50 Cyber Security Quiz Questions & Answers

Below are 50 cyber security quiz questions with the correct answer and a short explanation for each. Use them to revise, host a quiz night, or prepare for competitions — then challenge yourself with the timed, interactive version on QuizOxa.

Cyber Security Quiz Questions and Answers

Q1. What does HTTPS stand for in safe browsing?

✅ Answer: Hypertext Transfer Protocol Secure

💡 HTTPS (Hypertext Transfer Protocol Secure) encrypts communication between your browser and the website to protect your data.

Q2. What is phishing?

✅ Answer: Deceptive emails designed to steal credentials

💡 Phishing is a social engineering attack where bad actors send spoofed emails to trick victims into revealing sensitive info.

Q3. What does a firewall do?

✅ Answer: Monitors and filters network traffic

💡 A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on security rules.

Q4. What is Malware?

✅ Answer: Malicious software designed to harm devices

💡 Malware (malicious software) is any program or file that is harmful to a computer user, such as viruses, worms, and trojans.

Q5. What is multi-factor authentication (MFA)?

✅ Answer: A login system requiring 2 or more verification methods

💡 MFA is a security system that requires more than one method of authentication from independent categories of credentials to verify the user's identity.

Q6. What is ransomware?

✅ Answer: Malware that encrypts files and demands payment

💡 Ransomware is malware that locks or encrypts files, demanding a ransom payment from the victim to restore access.

Q7. What does VPN stand for?

✅ Answer: Virtual Private Network

💡 A VPN (Virtual Private Network) establishes a secure, encrypted connection between your device and the internet.

Q8. What is a 'Zero Day' vulnerability?

✅ Answer: A security flaw unknown to the vendor with no patch available

💡 A Zero Day vulnerability is a software security flaw that is known to attackers (or publicly disclosed) before the vendor has released a patch.

Q9. What does DDOS stand for?

✅ Answer: Distributed Denial of Service

💡 DDOS stands for Distributed Denial of Service, which is an attack where multiple compromised systems crash a target network or website by flooding it with traffic.

Q10. Which of the following is considered a strong password?

✅ Answer: Admin@2026!

💡 A strong password includes uppercase letters, lowercase letters, numbers, and special symbols (like Admin@2026!) and is not easily guessed.

Q11. What is 'social engineering' in cyber security?

✅ Answer: Manipulating people into revealing confidential information

💡 Social engineering exploits human psychology, tricking people into breaking security procedures or giving up sensitive information.

Q12. What is a 'trojan horse' in computing?

✅ Answer: Malware disguised as legitimate software

💡 A trojan horse is malware that hides inside seemingly harmless software, then performs malicious actions once installed.

Q13. What is 'two-factor authentication' (2FA)?

✅ Answer: A second verification step beyond your password

💡 2FA adds a second layer of security, such as a code sent to your phone, so a stolen password alone is not enough to log in.

Q14. What is 'encryption'?

✅ Answer: Converting data into a coded form to prevent unauthorized access

💡 Encryption scrambles readable data into ciphertext using a key, so only authorized parties with the key can read it.

Q15. What is a 'brute force' attack?

✅ Answer: Trying many password combinations until one works

💡 A brute force attack systematically tries every possible password or key until the correct one is found.

Q16. What does 'antivirus software' do?

✅ Answer: Detects, blocks, and removes malicious software

💡 Antivirus software scans, detects, and removes malware such as viruses, worms, and trojans to protect a device.

Q17. What is a 'data breach'?

✅ Answer: Unauthorized access or theft of sensitive data

💡 A data breach occurs when confidential information is accessed, stolen, or exposed without authorization.

Q18. What is 'spyware'?

✅ Answer: Software that secretly monitors and collects user information

💡 Spyware is malware that secretly gathers information about a user's activity, keystrokes, or data without consent.

Q19. Why should you avoid using public Wi-Fi for banking?

✅ Answer: It is often unencrypted and can be intercepted by attackers

💡 Public Wi-Fi is frequently unsecured, allowing attackers to intercept data. Use a VPN or mobile data for sensitive activities.

Q20. What is a 'security patch'?

✅ Answer: A software update that fixes vulnerabilities

💡 A security patch is an update released by vendors to fix known vulnerabilities and protect software from exploitation.

Q21. What is a 'botnet'?

✅ Answer: A network of infected devices controlled by an attacker

💡 A botnet is a group of internet-connected devices infected with malware and controlled remotely, often used for large-scale attacks.

Q22. What does 'phishing' most commonly use to reach victims?

✅ Answer: Fraudulent emails and messages

💡 Phishing most often arrives via deceptive emails or texts that impersonate trusted organizations to steal credentials.

Q23. What is 'end-to-end encryption'?

✅ Answer: Data is encrypted so only the sender and recipient can read it

💡 End-to-end encryption ensures only the communicating users can read messages; not even the service provider can access the content.

Q24. What is a 'keylogger'?

✅ Answer: Malware that records every keystroke a user types

💡 A keylogger secretly records keystrokes to capture passwords, messages, and other sensitive typed information.

Q25. What is the purpose of a 'CAPTCHA'?

✅ Answer: To distinguish humans from automated bots

💡 A CAPTCHA is a challenge-response test used to determine whether the user is a human, blocking automated bots.

Q26. What is 'identity theft'?

✅ Answer: Stealing someone's personal information to commit fraud

💡 Identity theft is the fraudulent acquisition and use of a person's private identifying information, usually for financial gain.

Q27. Which is the safest way to store many complex passwords?

✅ Answer: Using a reputable password manager

💡 A password manager securely stores and encrypts unique, complex passwords, so you only need to remember one master password.

Q28. What is a 'worm' in cyber security?

✅ Answer: Self-replicating malware that spreads across networks

💡 A worm is malware that copies itself and spreads to other computers automatically, often without user action.

Q29. What does 'HTTPS' indicate about a website?

✅ Answer: The connection is encrypted and more secure

💡 HTTPS shows the connection between your browser and the site is encrypted (via SSL/TLS), protecting data in transit.

Q30. What is 'patch management'?

✅ Answer: The process of keeping software updated with security fixes

💡 Patch management is the practice of regularly applying software updates to fix vulnerabilities and keep systems secure.

Q31. What is 'penetration testing'?

✅ Answer: Authorized simulated attacks to find security weaknesses

💡 Penetration testing ('pen testing') is an authorized, simulated cyberattack used to identify and fix vulnerabilities before real attackers exploit them.

Q32. What is a 'firewall rule'?

✅ Answer: A condition that decides whether to allow or block network traffic

💡 A firewall rule specifies criteria (like IP addresses or ports) to permit or deny network traffic, controlling access to a network.

Q33. What does 'SSL/TLS' provide?

✅ Answer: Encrypted, secure communication over the internet

💡 SSL/TLS are cryptographic protocols that secure data transmitted over networks, forming the basis of HTTPS.

Q34. What is 'adware'?

✅ Answer: Software that displays unwanted advertisements

💡 Adware is software that automatically displays or downloads advertisements, sometimes bundled with free programs and can be intrusive.

Q35. What is the principle of 'least privilege'?

✅ Answer: Granting users only the access they need to do their job

💡 Least privilege means users and programs are given the minimum access necessary, reducing the damage a compromise can cause.

Q36. What is 'multi-layered security' (defense in depth)?

✅ Answer: Using multiple security measures so if one fails, others protect

💡 Defense in depth layers multiple security controls (firewalls, encryption, MFA, backups) so no single failure exposes the system.

Q37. What should you do if you receive a suspicious email link?

✅ Answer: Avoid clicking and verify the sender first

💡 Never click suspicious links. Verify the sender's identity independently, as links may lead to phishing or malware sites.

Q38. What is a 'digital certificate'?

✅ Answer: An electronic credential that verifies a website's identity

💡 A digital certificate verifies the identity of a website or entity and enables encrypted connections, issued by trusted authorities.

Q39. What is 'data backup' important for?

✅ Answer: Recovering data after loss, attack, or hardware failure

💡 Regular backups let you restore data after ransomware, accidental deletion, or hardware failure, minimizing damage.

Q40. What is 'incognito' or 'private' browsing mode?

✅ Answer: It stops the browser saving history and cookies locally

💡 Private browsing prevents the browser from storing local history and cookies, but it does not hide your activity from your ISP or websites.

Q41. What is 'spoofing' in cyber security?

✅ Answer: Disguising a communication to appear from a trusted source

💡 Spoofing is when an attacker disguises their identity (email, IP, or website) to appear as a trusted source and deceive victims.

Q42. What is 'biometric authentication'?

✅ Answer: Verifying identity using fingerprints, face, or iris scans

💡 Biometric authentication verifies identity using unique physical traits like fingerprints, facial features, or iris patterns.

Q43. What is a 'security audit'?

✅ Answer: A systematic evaluation of a system's security

💡 A security audit is a thorough review of an organization's systems and policies to find and fix security weaknesses.

Q44. Why is it risky to reuse the same password across sites?

✅ Answer: If one site is breached, all your accounts become vulnerable

💡 Reusing passwords means a single data breach can expose all accounts sharing that password (credential stuffing).

Q45. What is 'https' padlock icon in a browser meant to show?

✅ Answer: The connection is encrypted and secure

💡 The padlock indicates the connection uses HTTPS encryption, protecting data sent between you and the site.

Q46. What is a 'security token' or authenticator app used for?

✅ Answer: Generating time-based one-time codes for login

💡 Authenticator apps (like Google Authenticator) generate time-based one-time passcodes used as a second factor in MFA.

Q47. What is 'data privacy'?

✅ Answer: The right to control how personal information is collected and used

💡 Data privacy concerns how personal information is collected, stored, shared, and used, and an individual's right to control it.

Q48. What should you do before disposing of an old phone or laptop?

✅ Answer: Securely wipe or factory reset it to erase personal data

💡 Always securely wipe or factory reset devices before disposal so personal data cannot be recovered by others.

Q49. What is 'cyber hygiene'?

✅ Answer: Routine practices that keep your digital life secure

💡 Cyber hygiene refers to regular habits, like updating software and using strong passwords, that maintain good security.

Q50. What is a common sign of a phishing website?

✅ Answer: A misspelled or suspicious URL and urgent requests for information

💡 Phishing sites often have slightly misspelled URLs, poor grammar, and pressure you to urgently enter sensitive information.

Ready to Test Yourself?

You've read the answers — now see how many you actually remember. The interactive Cyber Security quiz picks questions at random, adds a countdown timer, and tracks your score.

More Question Sets