Members
About LLPA
Vendors
Events
Cyber Security Day

IT Security - Digital Skill Cup 2026

Digital Skills Cup 2026

Welcome to the Digital Skills Cup for IT Security

Once you register with your name and email, the quiz starts immediately.
You have 5 minutes to complete the quiz.
No pauses. No switching between windows, no copy-pasting.
Scoring is based on the number of correct answers and the lower time to complete the quiz, in case of a tie.
Use a valid email address and your real name for registration.
You have 1 attempt.
Good luck :)

First Name

Last Name

Email

Country

I agree with the Terms and Conditions and Privacy statement

Time Remaining:

Digital Skill Cup 2026 - IT Security All

1 / 20

Question 1

Which of the following statements is correct about the firewall?

It is a device installed at the boundary of a company to prevent unauthorized physical access

It is a device installed at the boundary of an incorporate to protect it against the unauthorized access

It is a kind of wall built to prevent files form damaging the corporate

None of the above

Question 2

What is the primary purpose of a Security Information and Event Management (SIEM) system?

Prevent unauthorized access

Monitor and analyze security events

Encrypt sensitive data

Patch vulnerabilities

Question 3

What are effective controls for reducing the impact of ransomware in enterprise environments?

Immutable or write-once backups

Network segmentation

Endpoint detection and response (EDR)

Disabling user account control (UAC)

Question 4

Which technology is used to segment networks and increase security?

VLAN

DNS

DHCP

NAT

Question 5

Which Microsoft solution provides SIEM and SOAR capabilities?

Microsoft Defender

Microsoft Sentinel

Azure Advisor

Azure Policy

Question 6

What is the main goal of phishing?

To increase internet speed

To update the operating system

To steal sensitive data such as passwords or credit card information

To clear the RAM

Question 7

Which AWS services or features can be used to detect anomalous or malicious activity in an AWS account?

AWS GuardDuty

AWS CloudTrail

AWS Shield Advanced

AWS Config

Question 8

What is the principle of least privilege?

Granting only necessary permissions

Allowing full access to admins

Encrypting all data

Using multi-factor authentication

Question 9

Which security model enforces access control based on user roles?

DAC

MAC

RBAC

ABAC

Question 10

Which AWS service helps protect applications from web exploits like SQL injection?

AWS WAF

AWS Shield

Amazon Inspector

AWS GuardDuty

Question 11

Which approach is generally recommended for modern web APIs that need to authenticate third party clients?

Sending user credentials with each request over HTTPS, assuming transport encryption alone sufficiently mitigates credential exposure risks

Using Oauth 2.0/OpenID Connect with short lived access tokens

Using API keys hard coded in client applications

Restricting API access solely through IP whitelisting while avoiding token-based mechanisms due to perceived implementation complexity

Question 12

"Which command can be used to compute the NTLM hash of the password ""Pa$$word"" in a Linux shell?"

echo -n Pa$$word | openssl MD4

echo Pa$$word | iconv -t utf16be | openssl MD5

echo -n 'Pa$$word' | iconv -t utf16le | openssl MD4

echo -n 'Pa$$word' | iconv -t utf8be | openssl MD5

Question 13

Which Azure service provides centralized identity and access management?

Azure Firewall

Azure Monitor

Microsoft Entra ID (Azure AD)

Azure Sentinel

Question 14

In Microsoft Active Directory, which attack techniques specifically target Kerberos authentication?

Kerberoasting

Golden Ticket attacks

Pass-the-Hash

AS-REP Roasting

Question 15

Which of the following are recommended AWS security best practices?

Store long-term access keys in EC2 instance metadata

Enable MFA (Multi-Factor Authentication) for root and IAM users

Use IAM roles instead of hardcoded credentials

Allow public access to S3 buckets for faster data sharing

Question 16

Threat management is a process that is used by cybersecurity professionals to prevent cyberattacks, detect cyberthreats and respond to security incidents. Many modern threat management systems use frameworks that provide comprehensive guidance to improve information security and cybersecurity risk management for private sector organizations. Which Framework is plublished by the NIST and consists of guides, standards, best practices and five core functions, namely to identify, protect, detect, respond and recover?

NIS2

GDPR

Cybersecurity Framework (CSF) 2.0

DORA

Question 17

What AWS service is mainly used to manage identities and permissions?

Amazon EC2

Amazon S3

AWS IAM (Identity and Access Management)

AWS CloudFront

Question 18

What does Zero Trust security assume?

Internal networks are trusted

Continuous verification is required

Least privilege access

Perimeter security is sufficient

Question 19

Which control helps prevent unauthorized access after employee termination?

Patch management

Account deprovisioning

Firewall rules

Load balancing

Question 20

Which Azure service provides centralized security posture management and threat protection recommendations across Azure resources?

Azure Policy

Azure Monitor

Azure Advisor

Microsoft Defender for Cloud

Quiz Results

Good job! Thank you for participating in the Digital Skills Cup 2026! We have sent you the quiz results by email.

Leading Learning Partners Association

The Base B
Evert van de Beekstraat 1-104
1118 CL Schiphol, Amsterdam
The Netherlands

info@thellpa.com
LinkedIn

Terms of Service
Privacy Policy

Manage cookie preferences