14. During the containment phase, the main goal is:
a) Erase all data b) Limit the damage of the incident
c) Inform the media immediately d) Shut down all servers permanently
Answer: b) Limit the damage of the incident
15. In an incident response plan, “roles and responsibilities” define:
a) Who gets paid more b) Who is responsible for each task during an incident
OVERSEAS TECHNOLOGIES
46
c) Who works from home d) Who changes the passwords
Answer: b) Who is responsible for each task during an incident
16. Which of these is NOT part of incident response?
a) Detection and analysis b) Containment
c) Recovery d) Buying new devices without investigation
Answer: d) Buying new devices without investigation
17. After an incident is resolved, the “lessons learned” phase is important for:
a) Celebrating the victory b) Improving future incident response
c) Blaming employees d) Deleting security logs
Answer: b) Improving future incident response
18. In incident response, eradication means:
a) Removing the cause of the incident b) Hiding evidence
c) Rebooting the system d) Changing the Wi -Fi password only
Answer: a) Removing the cause of the incident
19. Which tool can help in detecting incidents?
a) Antivirus software b) Video editing software
c) Gaming console d) Social media apps
Answer: a) Antivirus software
20. What is the benefit of having a well -documented incident response plan?
a) Faster and more organized recovery b) Increased downtime
c) More confusion during incidents d) Lower productivity
Answer: a) Faster and more organized recovery

#MCQs - Module 7: Legal and Ethical Considerations

1. What does GDPR stand for?

a) General Data Protection Regulation b) Global Data Privacy Rule
c) Government Data Protection Regulation d) General Digital Privacy Rule
Answer: a) General Data Protection Regulation
2. Which year did GDPR come into effect?
a) 2015 b) 2016 c) 2018 d) 2020
Answer: c) 2018
3. Which law is specific to California, USA for data privacy?
a) CCPA b) GDPR c) HIPAA d) PCI DSS
Answer: a) CCPA
4. What is the main purpose of data protection laws?
a) To sell user data to companies b) To protect personal data and privacy of individuals
c) To ban internet usage d) To monitor only employees
Answer: b) To protect personal data and privacy of individuals
5. Under GDPR, companies must inform users about data breaches within:
a) 12 hours b) 24 hours c) 48 hours d) 72 hours
Answer: d) 72 hours
OVERSEAS TECHNOLOGIES
47
6. CCPA gives California residents the right to:
a) Delete their personal data b) Sell other people’s data
c) Block internet access d) Encrypt all websites
Answer: a) Delete their personal data
8. Which of the following is NOT a compliance requirement under GDPR?
a) Data minimization b) Purpose limitation
c) Selling personal data freely d) Data accuracy
Answer: c) Selling personal data freely
9. What is the penalty for non -compliance with GDPR?
a) ■1,000 b) 4% of annual global turnover
c) 2% of annual revenue only from Europe d) Warning letter only
Answer: b) 4% of annual global turnover
10. Which Indian law covers IT security and cybercrime?
a) IT Act, 2000 b) Digital Security Act, 2015
c) Indian Privacy Act d) Cyber Law, 2020
Answer: a) IT Act, 2000
11. What is ‘compliance’ in cybersecurity?
a) Following laws, regulations, and standards b) Hacking into a system
c) Ignoring data privacy rules d) Using only free software
Answer: a) Following laws, regulations, and standards
12. What is ethical hacking?
a) Hacking without permission b) Hacking with permission to find security weaknesses
c) Hacking for money theft d) Hacking for revenge
Answer: b) Hacking with permission to find security weaknesses
13. Which term describes hacking for malicious purposes?
a) White Hat b) Black Hat c) Grey Hat d) Ethical Hacker
Answer: b) Black Hat
14. What is a major ethical dilemma in cybersecurity?
a) Whether to patch a bug or leave it b) Whether to protect or misuse sensitive data
c) Whether to upgrade your laptop d) Whether to use free Wi -Fi
Answer: b) Whether to protect or misuse sensitive data
15. White hat hackers are also known as:
a) Cyber criminals b) Security researchers c) Data sellers d) Hacktivists
Answer: b) Security researchers

# MCQs - Module 8: Emerging Threats and Future Trends

1. What is the main danger of AI -driven cyber attacks?
a) They are slower than manual attacks b) They are easier to detect
c) They are faster and harder to detect d) They only affect social media
Answer: c) They are faster and harder to detect
2. Which of the following is an example of an AI -driven attack?
a) Antivirus software b) Deepfake videos
OVERSEAS TECHNOLOGIES
48
c) Manual password reset d) Installing firewalls
Answer: b) Deepfake videos
3. What does IoT stand for?
a) Internet of Transactions b) Internet of Tools
c) Internet of Things d) Internal Operating Technology
Answer: c) Internet of Things
4. Which of these is a major risk of IoT devices?
a) High electricity bills b) Limited storage
c) Weak security and hacking risk d) Short battery life
Answer: c) Weak security and hacking risk
5. What is a botnet attack ?
a) A virus that deletes files b) Using many IoT devices for an attack
c) A type of firewall d) A secure network connection
Answer: b) Using many IoT devices for an attack
6. The Mirai botnet attack is related to:
a) Banking fraud b) IoT device hijacking c) Ransomware d) Cloud storage
Answer: b) IoT device hijacking
7. Cyber warfare is usually between:
a) Two friends b) Companies c) Countries d) Schools
Answer: c) Countries
8. Which of these could be a target of cyber warfare?
a) Power grids b) Video games c) Music apps d) Social media only
Answer: a) Power grids
9. Cyber warfare is often used for:
a) Entertainment b) Espionage and disruption c) Advertising d) Education
Answer: b) Espionage and disruption
10. Which of the following is NOT an emerging cyber threat?
a) AI -driven attacks b) IoT vulnerabilities
c) Cyber warfare d) Installing antivirus software
Answer: d) Installing antivirus software
11. What is the principle of Zero Trust Security ?
a) Trust all internal users b) “Never trust, always verify”
c) Allow all users free access d) No need for passwords
Answer: b) “Never trust, always verify”
Q12. Which technology is used in predictive analytics for cybersecurity?
a) Social media b) Machine learning c) USB drives d) Printers
Answer: b) Machine learning
Q13. Which cybersecurity trend helps protect cloud storage ?
a) Botnets b) Firewalls
c) Cloud security tools d) Manual password sharing
Answer: c) Cloud security tools
OVERSEAS TECHNOLOGIES
49
Q14. Which future technology may break current encryption methods?
a) AI b) Quantum computing c) 5G network d) Blockchain
Answer: b) Quantum computing
Q15. What is the solution to quantum computing threats?
a) Remove encryption b) Quantum -safe encryption
c) Cloud migration d) Use of USB drives
Answer: b) Quantum -safe encryption
Q16. AI is also used in defense for:
a) Slowing attacks b) Detecting malware and phishing
c) Making deepfakes d) Breaking firewalls
Answer: b) Detecting malware and phishing
17. Predictive analytics in cybersecurity is used for:
a) Gaming b) Predicting future cyber attacks
c) Online shopping d) Watching movies
Answer: b) Predicting future cyber attacks
18. Cybersecurity awareness and training is important because:
a) Technology alone cannot stop all attacks b) It reduces electricity costs
c) It increases social media followers d) It prevents software updates
Answer: a) Technology alone cannot stop all attacks
19. Which of the following is a future trend in cybersecurity?
a) Ignoring phishing b) Zero Trust Security
c) Removing encryption d) Manual incident reporting only
Answer: b) Zero Trust Security
20. Which statement is TRUE?
a) Only technology can solve cybersecurity problems
b) Cybersecurity will remain the same in the future
c) Both people and technology are needed for cybersecurity
d) Quantum computing has no effect on security
Answer: c) Both people and technology are needed for cybersecurity