Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following security mechanisms includes vital attributes required for secure over the internet credit-card transactions such as merchant authentication, integrity of data etc.?

  1. Message authentication code

  2. Secure electronic transaction

  3. Transport layer security

  4. Sender authentication

  5. Packet filtering gateway
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This security mechanism includes vital attributes required for secure over the internet credit-card transactions such as merchant authentication, integrity of data etc.

Multiple choice

Which of the following security standards performs the actions such as uses the session key to encrypt the message, encrypt the session key under the recipient's public key etc.?

  1. Pretty good privacy

  2. Certificate scheme

  3. Message confidentiality

  4. Packet filtering gateway

  5. Transport layer security
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This security standard performs the actions such as uses the session key to encrypt the message, encrypt the session key under the recipient's public key etc.

Multiple choice

Which of the following analysis should utilise both commercial as well as proprietary tools to scan for the symptom code, and common programming errors that lead to vulnerabilities?

  1. Scan analysis

  2. Source code analysis

  3. Control flow analysis

  4. Data flow analysis

  5. Risk analysis
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This analysis should utilise both commercial as well as proprietary tools to scan for the symptom code, and common programming errors that lead to vulnerabilities.

Multiple choice

Which of the following is an incorrect statement about zero day attack?

  1. It affects the application's vulnerability.

  2. It occurs during the vulnerability window.

  3. Malware can exploit zero day vulnerabilities.

  4. In this attack, a patch is not available.

  5. This attack is unknown to the vendor.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

A zero day attack refers to a hole in software that is unknown to the vendor.

Multiple choice

Which of the following statements is false about client authentication in Kerberos protocol?

  1. Client session key is encrypted using the secret key.

  2. 'Ticket-Granting-Ticket' is encrypted using the secret key of the TGS.

  3. AS (Authenticated Server) checks to see if the client is in its database.

  4. The secret is generated by AS.

  5. The client decrypts the confirmation using the client/server session key.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

The client does not decrypt the session key.