Free practice test

Cybersecurity Analyst Practice Test

Check what you know about the cybersecurity analyst job with 15 free questions and instant explanations.

Updated By the Career Education Institute Curriculum Team
About this practice test

15 multiple-choice questions on cybersecurity analyst knowledge, safety and vocabulary. Submit to see your score and explanations, or open any question’s answer as you go. Nothing is saved or shared.

Question 1 of 15A SIEM is used to:
Show answer

Answer: Collect and analyze security logs. SIEMs centralize and analyze logs.

Question 2 of 15What does CVE identify?
Show answer

Answer: Publicly known vulnerabilities. CVE IDs track known vulnerabilities.

Question 3 of 15The first phase of the NIST incident response lifecycle is:
Show answer

Answer: Preparation. Preparation happens before incidents.

Question 4 of 15Least privilege means:
Show answer

Answer: Users get only the access they need. Minimizing access limits damage.

Question 5 of 15A false positive is:
Show answer

Answer: An alert that turns out harmless. False positives waste analyst time, so rules are tuned.

Question 6 of 15Which term matches this definition: “A model that verifies every user and device rather than trusting the network.”
Show answer

Answer: Zero trust. Zero trust: A model that verifies every user and device rather than trusting the network.

Question 7 of 15What does “Least privilege” mean?
Show answer

Answer: Giving users only the access they need.. Least privilege: Giving users only the access they need.

Question 8 of 15Which term matches this definition: “Endpoint detection and response: monitors devices for threats.”
Show answer

Answer: EDR. EDR: Endpoint detection and response: monitors devices for threats.

Question 9 of 15What does “False positive” mean?
Show answer

Answer: An alert that turns out to be harmless.. False positive: An alert that turns out to be harmless.

Question 10 of 15Which term matches this definition: “Applying updates to fix vulnerabilities.”
Show answer

Answer: Patch management. Patch management: Applying updates to fix vulnerabilities.

Question 11 of 15What does “Phishing” mean?
Show answer

Answer: Deceptive messages designed to steal data or install malware.. Phishing: Deceptive messages designed to steal data or install malware.

Question 12 of 15Which term matches this definition: “The process of preparing for, detecting, containing and recovering from incidents.”
Show answer

Answer: Incident response. Incident response: The process of preparing for, detecting, containing and recovering from incidents.

Question 13 of 15What does “Threat intelligence” mean?
Show answer

Answer: Information about attackers and their methods.. Threat intelligence: Information about attackers and their methods.

Question 14 of 15Which term matches this definition: “Indicator of compromise: evidence of a possible attack.”
Show answer

Answer: IOC. IOC: Indicator of compromise: evidence of a possible attack.

Question 15 of 15What does “SIEM” mean?
Show answer

Answer: Security information and event management: collects and analyzes logs.. SIEM: Security information and event management: collects and analyzes logs.

How to study

View training