Wednesday, April 15, 2026
200 + Business Analysis questions and answers
200 + Business Analysis questions and answers
1–20: Fundamentals of Business Analysis
- What
is business analysis?
A. Coding software
B. Identifying business needs and solutions
C. Marketing products
D. Hiring staff
Answer: B - Who
performs business analysis?
A. Developer
B. Tester
C. Business Analyst
D. Manager
Answer: C - What
is a stakeholder?
A. Programmer
B. Person affected by project
C. Accountant
D. Designer
Answer: B - Requirement
is:
A. Code
B. Documentation
C. Need or condition
D. Budget
Answer: C - Business
requirement focuses on:
A. IT systems
B. Organization goals
C. Coding
D. Testing
Answer: B - Functional
requirement describes:
A. System behavior
B. Budget
C. Timeline
D. Stakeholders
Answer: A - Non-functional
requirement includes:
A. Performance
B. Login feature
C. Payment feature
D. Registration
Answer: A - BABOK
stands for:
A. Business Analysis Body of Knowledge
B. Basic Analysis Book
C. Business Accounting Book
D. None
Answer: A - Agile
focuses on:
A. Documentation
B. Flexibility
C. Fixed scope
D. No changes
Answer: B - Waterfall
is:
A. Iterative model
B. Linear model
C. Agile model
D. Scrum
Answer: B - SWOT
stands for:
A. Strength, Weakness, Opportunity, Threat
B. System Work Operation Test
C. Software Work Optimization Tool
D. None
Answer: A - PESTLE
analysis includes:
A. Political, Economic
B. Social, Technological
C. Legal, Environmental
D. All
Answer: D - Gap
analysis identifies:
A. Budget
B. Difference between current & future state
C. Stakeholders
D. Code errors
Answer: B - Use
case diagram shows:
A. Database
B. Actors and interactions
C. Budget
D. Network
Answer: B - Business
process model describes:
A. Workflow
B. Code
C. Hardware
D. Budget
Answer: A - KPI
stands for:
A. Key Performance Indicator
B. Knowledge Process Index
C. Key Product Input
D. None
Answer: A - Risk
is:
A. Guaranteed failure
B. Uncertain event
C. Cost
D. Profit
Answer: B - Feasibility
study checks:
A. Coding
B. Viability
C. Testing
D. Deployment
Answer: B - Stakeholder
analysis identifies:
A. Risks
B. People involved
C. Budget
D. Code
Answer: B - Solution
assessment evaluates:
A. Cost
B. Performance
C. Value
D. All
Answer: D
21–40: Requirements & Elicitation
- Elicitation
means:
A. Coding
B. Gathering requirements
C. Testing
D. Deploying
Answer: B - Interview
is:
A. Testing technique
B. Requirement gathering
C. Coding
D. Debugging
Answer: B - Workshop
involves:
A. Single person
B. Group discussion
C. Coding
D. Testing
Answer: B - Observation
is also called:
A. Job shadowing
B. Coding
C. Testing
D. Mapping
Answer: A - Questionnaire
is:
A. Interview
B. Survey
C. Testing
D. Coding
Answer: B - Prototype
is:
A. Final system
B. Early model
C. Code
D. Test
Answer: B - Requirement
traceability ensures:
A. Budget
B. Tracking requirements
C. Coding
D. Testing
Answer: B - BRD
stands for:
A. Business Requirement Document
B. Basic Report Data
C. Business Resource Data
D. None
Answer: A - SRS
stands for:
A. Software Requirement Specification
B. System Resource Setup
C. Software Report Sheet
D. None
Answer: A - User
stories are used in:
A. Waterfall
B. Agile
C. Testing
D. Design
Answer: B - Acceptance
criteria defines:
A. Code
B. Conditions for success
C. Testing
D. Budget
Answer: B - MoSCoW
prioritization means:
A. Must, Should, Could, Won’t
B. Model System Code Work
C. More Software Coding Work
D. None
Answer: A - Requirement
validation ensures:
A. Correctness
B. Cost
C. Code
D. Testing
Answer: A - Requirement
verification ensures:
A. Built right
B. Built product
C. Testing
D. Coding
Answer: A - Change
request is:
A. Bug
B. Requirement modification
C. Code
D. Test
Answer: B - Scope
creep means:
A. Reduced scope
B. Increased uncontrolled scope
C. Budget
D. Testing
Answer: B - UML
stands for:
A. Unified Modeling Language
B. Universal Machine Logic
C. User Model Language
D. None
Answer: A - Activity
diagram shows:
A. Flow
B. Database
C. Budget
D. Code
Answer: A - Sequence
diagram shows:
A. Interaction over time
B. Database
C. Budget
D. Code
Answer: A - Data
flow diagram shows:
A. Data movement
B. Code
C. Budget
D. Testing
Answer: A
41–60: Tools & Techniques
- Excel
is used for:
A. Coding
B. Analysis
C. Testing
D. Deployment
Answer: B - SQL is
used for:
A. Database queries
B. Coding UI
C. Testing
D. Design
Answer: A - Power
BI is used for:
A. Coding
B. Data visualization
C. Testing
D. Design
Answer: B - Jira
is used for:
A. Accounting
B. Project tracking
C. Coding
D. Testing
Answer: B - Confluence
is used for:
A. Documentation
B. Coding
C. Testing
D. Deployment
Answer: A - Wireframe
is:
A. Code
B. Design layout
C. Test
D. Budget
Answer: B - Mockup
is:
A. Prototype
B. Design
C. Both
D. None
Answer: C - Dashboard
shows:
A. Data summary
B. Code
C. Test
D. Budget
Answer: A - Data
model represents:
A. Structure of data
B. Code
C. Test
D. Budget
Answer: A - ER
diagram shows:
A. Entities and relationships
B. Code
C. Budget
D. Testing
Answer: A - KPI
dashboard tracks:
A. Performance
B. Code
C. Testing
D. Budget
Answer: A - Benchmarking
compares:
A. Competitors
B. Code
C. Budget
D. Testing
Answer: A - Root
cause analysis identifies:
A. Problem source
B. Code
C. Test
D. Budget
Answer: A - Fishbone
diagram is used for:
A. Root cause analysis
B. Coding
C. Testing
D. Budget
Answer: A - Brainstorming
generates:
A. Ideas
B. Code
C. Test
D. Budget
Answer: A - Decision
tree helps:
A. Decision making
B. Coding
C. Testing
D. Budget
Answer: A - Cost-benefit
analysis evaluates:
A. Value vs cost
B. Code
C. Test
D. Budget
Answer: A - ROI
stands for:
A. Return on Investment
B. Risk of Input
C. Rate of Interest
D. None
Answer: A - Balanced
scorecard measures:
A. Performance
B. Code
C. Testing
D. Budget
Answer: A - Data
mining extracts:
A. Patterns
B. Code
C. Testing
D. Budget
Answer: A
61–80: Agile & Scrum
- Scrum
is:
A. Framework
B. Tool
C. Language
D. Software
Answer: A - Sprint
is:
A. Iteration
B. Code
C. Test
D. Budget
Answer: A - Product
backlog contains:
A. Requirements
B. Code
C. Test
D. Budget
Answer: A - Scrum
master role:
A. Facilitate team
B. Code
C. Test
D. Budget
Answer: A - Product
owner:
A. Defines requirements
B. Code
C. Test
D. Budget
Answer: A - Daily
stand-up duration:
A. 15 mins
B. 1 hour
C. 2 hours
D. 30 mins
Answer: A - Sprint
review is for:
A. Demo
B. Coding
C. Testing
D. Budget
Answer: A - Retrospective
focuses on:
A. Improvement
B. Code
C. Test
D. Budget
Answer: A - Velocity
measures:
A. Work completed
B. Code
C. Test
D. Budget
Answer: A - Burndown
chart shows:
A. Remaining work
B. Code
C. Test
D. Budget
Answer: A - Agile
manifesto values:
A. Individuals
B. Working software
C. Customer collaboration
D. All
Answer: D - Kanban
uses:
A. Board
B. Code
C. Test
D. Budget
Answer: A - WIP
means:
A. Work in Progress
B. Work Input
C. Work Plan
D. None
Answer: A - Epic
is:
A. Large user story
B. Code
C. Test
D. Budget
Answer: A - Story
points measure:
A. Effort
B. Code
C. Test
D. Budget
Answer: A - Backlog
grooming means:
A. Refinement
B. Coding
C. Testing
D. Budget
Answer: A - Agile
supports:
A. Change
B. Fixed scope
C. No changes
D. Budget
Answer: A - Increment
means:
A. Add value
B. Code
C. Test
D. Budget
Answer: A - Iteration
means:
A. Repeat cycle
B. Code
C. Test
D. Budget
Answer: A - Scrum
artifacts include:
A. Backlog
B. Increment
C. Sprint backlog
D. All
Answer: D
81–100: Advanced Concepts
- Business
case justifies:
A. Project
B. Code
C. Test
D. Budget
Answer: A - Governance
ensures:
A. Control
B. Code
C. Test
D. Budget
Answer: A - Data
governance manages:
A. Data quality
B. Code
C. Test
D. Budget
Answer: A - Change
management handles:
A. Change
B. Code
C. Test
D. Budget
Answer: A - Stakeholder
engagement ensures:
A. Involvement
B. Code
C. Test
D. Budget
Answer: A - Business
rules define:
A. Constraints
B. Code
C. Test
D. Budget
Answer: A - KPI
vs metric:
A. KPI is strategic
B. Metric is general
C. Both
D. None
Answer: C - Data
quality includes:
A. Accuracy
B. Completeness
C. Consistency
D. All
Answer: D - Process
improvement aims:
A. Efficiency
B. Code
C. Test
D. Budget
Answer: A - Lean
focuses on:
A. Waste reduction
B. Code
C. Test
D. Budget
Answer: A - Six
Sigma aims:
A. Quality improvement
B. Code
C. Test
D. Budget
Answer: A - DMAIC
stands for:
A. Define, Measure, Analyze, Improve, Control
B. Data Model Analysis
C. Design Model
D. None
Answer: A - Business
intelligence uses:
A. Data analysis
B. Code
C. Test
D. Budget
Answer: A - Data
warehouse stores:
A. Historical data
B. Code
C. Test
D. Budget
Answer: A - ETL
means:
A. Extract, Transform, Load
B. Enter Test Load
C. Execute Transfer Logic
D. None
Answer: A - Predictive
analysis forecasts:
A. Future
B. Code
C. Test
D. Budget
Answer: A - Descriptive
analysis shows:
A. Past data
B. Code
C. Test
D. Budget
Answer: A - Prescriptive
analysis suggests:
A. Actions
B. Code
C. Test
D. Budget
Answer: A - Data
visualization improves:
A. Understanding
B. Code
C. Test
D. Budget
Answer: A - Business
analyst primary goal:
A. Deliver value
B. Code
C. Test
D. Budget
Answer: A
101–120: Requirements Management
- Requirement
lifecycle includes:
A. Elicitation
B. Analysis
C. Validation
D. All
Answer: D - Requirement
prioritization ensures:
A. Important items first
B. Coding
C. Testing
D. Budget
Answer: A - Version
control manages:
A. Requirement changes
B. Code only
C. Testing
D. Budget
Answer: A - Baseline
means:
A. Approved version
B. Code
C. Test
D. Budget
Answer: A - Requirement
attributes include:
A. Priority
B. Status
C. Owner
D. All
Answer: D - Traceability
matrix links:
A. Requirements to tests
B. Code
C. Budget
D. Design only
Answer: A - Change
impact analysis evaluates:
A. Effects of change
B. Code
C. Test
D. Budget
Answer: A - Requirement
conflict occurs when:
A. Two needs clash
B. Code
C. Test
D. Budget
Answer: A - Requirement
approval is done by:
A. Stakeholders
B. Developers
C. Testers
D. Users only
Answer: A - Requirement
repository stores:
A. Requirements
B. Code
C. Test
D. Budget
Answer: A - Requirement
decomposition breaks:
A. Large requirements
B. Code
C. Test
D. Budget
Answer: A - SMART
requirements are:
A. Specific
B. Measurable
C. Achievable
D. All
Answer: D - Requirement
ambiguity means:
A. Unclear requirement
B. Code
C. Test
D. Budget
Answer: A - Requirement
completeness ensures:
A. All needs covered
B. Code
C. Test
D. Budget
Answer: A - Requirement
consistency ensures:
A. No conflicts
B. Code
C. Test
D. Budget
Answer: A - Requirement
feasibility checks:
A. Practicality
B. Code
C. Test
D. Budget
Answer: A - Requirement
validation is done by:
A. Users
B. Developers
C. Testers
D. Managers
Answer: A - Requirement
documentation format includes:
A. Text
B. Models
C. Diagrams
D. All
Answer: D - Requirement
risk is:
A. Uncertainty in requirement
B. Code
C. Test
D. Budget
Answer: A - Requirement
sign-off means:
A. Approval
B. Code
C. Test
D. Budget
Answer: A
121–140: Business Process & Modeling
- BPM
stands for:
A. Business Process Management
B. Basic Project Model
C. Business Program Model
D. None
Answer: A - AS-IS
model shows:
A. Current state
B. Future state
C. Code
D. Budget
Answer: A - TO-BE
model shows:
A. Future state
B. Current
C. Code
D. Budget
Answer: A - Process
mapping visualizes:
A. Workflow
B. Code
C. Test
D. Budget
Answer: A - Swimlane
diagram shows:
A. Roles
B. Code
C. Test
D. Budget
Answer: A - Process
automation reduces:
A. Manual work
B. Code
C. Test
D. Budget
Answer: A - Bottleneck
is:
A. Delay point
B. Code
C. Test
D. Budget
Answer: A - Value
stream mapping identifies:
A. Value steps
B. Code
C. Test
D. Budget
Answer: A - Reengineering
means:
A. Redesign process
B. Code
C. Test
D. Budget
Answer: A - Process
improvement uses:
A. Analysis
B. Code
C. Test
D. Budget
Answer: A - Business
rules engine automates:
A. Decisions
B. Code
C. Test
D. Budget
Answer: A - Workflow
diagram shows:
A. Task sequence
B. Code
C. Test
D. Budget
Answer: A - SIPOC
includes:
A. Supplier
B. Input
C. Process
D. All
Answer: D - Process
owner is:
A. Responsible person
B. Code
C. Test
D. Budget
Answer: A - Process
KPI measures:
A. Performance
B. Code
C. Test
D. Budget
Answer: A - Standard
operating procedure is:
A. Document
B. Code
C. Test
D. Budget
Answer: A - Process
compliance ensures:
A. Rules followed
B. Code
C. Test
D. Budget
Answer: A - Process
simulation tests:
A. Model behavior
B. Code
C. Test
D. Budget
Answer: A - Process
dependency means:
A. Interconnected steps
B. Code
C. Test
D. Budget
Answer: A - Process
cycle time measures:
A. Duration
B. Code
C. Test
D. Budget
Answer: A
141–160: Data Analysis & BI
- Data
analysis interprets:
A. Data
B. Code
C. Test
D. Budget
Answer: A - Data
cleansing removes:
A. Errors
B. Code
C. Test
D. Budget
Answer: A - Data
profiling examines:
A. Data structure
B. Code
C. Test
D. Budget
Answer: A - OLAP
is used for:
A. Analysis
B. Coding
C. Testing
D. Budget
Answer: A - OLTP
is used for:
A. Transactions
B. Analysis
C. Test
D. Budget
Answer: A - Fact
table stores:
A. Measures
B. Code
C. Test
D. Budget
Answer: A - Dimension
table stores:
A. Attributes
B. Code
C. Test
D. Budget
Answer: A - Star
schema includes:
A. Fact + dimension
B. Code
C. Test
D. Budget
Answer: A - Snowflake
schema is:
A. Normalized star
B. Code
C. Test
D. Budget
Answer: A - Data
mart is:
A. Subset of warehouse
B. Code
C. Test
D. Budget
Answer: A - Big
data refers to:
A. Large datasets
B. Code
C. Test
D. Budget
Answer: A - Hadoop
is:
A. Big data tool
B. Code
C. Test
D. Budget
Answer: A - Machine
learning uses:
A. Data patterns
B. Code
C. Test
D. Budget
Answer: A - Data
visualization tools include:
A. Power BI
B. Tableau
C. Excel
D. All
Answer: D - Dashboard
KPI shows:
A. Performance
B. Code
C. Test
D. Budget
Answer: A - Drill-down
analysis shows:
A. Detailed data
B. Code
C. Test
D. Budget
Answer: A - Data
aggregation combines:
A. Data
B. Code
C. Test
D. Budget
Answer: A - Correlation
shows:
A. Relationship
B. Code
C. Test
D. Budget
Answer: A - Regression
predicts:
A. Outcome
B. Code
C. Test
D. Budget
Answer: A - Data
storytelling explains:
A. Insights
B. Code
C. Test
D. Budget
Answer: A
161–180: Strategy & Business Value
- Business
strategy defines:
A. Direction
B. Code
C. Test
D. Budget
Answer: A - Vision
statement shows:
A. Future goal
B. Code
C. Test
D. Budget
Answer: A - Mission
statement defines:
A. Purpose
B. Code
C. Test
D. Budget
Answer: A - Competitive
advantage is:
A. Unique strength
B. Code
C. Test
D. Budget
Answer: A - Porter’s
Five Forces analyzes:
A. Competition
B. Code
C. Test
D. Budget
Answer: A - Market
analysis studies:
A. Customers
B. Code
C. Test
D. Budget
Answer: A - Value
proposition defines:
A. Benefit
B. Code
C. Test
D. Budget
Answer: A - Business
model shows:
A. How value created
B. Code
C. Test
D. Budget
Answer: A - ROI
measures:
A. Profitability
B. Code
C. Test
D. Budget
Answer: A - Cost
reduction improves:
A. Profit
B. Code
C. Test
D. Budget
Answer: A - Revenue
stream is:
A. Income source
B. Code
C. Test
D. Budget
Answer: A - Customer
segmentation groups:
A. Customers
B. Code
C. Test
D. Budget
Answer: A - Stakeholder
value ensures:
A. Satisfaction
B. Code
C. Test
D. Budget
Answer: A - Innovation
creates:
A. New ideas
B. Code
C. Test
D. Budget
Answer: A - Digital
transformation uses:
A. Technology
B. Code
C. Test
D. Budget
Answer: A - Business
agility supports:
A. Change
B. Code
C. Test
D. Budget
Answer: A - Strategic
alignment ensures:
A. Goals match
B. Code
C. Test
D. Budget
Answer: A - Value
chain shows:
A. Activities
B. Code
C. Test
D. Budget
Answer: A - Benchmarking
improves:
A. Performance
B. Code
C. Test
D. Budget
Answer: A - Risk
management reduces:
A. Uncertainty
B. Code
C. Test
D. Budget
Answer: A
181–200: Advanced & Real-world BA
- Business
continuity ensures:
A. Operations continue
B. Code
C. Test
D. Budget
Answer: A - Disaster
recovery restores:
A. Systems
B. Code
C. Test
D. Budget
Answer: A - SLA
defines:
A. Service level
B. Code
C. Test
D. Budget
Answer: A - KPI
threshold defines:
A. Limit
B. Code
C. Test
D. Budget
Answer: A - Customer
journey map shows:
A. Experience
B. Code
C. Test
D. Budget
Answer: A - Persona
represents:
A. User type
B. Code
C. Test
D. Budget
Answer: A - UX
design improves:
A. Experience
B. Code
C. Test
D. Budget
Answer: A - A/B
testing compares:
A. Two options
B. Code
C. Test
D. Budget
Answer: A - Hypothesis
testing validates:
A. Assumptions
B. Code
C. Test
D. Budget
Answer: A - Data
ethics ensures:
A. Responsible use
B. Code
C. Test
D. Budget
Answer: A - Compliance
follows:
A. Regulations
B. Code
C. Test
D. Budget
Answer: A - Audit
checks:
A. Accuracy
B. Code
C. Test
D. Budget
Answer: A - Governance
framework ensures:
A. Control
B. Code
C. Test
D. Budget
Answer: A - Business
architecture defines:
A. Structure
B. Code
C. Test
D. Budget
Answer: A - Enterprise
analysis evaluates:
A. Needs
B. Code
C. Test
D. Budget
Answer: A - Solution
design creates:
A. System
B. Code
C. Test
D. Budget
Answer: A - Implementation
phase delivers:
A. Solution
B. Code
C. Test
D. Budget
Answer: A - Post-implementation
review checks:
A. Success
B. Code
C. Test
D. Budget
Answer: A - Continuous
improvement ensures:
A. Growth
B. Code
C. Test
D. Budget
Answer: A - Business
analysis ultimate goal:
A. Deliver business value
B. Code
C. Test
D. Budget
Answer: A
Tuesday, April 14, 2026
THE MOST ASKED INTERVIEW QUESTION.
Most asked Interview question:
"What is your salary expectations (in range)"
Answer depending on the situation:
1. Best general answer (safe & professional)
“I’m open to a competitive offer based on the role, responsibilities, and market standards. I’m confident we can agree on a fair range.”
✔ Why it works:
Avoids underselling yourself
Shows flexibility
Keeps negotiation open
2. If they insist on a range
“Based on my skills and market research, I would expect something in the range of [X – Y], but I’m open to discussion depending on the overall package.”
✔ Tip:
Always give a range, not a fixed number
Make sure your lowest number is still acceptable to you
3. If you don’t know the market yet
“I’m still researching the market rates for this role, but I’m open to a fair and competitive offer.”
✔ Good for freshers or career switchers
Key strategies (VERY important)
Never say “any amount is fine” → looks desperate
Never give a too low number → hard to renegotiate later
Always consider total package (salary + benefits + growth)
If possible, let them mention the range first
Simple formula to remember:
Flexible + Confident + Not desperate
1. Best general answer (safe & professional)
“I’m open to a competitive offer based on the role, responsibilities, and market standards. I’m confident we can agree on a fair range.”
✔ Why it works:
Avoids underselling yourself
Shows flexibility
Keeps negotiation open
2. If they insist on a range
“Based on my skills and market research, I would expect something in the range of [X – Y], but I’m open to discussion depending on the overall package.”
✔ Tip:
Always give a range, not a fixed number
Make sure your lowest number is still acceptable to you
3. If you don’t know the market yet
“I’m still researching the market rates for this role, but I’m open to a fair and competitive offer.”
✔ Good for freshers or career switchers
Key strategies (VERY important)
Never say “any amount is fine” → looks desperate
Never give a too low number → hard to renegotiate later
Always consider total package (salary + benefits + growth)
If possible, let them mention the range first
Simple formula to remember:
Flexible + Confident + Not desperate
Monday, April 13, 2026
Practical ya Technician II – Graphic Design Guide
Practical ya Technician II – Graphic Design 👏
🔹 1. Practical ya Graphic Design huwa inahusu nini?
Kwa kawaida watakupa task ya kubuni (design) kitu fulani ndani ya muda mfupi (1–3 hrs).
Mifano ya kazi unazoweza kupewa:
Poster (mfano: tangazo la event, kampeni ya afya, n.k.)
Flyer ya biashara
Logo design
Business card
Social media post (Instagram/Facebook)
Banner (mtandaoni au print)
Brochure ndogo
👉 Mfano:
"Design poster ya kampeni ya mazingira" au
"Tengeneza flyer ya promotion ya kampuni"
🔹 2. Software wanazotumia (MUHIMU sana)
Hizi ndizo common tools:
🟢 Adobe Photoshop → editing ya picha, posters
🔵 Adobe Illustrator → logos, icons, clean graphics
🟣 CorelDRAW → sana sana Afrika hutumika kwa print designs
🟡 Canva → rahisi lakini mara nyingi exam hawapendi sana (isipokuwa wakiruhusu)
👉 Mara nyingi serikali/taasisi hutumia CorelDRAW + Photoshop
🔹 3. Watakutazama nini kwenye practical
Sio kubuni tu, wanapima skills hizi:
✅ Creativity
Design yako inaonekana professional?
Ina mvuto?
✅ Layout & Alignment
Vitu vimepangwa vizuri?
Spacing iko sawa?
✅ Typography
Fonts zimechaguliwa vizuri?
Zinakaa readable?
✅ Color Combination
Rangi zinaendana?
Hazi-changanyi macho?
✅ Use of Tools
Unajua kutumia layers?
Unajua import images, shapes, effects?
🔹 4. Example ya Task (Realistic kabisa)
Unaweza kupewa kitu kama:
"Design A4 poster ya kampuni ya mawasiliano inayo-promote internet offer"
Utahitaji kuweka:
Title (kubwa, attractive)
Picha (relevant)
Maelezo mafupi
Contact info
Logo (kama wamekupa)
🔹 5. Jinsi ya kujiandaa haraka (IMPORTANT)
Fanya hizi kabla ya siku ya practical:
🔸 Practice 1:
Tengeneza poster 3 tofauti
Tengeneza flyer 2
Tengeneza logo 1–2
🔸 Practice 2:
Jifunze hizi tools:
Text tool
Shape tool
Image import
Layers
Effects (shadow, transparency)
🔸 Practice 3:
Download sample images/logos (au tumia free sites kama:
Unsplash
Pexels
🔹 6. Tips za kufaulu practical
Usianze haraka sana → plan design kwanza (2–5 mins)
Tumia simple design (usi-overdesign)
Tumia colors 2–3 tu
Hakikisha spelling iko sahihi
Save mara kwa mara
Thursday, April 2, 2026
SYSTEM SECURITY PRACTICAL EXAM
SECURITY PRACTICAL EXAM
TIME: 3 HOURS
LAB SETUPMachines:
Attacker: Kali Linux
Victim 1: Metasploitable 2
Victim 2: Windows Server (optional)
Network:
Kali: 192.168.1.5
Metasploitable: 192.168.1.10
SECTION A: RECON & ENUMERATION (20 MARKS)
Task 1: Identify Live Hosts
Task 2: Full Port Scan
Task 3: Service Enumeration
SECTION B: VULNERABILITY ANALYSIS (20 MARKS)
Task 4: Scan for Vulnerabilities
Using OpenVAS or Nessus
Task 5: Risk Analysis
SECTION C: EXPLOITATION (20 MARKS)
Task 6: Exploit FTP Backdoor
Using Metasploit Framework
Task 7: Post Exploitation
a) whoami
b) uname -a
c) cat /etc/passwd
SECTION D: PASSWORD ATTACK (15 MARKS)
Task 8: Brute Force SSH
Using Hydra
Task 9: Security Analysis
SECTION E: PRIVILEGE ESCALATION (10 MARKS)
Task 10: Check Sudo Permissions
SECTION F: WEB ATTACK (15 MARKS)
Task 11: SQL Injection
Target:
http://192.168.1.10/dvwa
Using Burp Suite
Task 12: XSS Attack
Input:
<script>alert('Hacked')</script>
SECTION G: LOG ANALYSIS (10 MARKS)
Task 13: Investigate Logs
SECTION H: SYSTEM HARDENING (10 MARKS)
Task 14: Secure the System
--------------------------------------------------------------------------------------
FOR ANY ENQUIRIES WHATSAPP: 0692 127 931





