security practice questions