Members
About LLPA
Vendors
Events
Digital Skills Cup
AI Festival

IT Security - Digital Skill Cup 2026

Digital Skills Cup 2026

Welcome to the Digital Skills Cup for IT Security

Once you register with your name and email, the quiz starts immediately.
You have 5 minutes to complete the quiz.
No pauses. No switching between windows, no copy-pasting.
Scoring is based on the number of correct answers and the lower time to complete the quiz, in case of a tie.
Use a valid email address and your real name for registration.
You have 1 attempt.
Good luck :)

First Name

Last Name

Email

Country

I agree with the Terms and Conditions and Privacy statement

Time Remaining:

Digital Skill Cup 2026 - IT Security All

1 / 20

Question 1

Which of the following passwords is complex?

Pa$$w0rd

pass123

$pa.ssw*ord_

Password1

Question 2

What are effective controls for reducing the impact of ransomware in enterprise environments?

Immutable or write-once backups

Network segmentation

Endpoint detection and response (EDR)

Disabling user account control (UAC)

Question 3

What AWS service is mainly used to manage identities and permissions?

Amazon EC2

Amazon S3

AWS IAM (Identity and Access Management)

AWS CloudFront

Question 4

Which principle is the Foundation of Zero Trust security architecture?

Trust but verify

Verify explicitly and assume breach

Implicit trust within the network

Perimeter-based security

Question 5

What is used to encrypt passwords stored in the SAM database?

LM algorithm

NTLM algorithm

Bootkey

SecureKey

Question 6

What is the primary purpose of a Security Information and Event Management (SIEM) system?

Prevent unauthorized access

Monitor and analyze security events

Encrypt sensitive data

Patch vulnerabilities

Question 7

Which of the following are recommended AWS security best practices?

Store long-term access keys in EC2 instance metadata

Enable MFA (Multi-Factor Authentication) for root and IAM users

Use IAM roles instead of hardcoded credentials

Allow public access to S3 buckets for faster data sharing

Question 8

Which Azure service is primarily used to manage identities and access to cloud resources?

Azure Key Vault

Microsoft Entra ID (Azure Active Directory)

Azure Monitor

Azure Backup

Question 9

In public key infrastructure (PKI), which factors most directly impact the trustworthiness of a digital certificate?

The strength of the hashing algorithm used in the signature

The certificate authority’s root trust status

The key length of the subject’s public key

The geographic location of the certificate authority

Question 10

A firewall is used to control incoming and outgoing network traffic based on predefined security rules.

Yes

No

Question 11

Which on-prem security control helps prevent unauthorized software execution?

Disk defragmentation

Application whitelisting

DHCP

Load balancing

Question 12

Which actions most effectively reduce the risk of successful phishing attacks against employees?

Relying primarily on advanced spam filters provided by the email service provider and assuming that automated detection alone is sufficient to stop most phishing campaigns

Regular security awareness training, simulated phishing campaigns and MFA on critical systems

Blocking all external email attachments by default and allowing only predefined file types, without addressing user behavior or authentication mechanisms

Publishing internal email addresses publicly to show transparency

Question 13

Which combination most effectively improves protection of sensitive data in cloud hosted database?

Enabling encryption at rest and in transit, restricting access via IAM/RBAC and storing credentials in a dedicated secrets management service

Implementing data loss prevention tools without encryption, assuming policy enforcement alone is sufficient to prevent unauthorized disclosure

Relying on strong passwords, frequent credential rotation, and user awareness training without applying cryptographic controls to stored or transmitted data

Using network firewalls and private subnets to isolate sensitive systems while leaving data unencrypted within trusted zones

Question 14

What does the principle of “least privilege” mean in IT security?

Users should have administrator access

Users should have only the access necessary to perform their tasks

Users should share credentials

Users should have access to all systems

Question 15

Which approach is generally recommended for modern web APIs that need to authenticate third party clients?

Sending user credentials with each request over HTTPS, assuming transport encryption alone sufficiently mitigates credential exposure risks

Using Oauth 2.0/OpenID Connect with short lived access tokens

Using API keys hard coded in client applications

Restricting API access solely through IP whitelisting while avoiding token-based mechanisms due to perceived implementation complexity

Question 16

Which AWS service is primarily used to manage user access and permissions for AWS resources?

AWS S3

AWS Lambda

AWS IAM (Identity and Access Management)

AWS EC2

Question 17

In Amazon Web Services, which service detects threats and anomalies?

AWS GuardDuty

AWS WAF

AWS Shield

AWS IAM

Question 18

Which of the following is a common method used by attackers to exploit weak or default credentials?

Distributed Denial of Service (DDoS)

Cross-site scripting (XSS)

Brute force attacks

SQL injection

Question 19

What type of attack involves tricking users into revealing sensitive information?

Phishing

Brute force

Man-in-the-middle

DDoS

Question 20

What is the principle of least privilege?

Granting only necessary permissions

Allowing full access to admins

Encrypting all data

Using multi-factor authentication

Quiz Results

Good job! Thank you for participating in the Digital Skills Cup 2026! We have sent you the quiz results by email.

Leading Learning Partners Association

The Base B
Evert van de Beekstraat 1-104
1118 CL Schiphol, Amsterdam
The Netherlands

info@thellpa.com
LinkedIn

Terms of Service
Privacy Policy

Manage cookie preferences