PRACTICE • LEARN • GROW
Module 10 Final Quiz: Protection & Security MCQs
Solve topic-wise placement questions and improve your skills.
Module 10 Final Quiz: Protection & Security Progress
0 of 10 completed
0%
Topic Track
You are viewing MCQs in preview mode. Log in to select options, submit answers, and track your progress.
Log In to Answer
1
What is the Principle of Least Privilege in computer security?
A.
Users should be granted root administrator privileges by default to avoid permission errors
B.
Every program and every user of the system should operate using the least set of privileges necessary to complete the designated job
C.
Programs should have access to all memory if the system is idle
D.
Security checks should be disabled in development mode
Explanation & Key
Correct Answer:
2
In an Access Control Matrix model, what do the rows and columns represent?
A.
Rows represent Files; Columns represent Hard Drives
B.
Rows represent Domains / Subjects (users, processes); Columns represent Objects (files, devices, memory regions)
C.
Rows represent Passwords; Columns represent Usernames
D.
Rows represent System Calls; Columns represent CPU registers
Explanation & Key
Correct Answer:
3
How does an Access Control List (ACL) differ from a Capability List?
A.
ACLs are attached to objects (listing which domains can access the file); Capabilities are tickets held by domains (listing which objects the domain can access)
B.
ACLs are stored in RAM; Capabilities are stored on disk
C.
ACLs are used for networks; Capabilities are used for printers
D.
There is no difference; they are identical
Explanation & Key
Correct Answer:
4
What is a Buffer Overflow attack?
A.
Filling a hard drive with video files until it runs out of space
B.
Writing data beyond the allocated boundary of a fixed buffer on the call stack, overwriting adjacent memory such as the saved frame pointer and function return address to hijack execution flow
C.
An error where a printer runs out of paper
D.
Flooding a network with UDP packets
Explanation & Key
Correct Answer:
5
What defense mechanism randomizes the memory locations of the stack, heap, and libraries on every program execution?
A.
Data Execution Prevention (DEP)
B.
Address Space Layout Randomization (ASLR)
C.
Stack Canaries
D.
RAID 5
Explanation & Key
Correct Answer:
6
What is a Stack Canary?
A.
A software testing bot that sings when tests pass
B.
A secret random guard value placed immediately before the stack return address; if a buffer overflow overwrites the canary, the program aborts before returning
C.
A backup copy of the operating system kernel
D.
A hardware component in the power supply
Explanation & Key
Correct Answer:
7
What is a Man-in-the-Middle (MITM) attack?
A.
An attacker physically cutting network cables
B.
An attacker secretly intercepting and potentially altering communications between two parties who believe they are communicating directly with each other
C.
An attacker guessing user passwords with brute force
D.
A software deadlocking two processes
Explanation & Key
Correct Answer:
8
What is the difference between Symmetric and Asymmetric Cryptography?
A.
Symmetric uses the same secret key for both encryption and decryption; Asymmetric uses a mathematically paired public key for encryption and private key for decryption
B.
Symmetric is slower than asymmetric
C.
Symmetric encryption cannot be decrypted
D.
Asymmetric cryptography does not require keys
Explanation & Key
Correct Answer:
9
What is Role-Based Access Control (RBAC)?
A.
Allowing users to pick any role they want
B.
Assigning access permissions to specific organizational roles (e.g. Doctor, Nurse, Billing) rather than directly to individual user accounts, simplifying security administration
C.
Granting permissions based on user physical location
D.
Enforcing passwords with at least 8 characters
Explanation & Key
Correct Answer:
10
What is a Trojan Horse in computer security?
A.
A physical USB stick found in a parking lot
B.
A malicious program disguised as a benign, useful piece of software (e.g. a game or utility) that secretly executes malicious payloads in the background
C.
A worm that replicates itself over the network
D.
A CPU hardware defect
Explanation & Key
Correct Answer:
Question Palette
Answered
Current
Not Attempted
Wrong