Software & Security Quiz
Software & Security · Hard
20 questions · Unlimited attempts · Free online practice
Software and cybersecurity are at the core of the modern digital world. From operating systems and mobile apps to cloud platforms and online banking, software powers the devices an...
Playing as a guest
You can play free without an account. Create one to save scores and resume later.
Question of
Choose an answer to continue. Correct answers are revealed after you finish.
Time is up! Quiz Complete!
Your score
Correct
Wrong
Want this score saved?
Create a free account to store quiz history, track streaks, and pick up where you left off. Guests can keep playing without signup.
Questions for this topic are being prepared.
All 20 questions in this Software & Security quiz
-
Which company released the first commercial antivirus software?
- A. McAfee
- B. Avast
- C. Kaspersky
- D. Norton
-
What is 'Polymorphic Malware'?
- A. Malware that can only infect mobile phones
- B. Malware that constantly changes its identifiable features (code and signature) to evade detection
- C. A virus that only attacks biological computers
- D. Malware that deletes itself after one hour
-
What is the purpose of 'Docker'?
- A. Containerization
- B. Gaming
- C. Photo editing
- D. Word processing
-
What is 'Fuzzing' (or Fuzz Testing) in software development?
- A. A way to make code look 'fuzzy' or unreadable
- B. A technique that involves providing invalid, unexpected, or random data as inputs to a program to find bugs
- C. A method for cleaning up old software code
- D. A type of social engineering
-
What is the primary difference between traditional Antivirus (AV) and Endpoint Detection and Response (EDR)?
- A. AV only works on Windows, while EDR works on everything
- B. EDR continuously monitors system behavior and records data to detect sophisticated, multi-stage attacks
- C. AV is faster at scanning files
- D. EDR is only for mobile phones
-
In Zero Trust security, what is 'Micro-segmentation'?
- A. Dividing a hard drive into small pieces
- B. Dividing a network into small, isolated segments to limit an attacker's 'lateral movement'
- C. Using a very small monitor for security
- D. Compressing data to save space
-
What is the name of the 'zero-day' vulnerability in the Windows implementation of the SMB protocol that was used to spread the WannaCry ransomware?
- A. BlueKeep
- B. EternalBlue
- C. Heartbleed
- D. Dirty COW
-
What does it mean if a system has an 'Exploit Kit' targeting it?
- A. The system has a built-in toolkit for hackers
- B. The system is being targeted by an automated software package that identifies and exploits vulnerabilities in a victim's browser
- C. The system is using a kit to find its own bugs
- D. The system is being repaired by an expert
-
What type of attack tricks a user's browser into performing an unwanted action on a different website where the user is currently authenticated?
- A. SQL Injection
- B. Cross-Site Request Forgery (CSRF)
- C. Phishing
- D. Brute Force
-
What is a 'Rootkit' primarily designed to do?
- A. To speed up the computer's boot time
- B. To provide an attacker with high-level administrative access while hiding its presence from the OS
- C. To monitor the temperature of the CPU
- D. To create a backup of the system registry
-
What is 'DNS Spoofing' (or DNS Cache Poisoning)?
- A. Changing the name of a website
- B. An attack that introduces false information into a DNS resolver's cache, redirecting users to a malicious website
- C. Blocking access to the internet
- D. A way to make the internet faster
-
In cybersecurity, what does 'SIEM' stand for?
- A. Security Information and Event Management
- B. System Integrity and Encryption Method
- C. Secure Internet and Email Monitoring
- D. Standard Identity and Entry Management
-
What does 'OAUTH' stand for?
- A. Output Authority
- B. Open Authorization
- C. Online Authority
- D. Open Authentication
-
Which type of cyberattack involves an attacker injecting malicious scripts into a trusted website that are then executed by the victim's browser?
- A. SQL Injection
- B. Cross-Site Scripting (XSS)
- C. Denial of Service (DoS)
- D. Man-in-the-Middle
-
What is a 'Cold Boot Attack'?
- A. Attacking a computer during a snowstorm
- B. A side-channel attack where an attacker retrieves encryption keys from RAM shortly after a computer has been turned off
- C. A way to make a computer start faster in winter
- D. Using a cold laser to destroy a hard drive
-
What is the name of the hardware vulnerability found in modern CPUs that allows a malicious program to steal data from the memory of other running apps?
- A. Spectre
- B. Heartbleed
- C. BlueKeep
- D. Log4Shell
-
What is 'SSL Pinning' used for in mobile app security?
- A. To make the app icon stay on the home screen
- B. To prevent Man-in-the-Middle attacks by ensuring the app only communicates with a server that has a specific, trusted certificate
- C. To speed up the app's loading time
- D. To encrypt the phone's storage
-
What is the name of the security flaw discovered in the Java logging library 'Log4j' in 2021 that affected millions of applications?
- A. Heartbleed
- B. Log4Shell
- C. BlueKeep
- D. Spectre
-
What is the name of the highly sophisticated spyware developed by the NSO Group that has been used to target the smartphones of activists, journalists, and politicians?
- A. Pegasus
- B. Zeus
- C. Stuxnet
- D. WannaCry
-
What does 'CAPTCHA' stand for?
- A. Computer And Person Test For Clearing High Access
- B. Calculated Automated Path To Clear Human Access
- C. Completely Automated Public Turing test to tell Computers and Humans Apart
- D. Critical Access Program To Check Human Authenticity