Members
About LLPA
Vendors
Events
Digital Skills Cup
AI Festival

IT Security - Digital Skill Cup 2026

Digital Skills Cup 2026

Welcome to the Digital Skills Cup for IT Security

Once you register with your name and email, the quiz starts immediately.
You have 5 minutes to complete the quiz.
No pauses. No switching between windows, no copy-pasting.
Scoring is based on the number of correct answers and the lower time to complete the quiz, in case of a tie.
Use a valid email address and your real name for registration.
You have 1 attempt.
Good luck :)

First Name

Last Name

Email

Country

I agree with the Terms and Conditions and Privacy statement

Time Remaining:

Digital Skill Cup 2026 - IT Security All

1 / 20

Question 1

What is phishing primarily designed to do?

Exploit software vulnerabilities

Steal credentials through deception

Encrypt files for ransom

Disrupt network traffic

Question 2

Which of the following attacks exploits human behavior rather than technical vulnerabilities?

SQL Injection

Cross-Site Scripting (XSS)

Social Engineering

Buffer Overflow

Question 3

What is the principle of least privilege?

Granting only necessary permissions

Allowing full access to admins

Encrypting all data

Using multi-factor authentication

Question 4

Which flags should protect a session cookie?

httpOnly

secure

readonly

sameSite

Question 5

Which well-known framework is used for exploiting vulnerabilities?

EXPLOFRAME

FRAMEFOREX

METASPLOIT

Question 6

What type of attack involves tricking users into revealing sensitive information?

Phishing

Brute force

Man-in-the-middle

DDoS

Question 7

What is the main goal of encryption?

To delete sensitive data

To compress data

To prevent data loss

To protect data confidentiality

Question 8

In Google Cloud, what is the preferred way to grant a VM access to other GCP services securely without managing long-lived keys?

Create and download a service account key file to the VM

Use Workload Identity Federation only

Use an attached Service Account with appropriate IAM roles (using metadata server)

Use a shared password stored in Secret Manager without IAM bindings

Question 9

What is the primary function of asymmetric encryption?

Ensure data integrity

Enable passwordless authentication

Use a public key and a private key for encryption and decryption

Reduce the size of transmitted data

Question 10

In Microsoft Active Directory, which attack techniques specifically target Kerberos authentication?

Kerberoasting

Golden Ticket attacks

Pass-the-Hash

AS-REP Roasting

Question 11

Threat management is a process that is used by cybersecurity professionals to prevent cyberattacks, detect cyberthreats and respond to security incidents. Many modern threat management systems use frameworks that provide comprehensive guidance to improve information security and cybersecurity risk management for private sector organizations. Which Framework is plublished by the NIST and consists of guides, standards, best practices and five core functions, namely to identify, protect, detect, respond and recover?

NIS2

GDPR

Cybersecurity Framework (CSF) 2.0

DORA

Question 12

In AWS IAM, which practices reduce the risk of privilege escalation?

Avoiding wildcard permissions in policies

Enforcing MFA on privileged roles

Using long-lived access keys for automation

Regularly reviewing and pruning unused roles

Question 13

Which practices together best illustrate a defense in depth approach for a web application?

Deploying a next-generation firewall at the network perimeter, enforcing strong password policies for all users, and performing annual penetration testing focused only on external threats

Using endpoint antivirus software combined with regular system patching and centralized authentication, while assuming that internal network traffic is inherently trusted

Encrypting backups but allowing broad admin access in productIon

Combining network segmentation, least privilege access, endpoint protection and application input validation

Question 14

What is encryption at rest?

Encrypting data during transmission

Encrypting stored data on disk

Hashing passwords only

Securing network traffic

Question 15

What are effective controls for reducing the impact of ransomware in enterprise environments?

Immutable or write-once backups

Network segmentation

Endpoint detection and response (EDR)

Disabling user account control (UAC)

Question 16

Which Azure service helps detect and respond to security threats across hybrid environments?

Azure DevOps

Microsoft Defender for Cloud

Azure Data Factory

Azure Logic Apps

Question 17

Which algorithms use the EAPOL handshake?

WEP

WPA

WPA2

WPA3

Question 18

Which of the following is a common method used by attackers to exploit weak or default credentials?

Distributed Denial of Service (DDoS)

Cross-site scripting (XSS)

Brute force attacks

SQL injection

Question 19

A difference between QUIC and transport protocols such as TCP and UDP is that it has stream multiplexing built-in on the transport layer. This allows having multiple, concurrent, independent data streams that don't affect each other. MsQuic is shipped in-box in the Windows kernel in the form of the msquic.sys driver, to support built-in HTTP and SMB features. MsQuic is made generally available with the release of which Windows Server version?

Windows Server 2019

Windows Server 2022

Windows Server 2025

Question 20

Which AWS service detects suspicious activity using machine learning?

AWS CloudTrail

Amazon GuardDuty

AWS Config

Amazon Macie

Quiz Results

Good job! Thank you for participating in the Digital Skills Cup 2026! We have sent you the quiz results by email.

Leading Learning Partners Association

The Base B
Evert van de Beekstraat 1-104
1118 CL Schiphol, Amsterdam
The Netherlands

info@thellpa.com
LinkedIn

Terms of Service
Privacy Policy

Manage cookie preferences