APMG Cyber Security Foundation Exam Mock Test

Overview of the APMG Cyber Security Foundation Exam

The APMG Cyber Security Foundation certification is a globally recognised credential delivered by APMG International, designed to validate an individual's essential understanding of cybersecurity concepts, defensive methodologies, and threat environments. Developed in alignment with UK National Cyber Security Centre (NCSC) guidance and general industry best practice, this qualification provides a vital baseline for professionals entering the cyber domain, IT practitioners expanding into security, and risk managers seeking technical fluency.

Organisations throughout the United Kingdom and internationally face sophisticated, continuous cyber threats ranging from automated ransomware campaigns to complex advanced persistent threats (APTs). The APMG Cyber Security Foundation examination certifies that a candidate understands how these threats emerge, the architectural fundamentals necessary to protect enterprise infrastructure, and the administrative controls essential for risk governance.

Official Syllabus & Domain Breakdown

The qualification curriculum is partitioned into core modular areas reflecting end-to-end security management and technical operational security:

1. Cyber Security Concepts and Threat Landscape

Candidates must comprehend foundational terminology, including the CIA Triad (Confidentiality, Integrity, and Availability) and non-repudiation. This domain evaluates awareness of modern adversary motivations, common attack vectors (phishing, social engineering, drive-by downloads, zero-day vulnerabilities), and malware taxonomies (trojans, worms, ransomware, spyware).

2. Information Risk Management and Governance

This section assesses how cybersecurity connects directly to corporate governance. Key topics include quantitative and qualitative risk assessments, vulnerability scanning methodologies, risk treatment strategies (mitigate, accept, transfer, avoid), and the role of leadership in establishing a resilient security culture.

3. Network Security and Architecture

Security architecture fundamentals require candidates to understand defense-in-depth, network perimeter controls, firewalls (packet filtering, stateful inspection, next-generation firewalls), intrusion detection and prevention systems (IDS/IPS), network segmentation, and demilitarised zones (DMZs).

4. Identity, Authentication, and Access Management (IAM)

Managing digital identities is central to enterprise resilience. Topics cover identification versus authentication, multi-factor authentication (MFA), role-based access control (RBAC), the principle of least privilege, directory services, and privileged access management (PAM).

5. Cryptography and Data Protection

This domain tests symmetrical and asymmetrical encryption mechanics, cryptographic hashing (SHA family), digital signatures, Public Key Infrastructure (PKI), digital certificates, and protocols securing data in transit (TLS/SSL, IPsec) and data at rest (Full Disk Encryption).

6. Incident Management, Detection, and Business Continuity

Handling unavoidable incidents involves structured triage. The syllabus covers security event correlation (SIEM), incident response phases (preparation, detection, containment, eradication, recovery, and post-incident review), alongside business continuity planning (BCP) and disaster recovery (DR).

7. UK Legal, Regulatory, and Compliance Frameworks

Candidates are tested on vital UK and European compliance standards, including the UK Data Protection Act 2018 / UK GDPR, the Computer Misuse Act 1990, the Network and Information Systems (NIS) Regulations, and established industry frameworks such as Cyber Essentials, ISO/IEC 27001, and NIST CSF.

Exam Format & Test Rules

The APMG Cyber Security Foundation exam adheres to formal standard testing parameters:

• Format: Multiple-choice examination
• Total Questions: 50 questions
• Duration: 50 minutes (standard allocation; extra time available for non-native English speakers where approved)
• Delivery Mode: Computer-based via accredited training organisations or remote proctoring through APMG Candidate Portal
• Style: Closed-book examination with no external reference materials permitted

During proctored sessions, candidates must present valid government photo identification. Unauthorised electronic devices, smartwatches, dual monitors, and non-approved stationery are strictly prohibited.

Scoring System & Passing Criteria

The APMG Cyber Security Foundation examination has straightforward scoring:

• Each correct answer awards exactly 1 mark.
• There is no negative marking for incorrect or omitted responses.
• Passing Score: Candidates must score at least 25 out of 50 marks (50%) to achieve the Foundation certification.
• Results: Provisional digital scores are generated immediately upon submission during computer-based testing, with official digital certificates and verifiable digital badges issued shortly thereafter by APMG International.

Proven Preparation Strategies & Study Tips

1. Master the Terminology: Ensure total clarity between related concepts such as threat versus vulnerability versus risk. APMG questions frequently evaluate precise definitions.
2. Align with UK Standards: Pay special attention to UK-specific legislation like the Computer Misuse Act 1990 and UK GDPR mandatory breach notification timeframes (72 hours).
3. Engage with Practice Exams: Timed mock tests enhance your pacing. With 50 questions in 50 minutes, you must maintain a consistent speed of one question per minute.
4. Analyse Weak Areas: Use practice test diagnostics to pinpoint knowledge gaps across network protocols, cryptography types, and access control models.
5. Review the Incident Handling Lifecycle: Memorise standard incident response stages and the primary goals associated with containment and post-incident analysis.