confidentiality is best defined as

a software security principle, threat or control

integrity is best defined as

a software security principle, threat or control

salt in passwords is best defined as

a software security principle, threat or control

OWASP Top Ten is best defined as

a software security principle, threat or control

SQL injection is best defined as

a software security principle, threat or control

Software Security and Cryptography Basics MCQs 2026

24 questions with detailed answers · 10 from past papers · 3 quiz batches available

📚 Software Engineering📄 10 Past-Paper Qs✓ Free · No Login Needed

🎯 Mock Test

Read each question, think about the answer, then click Show Answer to reveal the correct option and explanation. Load 10 at a time so it stays manageable — perfect for one-topic study sessions on the bus or during a break.

Page 1 of 1Questions 1–10 of 24

Q1Past Paper · PPSC/FPSC/NTSeasy
confidentiality is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca software security principle, threat or control
4. Da marketing slogan without technical meaning
💡 Explanation:
confidentiality is a recognized software engineering topic assessed in competitive exams.
Q2Past Paper · PPSC/FPSC/NTSmedium
integrity is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca marketing slogan without technical meaning
4. Da software security principle, threat or control
💡 Explanation:
integrity is a recognized software engineering topic assessed in competitive exams.
Q3hard
salt in passwords is best defined as
1. Aa software security principle, threat or control
2. Ban unrelated hardware manufacturing step
3. Ca purely financial accounting entry only
4. Da marketing slogan without technical meaning
💡 Explanation:
salt in passwords is a recognized software engineering topic assessed in competitive exams.
Q4Past Paper · PPSC/FPSC/NTSeasy
OWASP Top Ten is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba software security principle, threat or control
3. Ca purely financial accounting entry only
4. Da marketing slogan without technical meaning
💡 Explanation:
OWASP Top Ten is a recognized software engineering topic assessed in competitive exams.
Q5medium
SQL injection is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca marketing slogan without technical meaning
4. Da software security principle, threat or control
💡 Explanation:
SQL injection is a recognized software engineering topic assessed in competitive exams.
Q6hard
XSS attack is best defined as
1. Aa software security principle, threat or control
2. Ban unrelated hardware manufacturing step
3. Ca purely financial accounting entry only
4. Da marketing slogan without technical meaning
💡 Explanation:
XSS attack is a recognized software engineering topic assessed in competitive exams.
Q7Past Paper · PPSC/FPSC/NTSeasy
CSRF attack is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca marketing slogan without technical meaning
4. Da software security principle, threat or control
💡 Explanation:
CSRF attack is a recognized software engineering topic assessed in competitive exams.
Q8medium
buffer overflow is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca marketing slogan without technical meaning
4. Da software security principle, threat or control
💡 Explanation:
buffer overflow is a recognized software engineering topic assessed in competitive exams.
Q9hard
STRIDE model is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba software security principle, threat or control
3. Ca purely financial accounting entry only
4. Da marketing slogan without technical meaning
💡 Explanation:
STRIDE model is a recognized software engineering topic assessed in competitive exams.
Q10Past Paper · PPSC/FPSC/NTSeasy
risk assessment security is best defined as
1. Aa software security principle, threat or control
2. Ban unrelated hardware manufacturing step
3. Ca purely financial accounting entry only
4. Da marketing slogan without technical meaning
💡 Explanation:
risk assessment security is a recognized software engineering topic assessed in competitive exams.
Q11medium
digital certificate is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba software security principle, threat or control
3. Ca purely financial accounting entry only
4. Da marketing slogan without technical meaning
💡 Explanation:
digital certificate is a recognized software engineering topic assessed in competitive exams.
Q12hard
Regarding public key infrastructure in software engineering, the accurate statement is
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca software security principle, threat or control
4. Da marketing slogan without technical meaning
💡 Explanation:
public key infrastructure is a recognized software engineering topic assessed in competitive exams.
Q13Past Paper · PPSC/FPSC/NTShard
availability CIA triad is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca software security principle, threat or control
4. Da marketing slogan without technical meaning
💡 Explanation:
availability CIA triad is a recognized software engineering topic assessed in competitive exams.
Q14Past Paper · PPSC/FPSC/NTSeasy
authentication is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba software security principle, threat or control
3. Ca purely financial accounting entry only
4. Da marketing slogan without technical meaning
💡 Explanation:
authentication is a recognized software engineering topic assessed in competitive exams.
Q15medium
authorization is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba software security principle, threat or control
3. Ca purely financial accounting entry only
4. Da marketing slogan without technical meaning
💡 Explanation:
authorization is a recognized software engineering topic assessed in competitive exams.
Q16hard
encryption at rest is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca marketing slogan without technical meaning
4. Da software security principle, threat or control
💡 Explanation:
encryption at rest is a recognized software engineering topic assessed in competitive exams.
Q17Past Paper · PPSC/FPSC/NTSeasy
TLS in transit is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca marketing slogan without technical meaning
4. Da software security principle, threat or control
💡 Explanation:
TLS in transit is a recognized software engineering topic assessed in competitive exams.
Q18medium
hashing passwords is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca software security principle, threat or control
4. Da marketing slogan without technical meaning
💡 Explanation:
hashing passwords is a recognized software engineering topic assessed in competitive exams.
Q19hard
privilege escalation is best defined as
1. Aa software security principle, threat or control
2. Ban unrelated hardware manufacturing step
3. Ca purely financial accounting entry only
4. Da marketing slogan without technical meaning
💡 Explanation:
privilege escalation is a recognized software engineering topic assessed in competitive exams.
Q20Past Paper · PPSC/FPSC/NTSeasy
least privilege principle is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca software security principle, threat or control
4. Da marketing slogan without technical meaning
💡 Explanation:
least privilege principle is a recognized software engineering topic assessed in competitive exams.
Q21medium
defense in depth is best defined as
1. Aa software security principle, threat or control
2. Ban unrelated hardware manufacturing step
3. Ca purely financial accounting entry only
4. Da marketing slogan without technical meaning
💡 Explanation:
defense in depth is a recognized software engineering topic assessed in competitive exams.
Q22hard
security audit is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca marketing slogan without technical meaning
4. Da software security principle, threat or control
💡 Explanation:
security audit is a recognized software engineering topic assessed in competitive exams.
Q23Past Paper · PPSC/FPSC/NTSeasy
penetration testing is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca marketing slogan without technical meaning
4. Da software security principle, threat or control
💡 Explanation:
penetration testing is a recognized software engineering topic assessed in competitive exams.
Q24medium
threat modeling is best defined as
1. Aan unrelated hardware manufacturing step
2. Ba purely financial accounting entry only
3. Ca software security principle, threat or control
4. Da marketing slogan without technical meaning
💡 Explanation:
threat modeling is a recognized software engineering topic assessed in competitive exams.

Jump to page:

Software Security and Cryptography Basics MCQs 2026

More Software Engineering Topics