# SEC-11 Quiz: Browser Security

Take this after studying `notes/SEC-11-browser-security.md`.

Reply with answers like:
`1B 2A 3D 4C 5B 6A 7D`

## Questions

1. What is the safest source for downloading a browser installer?

A. A random mirror linked in a pop-up  
B. An email attachment from an unknown sender  
C. The official vendor website or trusted app store  
D. A file-sharing site with no verification  

2. What is the purpose of checking a downloaded file hash?

A. Increase monitor resolution  
B. Confirm the file matches the expected original file  
C. Disable all browser extensions  
D. Clear cookies automatically  

3. Why are browser updates important?

A. They remove the need for passwords  
B. They make certificate warnings safe to ignore  
C. They physically secure the router  
D. They can patch security vulnerabilities  

4. Why should browser extensions be limited to trusted sources?

A. Malicious extensions can steal data or credentials  
B. Extensions always disable encryption  
C. Extensions are required for every website  
D. Trusted stores guarantee no updates are needed  

5. A browser shows an invalid certificate warning on a banking site. What should the user do?

A. Ignore the warning and sign in quickly  
B. Disable all updates  
C. Stop and investigate the certificate warning before entering credentials  
D. Quick format the drive  

6. What does private browsing mainly protect?

A. All activity from the employer network  
B. Local browsing traces for that private session  
C. All traffic from the internet provider  
D. The router firmware  

7. A company wants centralized browser filtering and logging. What technology is most relevant?

A. Degaussing  
B. Quick format  
C. Screen brightness  
D. Proxy  

8. What does HTTPS ensure when visiting a website?

A. The website is free of malware  
B. The connection between the browser and server is encrypted  
C. The website is in the trusted vendors list  
D. The download is automatically scanned  

9. Why are browser updates important from a security perspective?

A. They remove the need for passwords  
B. They make certificate warnings safe to ignore  
C. They physically secure the router  
D. They can patch security vulnerabilities in the browser  

10. A user visits a legitimate news site and gets a malware pop-up. What is the likely cause?

A. The user's screen is too bright  
B. Malvertising — malicious ads served through ad networks on legitimate sites  
C. The browser needs a new printer driver  
D. The SSL certificate expired  

11. Why is it risky to save passwords in a browser on a shared computer?

A. It slows the browser  
B. Other users or malware could access saved credentials  
C. It disables HTTPS  
D. It requires a GPU  

12. Which browser feature warns users when they attempt to visit a known phishing or malware site?

A. Download manager  
B. Safe Browsing or SmartScreen filter  
C. Private mode  
D. Tab management  

13. A user's browser homepage changed and unknown toolbars appeared after installing freeware. What most likely happened?

A. A scheduled update ran  
B. A browser hijacker was installed bundled with the freeware  
C. The DNS server changed  
D. The user's account was moved to a domain  

14. What is the safest action before clicking a link in a suspicious email?

A. Click it to check if it loads correctly  
B. Hover over the link to preview the URL and verify it matches the expected destination  
C. Forward the email to verify with others  
D. Save the attachment first  

15. What is the purpose of certificate pinning in security-conscious applications?

A. Speed up TLS handshakes  
B. Prevent man-in-the-middle attacks by accepting only a specific certificate  
C. Allow self-signed certificates everywhere  
D. Replace HTTPS with HTTP for speed  

## Answer Key For Instructor

1. C
2. B
3. D
4. A
5. C
6. B
7. D
8. B
9. D
10. B
11. B
12. B
13. B
14. B
15. B