Blue Team Assessment Test

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

Welcome to the Blue Team Assessment Test!
This quiz is designed to evaluate your knowledge of defensive cybersecurity practices. It covers Blue Team fundamentals, monitoring, incident response, network hardening, and threat intelligence.

Instructions:

This is a graded quiz. Each question is worth 1 point.
All questions are multiple-choice or true/false.
Choose the best possible answer for each question.
Take your time — there is no time limit.
Please complete the quiz individually without external help.

Which of the following frameworks is often used for incident handling and reporting? *

1 point

MITRE ATT&CK

Agile

Waterfall

Scrum

What is the first step in the incident response lifecycle? *

1 point

Containment

Identification

Recovery

Lessons Learned

What does SIEM stand for? *

1 point

Security Information and Event Management

Secure Internal Event Monitoring

System Integrity and Event Management

Security Incident Evaluation Method

Which of these is an example of a SIEM tool? *

1 point

Splunk

Wireshark

Burp Suite

Nmap

During containment, what is the Blue Team’s primary goal? *

1 point

Patch all vulnerabilities immediately

Eradicate malware from all systems

Prevent the attack from spreading further

Reboot the affected servers

Which practice improves Blue Team defensive posture? *

1 point

Disabling firewalls

Applying regular security patches

Allowing default credentials

Ignoring logs

A honeypot is used by Blue Teams to detect malicious activity. *

1 point

true

false

Blue Teams should share incident reports with executives in non-technical language.
*

1 point

True

False

Recovery in incident response involves restoring systems to normal operations. *

1 point

true

false

Blue Teams are responsible for proactive defense as well as reactive response. *

1 point

true

false

What is the primary goal of a Blue Team in cybersecurity? *

1 point

Simulate real-world attacks

Defend and monitor systems against attacks

Build offensive security tools

Train Red Teams

Which of these is an example of network hardening? *

1 point

Segmenting the network

Removing unused services

Enforcing strong authentication

All of the above

Log analysis is a key activity in Blue Team operations. *

1 point

true

false

What is the main purpose of threat intelligence for a Blue Team? *

1 point

To exploit vulnerabilities faster than Red Teams

To understand potential threats and prepare defenses

To increase offensive capabilities

To disable SIEM systems

Which of the following tools is commonly used for intrusion detection? *

1 point

Snort

Metasploit

John the Ripper

Hydra

Submit

Clear form

This content is neither created nor endorsed by Google. - Terms of Service - Privacy Policy

Does this form look suspicious? Report

Forms