Practice Questions 1
Multiple Choice Questions (MCQs):
1. What percentage of organizations have experienced at least one successful
attack in a single year?
a) 50%
b) 60%
c) 80%
d) 90%
2. Which of the following is NOT a category of information security personnel?
a) Information security managerial personnel
b) Information security technical personnel
c) Information security auditing personnel
d) Information security compliance personnel
3. Which of the following best describes the inverse relationship between
security and convenience?
a) As security increases, convenience increases
b) As security increases, convenience decreases
c) Security and convenience are not related
d) Increasing convenience always leads to better security
4. Which of the following is NOT one of the three core principles of information
security?
a) Integrity
b) Confidentiality
c) Availability
d) Accessibility
5. What is the primary motivation for hacktivists?
a) Financial gain
b) Ideology and political statements
c) Personal revenge
d) Espionage
6. Which category of threat actor is employed by governments for launching
cyber-attacks?
a) Script kiddies
b) Hacktivists
c) State actors
d) Cybercriminals
7. A cybersecurity vulnerability that arises due to an unpatched flaw in a system
that attackers exploit before a fix is available is called:
a) Configuration vulnerability
b) Platform vulnerability
c) Third-party vulnerability
d) Zero-day vulnerability
True/False Questions:
8. True or False: The information security workforce is typically divided into
three categories.
9. True or False: The relationship between security and convenience is directly
proportional. The relationship between security and convenience is inversely
proportional (as security increases, convenience decreases).
10. True or False: Cyberterrorists are considered threat actors who primarily
operate for financial gain. Cyberterrorists are motivated by causing
disruption and fear, not financial gain.
11. True or False: Script kiddies rely on their advanced coding skills to create
their own attack software. Script kiddies rely on pre-made attack tools, not
their own coding skills.
12. True or False: Competitors can also act as threat actors by engaging in cyber
espionage.
Short Answer Questions:
13. What are the three main components that protect the integrity, confidentiality,
and availability of information?



Products (Technology -based security tools)
People (Users and security professionals)
Procedures (Security policies and best practices)
14. List three types of threat actors and briefly describe their motivations.



Script kiddies – Use pre-made hacking tools without deep technical
knowledge.
Hacktivist – Attack systems to promote political or ideological causes.
State actors – Government-backed cyber-attacks who target other
nations.
15. What are the five broad categories of cybersecurity vulnerabilities?



Platforms (Weaknesses in the operating system or software)
Configurations (Misconfigurations that expose systems to threats)
Third parties (Security risks from external vendors or partners)


Patches (Missing updates that leave systems vulnerable)
Zero-day vulnerabilities (Exploited security flaws before a patch is
available)
16. Why is there a shortfall of skilled security professionals in the industry today?



Rapid growth in cyber threats outpaces the number of trained
professionals.
Increasing complexity of security systems requires specialized
expertise.
High demand for cybersecurity skills leads to talent shortages.
Chapter 1 Review Questions
1. Explain the concept of the CIA Triad
The CIA Triad is a fundamental model in information security that focuses on three
core principles:

Confidentiality – Ensures that data is only accessible to authorized
individuals, protecting it from unauthorized access.

Integrity – Ensures that data is accurate, reliable, and has not been altered
by unauthorized users.

Availability – Ensures that data and resources are accessible when needed
by authorized users.
2. Explain various types of Information and Network Attacks
There are several types of attacks targeting information and networks, including:

Malware Attacks – Includes viruses, worms, trojans, and ransomware that
infect systems.

Phishing Attacks – Deceptive emails or messages designed to trick users
into revealing credentials.

Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS)
Attacks – Overload a system to make it unavailable.

Man-in-the-Middle (MITM) Attacks – An attacker intercepts communication
between two parties.

SQL Injection – Injecting malicious SQL queries into a database-driven
application.

Zero-Day Attacks – Exploiting software vulnerabilities before patches are
available.
3. Describe various measures to mitigate Information and Network Attacks
To mitigate attacks, organizations should implement:

Firewalls – To filter and block unauthorized traffic.

Intrusion Detection Systems/Intrusion Prevention Systems (IDS/IPS) – To
monitor and respond to network threats.

Regular Software Updates & Patch Management – To prevent exploitation
of vulnerabilities.

Data Encryption – To protect sensitive data in transit and at rest.

Access Controls – To limit data access based on roles and responsibilities.

Security Awareness Training – To educate employees about phishing and
social engineering.
4. Describe a Social Engineering attack and methods used to perform it.
A Social Engineering attack manipulates individuals into divulging confidential
information. Methods include:

Phishing – Sending fake emails to trick users into revealing passwords.

Pretexting – Creating a fabricated scenario to obtain sensitive information.

Baiting – Offering something enticing (e.g., free software) to lure victims.

Tailgating/Piggybacking – Physically following an authorized person into a
restricted area.
5. Explain various types of Phishing attacks
Phishing attacks come in different forms, including:

Email Phishing – Fraudulent emails appearing to be from legitimate sources.

Spear Phishing – Targeted phishing aimed at specific individuals or
organizations.

Whaling – Aimed at high-profile executives or leaders.

Vishing – Phishing via phone calls.

Smishing – Phishing via SMS or messaging apps.
1.10 Practice Questions: Securing a Small Business Network
1. Network Mapping:

Use Cisco Packet Tracer or GNS3 to simulate the network.

Assign static IP addresses to critical devices like servers and dynamic IPs
to client devices.

Implement subnetting to optimize network performance and security.
2. Firewall Configuration:

Configure the firewall to allow only HTTP/HTTPS traffic to the web server.

Block external ICMP (ping) requests to prevent reconnaissance attacks.
3. Access Control:

Implement Role-Based Access Control (RBAC) so that only authorized
users can access specific resources.

Enable WPA3 encryption for wireless security.

Restrict guest access on the network.
4. Intrusion Detection:

Simulate a DDoS (Distributed Denial of Service) attack using a testing tool.

Use Intrusion Detection/Prevention Systems (IDS/IPS) like Snort to
monitor and prevent attacks.
5. Data Encryption:

Enable SSL/TLS encryption for HTTPS communication.

Use VPN for remote employees to ensure secure access.
6. Backup Plan:

Implement automated daily backups to an offsite cloud storage and local
encrypted storage.

Regularly test the backup recovery process.

Use ransomware protection solutions to safeguard backups.
3. Reflection and Reporting:
Report Summary:
1. Security Measures Taken:

Configured a firewall to restrict access.

Implemented WPA3 encryption (Wi-fi Protected Access 3: Provides
stronger protection against cyber-attacks.) for wireless security.

Enabled Role-Based Access Control (RBAC) for access management.

Set up Intrusion Detection System (IDS) for attack monitoring.

Used SSL/TLS encryption (Secure Sockets Layer/Transport Layer
Security: Provides secure communication over a computer netwoek) for
secure data transmission.

Developed a backup and recovery plan to mitigate ransomware threats.
2. Challenges and Solutions:

Challenge: Ensuring that the firewall rules did not disrupt legitimate traffic.
o

Solution: Tested firewall rules with simulated attacks.
Challenge: Configuring IDS to minimize false alerts.
o
Solution: Tuned the IDS to recognize real threats while reducing
unnecessary alerts.
3. Recommendations for Future Improvements:

Implement Multi-Factor Authentication (MFA) for stronger security.

Regular security audits and penetration testing.

Conduct employee training on security best practices.
Chapter 2 Practice Questions 1
Section 2.1: Introduction to TCP/IP
1. What does TCP/IP stand for, and why is it important for network
communication?

Transmission Control Protocol/Internet Protocol: It is essential for
network communication as it enables different devices and systems to
communicate over the internet and other networks.
2. Compare the OSI Model (Open Systems Interconnection Model) and the DoD
Model (Department of Defense Model: Underlines the internets architecture).
How do they differ in terms of layers?


The OSI Model has 7 layers, while the DoD Model (TCP/IP Model) has
4 layers.
The OSI Model provides a theoretical framework for networking,
whereas DoD model is a practical implementation used in real
networks.
3. Why are both the OSI and DoD Models crucial for networking?


These models help standardize communication between devices and
networks.
The OSI model is often used for educational purposes, while the DoD
Model is the foundation of internet communications.
4. How do these models help in troubleshooting networking problems?

They assist in troubleshooting by breaking down network
communication into layers, allowing engineers to pinpoint where a
problem occurs.
Section 2.2: TCP vs UDP
5. What are the key differences between TCP (Transmission Control Protocol:
Establishes a connection between the sender and the receiver.) and UDP
(User Datagram Protocol: Sends packets without verifying if the receiver is
ready.) in terms of:
a) Connection establishment: TCP is connection-oriented, requiring a
handshake before data transmission, while UDP is connectionless and sends
data without establishing a session.
b) Speed: TCP is slower due to error checking and acknowledgements, while
UDP is faster because it lacks these features.
c) Reliability: TCP ensures reliable data delivery with retransmissions,
whereas UDP does not guarantee delivery.
6. Give two real-world examples where TCP would be preferred over UDP and
explain why.


Web browsing (HTTP/HTTPS) because data integrity is essential.
Email (SMTP, IMAP, POP3) since messages need to be delivered
accurately.
7. In which scenarios is UDP more suitable than TCP?


Live video streaming and VoIP calls (low latency is critical)
Online gaming (fast transmission is prioritized over reliability)
8. Why is TCP considered more reliable than UDP?

It uses acknowledgments, retransmissions, and error correction
mechanisms, ensuring data arrives intact and in order.
Section 2.3: Protocols
9. What is a protocol, and why does it need a port number?


A protocol is a set of rules governing data transmission.
Port numbers allow multiple services to run on a single device without
interference.
10. Match the following protocols to their respective port numbers:

FTP: 21

SSH: 22

DNS: 53

DHCP: 67/68

HTTP: 80
11. What is the primary function of FTP? Why is it considered insecure?

It is used to transfer files between computers but lacks encryption,
making it insecure.
12. How does SFTP improve upon FTP?

Secure FTP encrypts file transfers using SSH, enhancing security.
13. What is the function of the SSH protocol and which port does it use?

Secure Shell provides secure remote access to devices and uses port
22.
14. Explain the difference between FTP and TFTP.

FTP is connection-oriented and uses TCP, while Trivial FTP is simpler,
uses UDP, and lacks authentication.
15. How does DNS help in network communication?

Domain Name System translates domain names (e.g., google.com)
into IP addresses.
16. What is the purpose of the DHCP protocol?

Dynamic Host Configuration Protocol assigns IP addresses
dynamically to devices on a network.
Section 2.6: IP Addressing
17. Define an IP address and its importance in networking.

A unique numerical label assigned to a device on a network, enabling
communication.
18. What is the difference between an IPv4 and an IPv6 address?

IPv4 uses 32-bit addresses, while IPv6 uses 128-bit addresses,
providing a larger address space.
19. Explain the following terms:
a) Bit: Smallest unit of data (0 or 1)
b) Byte: 8 bits
c) Octet: A group of 8 bits in an IP address.
20. What is a network address, and how does it differ from a broadcast address?

A network address identifies a network, while a broadcast address
sends data to all devices on the network.
21. Convert the following binary IP address to decimal:
11000000.10101000.00000001.00000001

192.168.1.1
22. How many bits are in an IPv4 address, and how are they divided?

32 bits, divided into four 8-bit octets.
23. What are the five classes of IPv4 addresses, and what distinguishes them?





Class A (1-126): Large networks (e.g., large corporations).
Class B (128-191): Medium-sized networks.
Class C (192-223): Small networks.
Class D (224-239): Multicasting.
Class E (240-255): Experimental use.
24. Given the IP address 192.168.1.1, identify the:
a) Network portion: 192.168.1.1
b) Host portion: 1
25. What are the three different ways to represent an IPv4 address? Provide an
example of each.



Dotted Decimal: 192.168.1.1
Binary: 11000000.10101000.00000001.00000001
Hexadecimal: C0.A8.01.01
Chapter 2 Review Questions
1. What is the valid range used for a Class C private IP address?
o
The valid range for a Class C private IP address is 192.168.0.0 to
192.168.255.255.
2. Name some of the benefits of IPv6 over IPv4.
o
Larger address space: IPv6 uses 128-bit addresses, compared to
IPv4’s 32-bit addresses.
o
Better security: IPv6 has built-in IPSec (Internet Protocol Security:
A suite of protocols that secures IP communications by
authenticating and encrypting each IP packet of a communication
session) encryption and authentication.
o
Efficient routing: IPv6 reduces broadcast traffic, improving network
performance.
o
No need for NAT (Network Address Translation): IPv6 provides
enough unique addresses for all devices.
3. What is the term for the autoconfiguration technology responsible for
addresses that start with 169.254?
o
APIPA (Automatic Private IP Addressing). It is used when a device
cannot obtain an IP address from a DHCP server.
4. What is the name for a 48-bit (6-byte) numerical address physically
assigned to a network interface, such as a NIC?
o
MAC Address (Media Access Control Address).
5. IPv6 has how many more bits compared to addresses in IPv4?
o
IPv6 has 96 more bits than IPv4 (IPv6 = 128 bits, IPv4 = 32 bits).
Practice Exercise Answers
Steps to follow:
1. Open Command Prompt and run:
2. ipconfig /all
o
Note down the IPv4 address, IPv6 address, Subnet Mask, Default
Gateway, and MAC Address.
3. Check Public IP Address:
o
Open a web browser and visit whatismyipaddress.com.
o
Note down the public IP address shown.
4. Identify the IP address types:
o
o
o
Private vs. Public:

The IP address from ipconfig is usually private (e.g.,
192.168.x.x).

The IP address from the website is a public IP address
assigned by the ISP.
IPv4 vs. IPv6:

If you see an address like 192.168.1.100, it is IPv4.

If you see an address like fe80::1a2b:3c4d:5e6f:7g8h, it is
IPv6.
IP Address Class:

If your private IPv4 address is 192.168.x.x, it is Class C.

If it starts with 10.x.x.x, it is Class A.

If it starts with 172.16.x.x – 172.31.x.x, it is Class B.
Chapter 3 Practice Questions
Practice Questions – Chapter 3: Addressing
General Addressing Questions
1. What is the primary purpose of an IP address?

Uniquely identifies a device on a network, enabling communication
between devices over the internet or local networks.
2. How does an IPv4 address differ from a MAC address?

An IPv4 address is a logical address assigned to a device for network
communication, while a MAC address is a physical address assigned
to a network interface card (NIC) by the manufacturer.
3. What role does subnetting play in networking?

Divides a larger network into smaller sub-networks to improve
efficiency, security, and management of IP address allocation.
4. What is the difference between a private IP address and a public IP
address?

A private IP address is used within a local network and is not routable
on the internet, whereas a public IP address is assigned by an ISP and
is globally routable on the internet.
5. What are the two main versions of IP addresses used today?

IPv4 and IPv6.
MAC Addresses
6. What is a MAC address, and how is it assigned to a device?

A unique 48-bit identifier assigned to a device’s network interface by
the manufacturer.
7. How many bits are in a MAC address?

48 bits (6 bytes)
8. Can a MAC address be changed, and if so, how?

Yes, using software tools or network adapter setting in the operating
system.
9. What is the format of a MAC address?

It is written in hexadecimal format, separated by colons or hyphens
(e.g., 00:1A:2B:3C:4D:5E).
10. How does a MAC address differ from an IP address in terms of functionality?

A MAC address is used for local network communication (Layer 2 of
the OSI model), while an IP address is used for device identification
across different networks (Layer 3).
IPv4 Addressing
11. How many bits are in an IPv4 address?

32 bits
12. What are the four classes of IPv4 addresses, and what are their ranges?





Class A: 1.0.0.0 – 126.255.255.255
Class B: 128.0.0.0 – 191.255.255.255
Class C: 192.0.0.0 – 223.255.255.255
Class D (Multicast): 224.0.0.0 – 239.255.255.255
Class E (Experimental): 240.0.0.0 – 255.255.255.255
13. What does CIDR (Classless Inter-Domain Routing) do?

CIDR allows more efficient IP address allocation by using variablelength subnet masking instead of fixed class-based addressing.
14. What are the three types of IPv4 addresses (Unicast, Multicast, Broadcast)?



Unicast: One-to-one communication
Multicast: One-to-many communication
Broadcast: One-to-all communication in a network.
15. What is the default subnet mask for a Class A, B, and C network?



Class A: 255.0.0.0
Class B: 255.255.0.0
Class C: 255.255.255.0
DHCP (Dynamic Host Configuration Protocol)
16. What is the main purpose of DHCP in a network?

Automatically assigns IP addresses and other network settings to
devices on a network.
17. What are the 8 DHCP messages used in communication?








DHCP Discover
DHCP offer
DHCP Request
DHCP Acknowledgement (ACK)
DHCP Nak (Negative Acknowledgement)
DHCP Release
DHCP inform
DHCP Decline
18. What is a DHCP lease?

A temporary assignment of an IP address to a device for a specified
period.
19. How does DHCP differ from static IP addressing?

A DHCP assigns IP addresses dynamically, while static IP addressing
requires manual configuration.
20. What is a DHCP scope?

A DHCP scope is a range of IP addresses that a DHCP server is
authorized to assign to devices on a network.
Subnetting
21. What is subnetting, and why is it used?

Subnetting divides a larger network into smaller, more manageable
sub-networks to optimize performance and security.
22. What is a subnet mask, and how does it work?

Determines which portion of an IP address represents the network and
which portion represents the host.
23. How do you calculate the number of subnets and hosts in a subnet?


Subnets: 2^borrowed bits
Hosts: (2^remaining bits) – 2
24. What are the steps to create a subnet?




Identify the required number of subnets or hosts.
Determine the subnet mask.
Calculate subnet ranges and addresses.
Assign Ips accordingly.
25. What does the /24 in an IP address (e.g., 192.168.1.0/24) mean?

It means that the first 24 bits are for the network portion, leaving 8 bits
for host addresses (256 possible addresses, minus 2 for network and
broadcast).
Chapter 3 Review Questions
Review Questions
1. What is the valid range used for a Class C private IP address?
o
The valid range for a Class C private IP address is 192.168.0.0 to
192.168.255.255.
2. Name some of the benefits of IPv6 over IPv4.
o
Larger address space: IPv6 has 128-bit addresses, allowing for more
than 340 undecillion addresses.
o
Simplified header structure: IPv6 headers are more efficient,
improving routing and performance.
o
Improved security: IPv6 includes IPsec for better security.
o
Better multicast support: IPv6 improves support for multicast
communication.
o
No need for NAT (Network Address Translation): IPv6’s vast
address space reduces the need for NAT.
3. What is the term for the autoconfiguration technology responsible for
addresses that start with 169.254?
o
This is called Automatic Private IP Addressing (APIPA).
o
When a device cannot obtain an IP address from a DHCP server, it
assigns itself an address in the 169.254.0.0 to 169.254.255.255 range.
4. What defines a unicast address?
o
A unicast address is an address used to send data to a single
specific device on a network.
o
It is one-to-one communication.
5. What defines a multicast address?
o
A multicast address is an address used to send data to a group of
devices on a network, typically to devices that have subscribed to the
multicast group.
o
It is one-to-many communication.
6. What is the name for a 48-bit (6-byte) numerical address physically
assigned to a network interface, such as a NIC?
o
This is called a MAC (Media Access Control) address.
7. IPv6 has how many more bits, compared to addresses in IPv4?
o
IPv6 has 96 more bits compared to IPv4.
o
IPv4 uses 32 bits, while IPv6 uses 128 bits.
8. What is the private address range for Class B networks?
o
The private address range for Class B networks is 172.16.0.0 to
172.31.255.255.
9. What is the Class C range of values for the first octet in decimal and in
binary?
o
The Class C range for the first octet is 192 to 223 in decimal and
11000000 to 11011111 in binary.
10. What is the 127.0.0.1 address used for?

127.0.0.1 is known as the loopback address.

It is used by a device to communicate with itself. It is often referred to as
localhost.
Practice Questions: Identify a NIC Manufacturer
Task Steps:
1. Go to Wireshark’s OUI Lookup Tool:
o
Visit the website: Wireshark OUI Lookup Tool.
2. Identify the Manufacturer of the NIC:
o
The first three bytes of a MAC address (also called the Organizationally
Unique Identifier or OUI) identify the manufacturer of the NIC.
o
For example, if the MAC address starts with 40:16:7E, you can enter
40:16:7E into the Wireshark OUI Lookup Tool to find the manufacturer.
3. Perform the MAC address lookup using command-line tools:
o
Step 1: Open PowerShell or Command Prompt and type ipconfig /all
to display your NIC’s MAC address.
o
Step 2: Copy the first three bytes (OUI) of the MAC address (e.g.,
40:16:7E).
o
Step 3: Go to the Wireshark OUI Lookup Tool, paste the OUI, and
click "Find".
o
Step 4: The tool will display the manufacturer associated with that
MAC address (e.g., TP-Link, ASUS).
Note: This practice exercise helps you identify the manufacturer of a device based
on its MAC address using the OUI Lookup Tool or by inspecting packets captured
with Wireshark. The OUI is the first part of a MAC address and is unique to each
manufacturer.