100 Cyber Security Quiz Questions & Answers 2026

Cyber Threats & Attacks — 25 Questions

1. What is malware? (Software designed to harm, exploit, or disable computer systems)
2. What is a virus? (Malicious code that attaches to legitimate programs and spreads)
3. What is ransomware? (Malware that encrypts files and demands payment for decryption)
4. What is phishing? (Fraudulent attempt to obtain sensitive info by pretending to be trustworthy)
5. What is spear phishing? (Targeted phishing aimed at specific individuals or organizations)
6. What is a DDoS attack? (Distributed Denial of Service — overwhelming a system with traffic)
7. What is a Man-in-the-Middle attack? (Attacker intercepts communication between two parties)
8. What is SQL injection? (Inserting malicious SQL code into a query to manipulate databases)
9. What is cross-site scripting (XSS)? (Injecting malicious scripts into trusted web pages)
10. What is a zero-day vulnerability? (Unknown vulnerability with no patch — attacker exploits it before fix)
11. What is a botnet? (Network of compromised computers controlled by an attacker)
12. What is social engineering? (Manipulating people to reveal confidential information)
13. What is a Trojan horse? (Malware disguised as legitimate software)
14. What is a rootkit? (Software hiding malicious activity — provides persistent privileged access)
15. What is a keylogger? (Malware recording keystrokes to capture passwords)
16. What is a brute force attack? (Trying all possible combinations to crack a password)
17. What is a dictionary attack? (Using common words/phrases to crack passwords)
18. What is credential stuffing? (Using leaked usernames/passwords from one breach on other sites)
19. What is an APT? (Advanced Persistent Threat — long-term targeted attack by skilled adversaries)
20. What is a watering hole attack? (Infecting websites frequented by targets)

Security Concepts & Cryptography — 25 Questions

1. What is encryption? (Converting readable data into unreadable ciphertext)
2. What is decryption? (Converting ciphertext back to readable plaintext)
3. What is a cipher? (Algorithm for performing encryption/decryption)
4. What is symmetric encryption? (Same key for encryption and decryption — AES, DES)
5. What is asymmetric encryption? (Public/private key pair — RSA, ECDSA)
6. What is a hash function? (One-way function producing fixed-size output from any input)
7. What is SHA-256? (Secure Hash Algorithm — widely used cryptographic hash)
8. What is TLS? (Transport Layer Security — encrypts internet communications)
9. What is a digital certificate? (Electronic document proving ownership of a public key)
10. What is a PKI? (Public Key Infrastructure — framework for managing digital certificates)
11. What is 2FA/MFA? (Two/Multi-Factor Authentication — requires two forms of verification)
12. What is HTTPS? (HTTP + TLS — secure web communication)
13. What is a VPN? (Virtual Private Network — encrypts internet traffic and masks IP)
14. What is a firewall? (Network security device monitoring/filtering traffic)
15. What is the CIA triad? (Confidentiality, Integrity, Availability — core security principles)
16. What is a security audit? (Systematic evaluation of security policies and controls)
17. What is penetration testing? (Authorized simulated attack to find vulnerabilities)
18. What is SIEM? (Security Information and Event Management — centralized monitoring)
19. What is least privilege? (Users have minimum permissions needed — reduces attack surface)
20. What is defense in depth? (Multiple security layers — if one fails, others protect)