15 to 30 random questions in 15 to 30 minutes, by the level you choose: cia triad, owasp top 10, crypto, tls, siem, incident response, cloud. After you submit you get your score, your strong and weak topics, and the right answer with an explanation for every question.
Want to revise first? Read the Cybersecurity interview questions and answers.
The test covers 12 topics across three levels. Each attempt picks 15 to 30 questions at random, by the level you choose, so every attempt is different.
One question from each level, the way they appear in the test. A new set comes on the 1st of every month. Try it, then open the answer.
Answer: A flaw that is unknown to the vendor or has no patch yet when it is found. Zero-day means defenders have had zero days to fix it, so patching is not possible yet. Defences rely on layers: least privilege, segmentation, EDR behaviour detection and fast patching once a fix is released.
Answer: On the server, check that the requested payslip belongs to the logged-in user. This is an IDOR, part of A01 Broken Access Control. Obscuring or encrypting ids only hides the problem; the server must authorise every object request against the user's identity and role.
Answer: bcrypt uses only the first 72 bytes of input, so the rest is ignored. bcrypt's design takes at most 72 bytes, so characters after that never affect the hash. Limit input length clearly, pre-hash carefully with a well-reviewed scheme, or use Argon2id, which has no such limit.
Take the full Cybersecurity mock test: 15 to 30 questions and 15 to 30 minutes, by level.
A question counts as right only when you pick exactly the right option, or all the right options where it says so; a question left blank counts as wrong. Your score is the share of the test's questions you got right (15 to 30, by level). The result also scores every topic, so you know what to revise before the interview.
Yes. The Cybersecurity mock test is free. You need a free CoreHRx Jobs account to start it, so your score and the topics to work on are saved.
It depends on the level: Fresher has 15 questions in 15 minutes, Intermediate has 20 questions in 20 minutes, Experienced has 30 questions in 30 minutes. They are multiple-choice questions picked at random from a larger bank of Cybersecurity questions at your level, so every attempt is different.
The questions cover OWASP Top 10, Authentication and Access, Network Security, SOC and SIEM, Threats and Malware, Cloud Security, Cryptography, Incident Response, Security Fundamentals, Vulnerability Management, CERT-In and DPDP, TLS and PKI. Your result shows how you did in each topic.
Fresher if you are a student or have less than a year of experience, Intermediate for 1 to 5 years at work, and Experienced for 5 years or more.
Only your best Cybersecurity score, and only when it is 60% or more. It shows on the job applications you send on CoreHRx. Lower scores stay private.
Yes, up to 10 tests a day. Each attempt picks questions you have not seen recently first.
