Cybersecurity, SOC & Managed Services Assessment Practice Test & MCQs

Verified Jobs Live | Targeting 2024–2026 Batches & Fresh Graduates

Govt Jobs Interview Prep SSLC/PUC 2026 Calculators Post a Job

Want real exam simulation? Take timed full-length mock tests with automatic submission, negative marking, and performance analytics.

Full Timed Mock Tests →

In an email security header investigation, which mechanism specifically validates that an email was cryptographically signed by the sending domain's private key?

Worked Solution & Logic

DKIM (DomainKeys Identified Mail) uses public-key cryptography to verify that an email message was indeed authorized by the domain owner and was not altered in transit. SPF only checks sender IP lists, while DMARC specifies the policy for handling SPF/DKIM failures.

A Tier-1 SOC analyst detects an alert: 'Multiple Failed Logins followed by Single Successful Login within 30 seconds' on a Domain Controller. What type of attack does this pattern most likely indicate?

Worked Solution & Logic

Multiple rapid failed authentication attempts followed immediately by a successful authentication is the textbook signature of a Brute Force or Credential Stuffing / Password Spray attack, where the attacker iterated through potential passwords until finding the valid credential.

What is the primary difference between a Managed Service Provider (MSP) and a Managed Security Service Provider (MSSP)?

Worked Solution & Logic

While an MSP manages day-to-day IT operational health (patch management, backups, desktop support, network uptime), an MSSP is a specialized security organization providing continuous threat detection, SOC-as-a-service, SIEM/EDR engineering, incident response, and regulatory compliance auditing.

Which of the following ports is the default unencrypted listening port for Microsoft Remote Desktop Protocol (RDP), frequently targeted by external threat actors?

Worked Solution & Logic

TCP port 3389 is the default port for Microsoft RDP. Exposing port 3389 directly to the public internet without a VPN or Zero-Trust Network Access (ZTNA) is one of the most common vectors for initial ransomware infiltration.

In the MITRE ATT&CK framework, what tactic describes the adversary's efforts to keep access to systems across restarts, changed credentials, and other interruptions?

Worked Solution & Logic

Persistence (TA0003) consists of techniques that adversaries use to keep access to systems across restarts, changed credentials, and other interruptions that could cut off their access, such as creating scheduled tasks, registry run keys, or startup services.

What does EDR stand for in endpoint cybersecurity, and how does it differ from traditional signature-based antivirus?

Worked Solution & Logic

EDR (Endpoint Detection and Response) solutions (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne) go beyond signature matching by continuously recording system events, process creation trees, and memory injections to detect and remediate advanced threats.

In a Remote Monitoring and Management (RMM) platform utilized by an MSP, what is an automated 'Patch Management Policy' designed to accomplish?

Worked Solution & Logic

An MSP uses an RMM Patch Management Policy to centrally discover missing security patches (Windows, macOS, third-party software like Chrome, Zoom), validate them in staging, schedule deployment outside peak business hours, and verify vulnerability closure across managed customer endpoints.

When a security analyst observes an HTTP response header containing 'strict-transport-security: max-age=31536000; includeSubDomains', what security control is being enforced?

Worked Solution & Logic

HSTS (HTTP Strict Transport Security) is a web security policy mechanism that protects websites against man-in-the-middle attacks and cookie hijacking by forcing modern web browsers to only interact via secure HTTPS connections.

Which of the following describes the core principle of Zero Trust Network Architecture?

Worked Solution & Logic

Zero Trust Architecture (ZTA) operates on the paradigm of 'Never trust, always verify'. It assumes breach and requires explicit verification based on user identity, device posture, location, and least-privilege access for every single request.

What is the primary role of a SIEM (Security Information and Event Management) platform in a modern enterprise SOC?

Worked Solution & Logic

A SIEM (such as Splunk, Microsoft Sentinel, IBM QRadar) centralizes log telemetry from across the entire enterprise infrastructure, normalizes the data, applies correlation rules, and alerts security analysts to suspicious event chains in real time.

Under standard ITIL incident response SLAs in a Managed IT environment, what is the key metric measured by MTTR?

Worked Solution & Logic

MTTR (Mean Time to Resolve / Repair) is a critical SLA KPI in managed IT and MSP service delivery, measuring the average time taken by engineering teams to diagnose, troubleshoot, and restore service after an incident is reported.

Which symmetric encryption cipher algorithm is recognized as the global standard approved by NIST for securing sensitive classified data?

Worked Solution & Logic

AES (Advanced Encryption Standard), utilizing 128, 192, or 256-bit keys, is the NIST-certified, mathematically robust symmetric cipher used globally to encrypt sensitive data at rest and in transit across enterprise and government infrastructure.

Your practice test is scored according to standard competitive marking schemes.

Cybersecurity, SOC & Managed Services Assessment

Assessment Evaluation Complete