Quick Revision

GK One-Line Question & Answer

15541+ short questions with short answers, covering every category and sub-category on the site — no long articles to scroll through. Good for a fast recap before an exam, or a few minutes of daily practice.

Looking for exam process/strategy questions instead? Try the Exam Preparation FAQ →

Computer Fundamentals → Introduction to Computer 39

PBKDF2 applies the underlying hash function?
Thousands to hundreds of thousands of times (iterations)
click to copy
Certificate pinning in mobile apps?
Hardcodes expected certificate/public key to prevent MITM
click to copy
HSTS (HTTP Strict Transport Security) header?
Forces browsers to use HTTPS only for a domain
click to copy
HPKP (HTTP Public Key Pinning) is now?
Deprecated — replaced by Certificate Transparency and CAA records
click to copy
Certificate Transparency (CT) provides?
Publicly auditable logs of issued certificates for detecting misissued certs
click to copy
CAA DNS records specify?
Which Certificate Authorities are allowed to issue certs for a domain
click to copy
OAuth 2.0 is used for?
Authorization — delegated access to resources
click to copy
OpenID Connect is built on top of?
OAuth 2.0 — adds authentication layer
click to copy
SAML (Security Assertion Markup Language) is used for?
Enterprise SSO (Single Sign-On) using XML-based assertions
click to copy
JWT (JSON Web Token) consists of?
Header, Payload, and Signature (Base64URL encoded)
click to copy
Which part of JWT should NOT contain sensitive data without encryption?
Payload (it's encoded, not encrypted — readable by anyone)
click to copy
Which attack exploits XML parser vulnerabilities?
XXE (XML External Entity injection)
click to copy
SSRF (Server-Side Request Forgery) makes the server?
Make requests to internal resources on behalf of attacker
click to copy
Insecure Deserialization can lead to?
Remote Code Execution (RCE) when untrusted data is deserialized
click to copy
Broken Access Control (OWASP #1) means?
Users accessing resources/functions beyond their permissions
click to copy
Privilege escalation attack aims to?
Gain higher privileges than authorized (vertical or horizontal)
click to copy
Lateral movement in cyberattacks refers to?
Moving through network from initial foothold to more valuable targets
click to copy
APT (Advanced Persistent Threat) is characterized by?
Long-term, sophisticated, targeted intrusion campaigns
click to copy
IOC (Indicator of Compromise) examples include?
Suspicious IPs, file hashes, domain names indicating breach
click to copy
MITRE ATT&CK framework documents?
Real-world adversary tactics, techniques, and procedures (TTPs)
click to copy
Threat modeling process identifies?
Potential threats, vulnerabilities, and countermeasures during design
click to copy
STRIDE threat model acronym stands for?
Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege
click to copy
Data Loss Prevention (DLP) prevents?
Unauthorized transmission or exfiltration of sensitive data
click to copy
SIEM (Security Information and Event Management) provides?
Centralized security event correlation, analysis, and alerting
click to copy
SOAR (Security Orchestration, Automation, and Response) adds to SIEM?
Automated incident response workflows
click to copy
Zero Trust security model assumes?
No implicit trust — verify every access request regardless of location
click to copy
Copy-on-Write (CoW) in OS fork() means?
Parent and child share memory pages until one writes — then copy
click to copy
Memory-mapped files allow?
Files to be accessed as if they were in memory (mmap)
click to copy
Page table walk in x86-64 uses how many levels?
4
click to copy
TLB (Translation Lookaside Buffer) caches?
Virtual-to-physical address translations
click to copy
TLB shootdown occurs when?
One CPU modifies page tables requiring other CPUs to invalidate their TLBs
click to copy
Huge pages (large pages) reduce?
TLB misses by covering larger address ranges per entry
click to copy
mlock() system call in Linux?
Locks pages in RAM (prevents swapping to disk)
click to copy
cgroup (control groups) in Linux is used for?
Resource limiting, accounting, isolation for process groups
click to copy
Linux namespace provides?
Process isolation — separate view of system resources (PID, NET, MNT, etc.)
click to copy
seccomp in Linux is used to?
Filter system calls available to a process (sandbox)
click to copy
SELinux implements?
Mandatory Access Control (MAC) based on security policies
click to copy
AppArmor is an alternative to SELinux implementing?
MAC using file path-based profiles
click to copy
eBPF (extended Berkeley Packet Filter) allows?
Safe kernel-level programmability without modifying kernel source
click to copy

Computer Fundamentals → Memory Units 1

Which OS feature isolates processes from each other?
Process isolation via separate virtual address spaces
click to copy