Computer Knowledge · General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following security measurements is not considered in wireless security on wireless ADSL router?

  1. These are open networks and easily accessible.

  2. SSID broadcast is disabled for such measurement.

  3. WPA is used to provide encryption techniques.

  4. Extensible Authentication Protocol (EAP) protection is used.

  5. The security is limited to some local areas.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

The wireless security is not limited and it exists remotely.

Multiple choice

Which of the following is an incorrect statement about MAC spoofing?

  1. It occurs when some network traffic is availabe for a hacker.

  2. It allows MAC filtering also.

  3. It combines various programs and specifies the MAC address.

  4. It is effective only for small residential (SOHO) networks.

  5. These attacks are enhanced by softwares such as LANjack.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

This is a false statement.

Multiple choice

Which of the following is an incorrect statement about DNS spoofing?

  1. It occurs due to false IP address accessibility.

  2. A cache holds an intentionally false IP address.

  3. It allows a sequence number to track the requests.

  4. DNSsec is based on private-key cryptography.

  5. DNS servers use random IDs in their queries.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

DNSsec is based on public-key cryptography.

Multiple choice

Which of the following statements is false about PGP (Pretty Good Privacy) in e-mail security?

  1. It provides authentication of the user's requests.

  2. It uses digital signatures.

  3. It supports multiple platforms.

  4. One cannot produce a number of versions of PGP easily.

  5. PGP encrypts data by using a block cipher called IDEA algorithm.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Since PGP is an open source, various people and groups have modified it and produced a number of versions.

Multiple choice

Which of the following is incorrect about X.509 Authentication Service?

  1. It is used to construct a public key certificate.

  2. It also defines authentication protocols.

  3. In this service, the algorithms are not standardised, but RSA recommended.

  4. It uses public-key crypto and digital signatures.

  5. It handles double encryption, non-standard mode of use, session keys, password attacks.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

X.509 does not handle the double encryption.

Multiple choice

Which of the following is the incorrect statement about the Authentication Server (AS) in Kerberos 4?

  1. It provides the authentication to the Ticket Granting Server(TGS).

  2. It verifies the user's access rights in the database.

  3. It creates the session key for the database.

  4. It encrypts the user's keys from user's password.

  5. It also decrypts ticket and verifies the request.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

This is false as AS does not decrypts the ticket, but the Ticket Granting Server (TGS) is responsible for that.

Multiple choice

Which of the following is incorrect about Block ciphers in cryptography?

  1. These ciphers process messages in blocks.

  2. These ciphers process messages a bit or byte at a time.

  3. Many current ciphers are block ciphers.

  4. These ciphers use bits, that have to be available before the block can be processed.

  5. These are used in broader range of applications.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This is incorrect as the stream ciphers process messages a bit or byte at a time when en/decrypting.  

Multiple choice

Which assumption is not considered in Key Distribution techniques in cryptography?

  1. This approach requires to have a shared key for the sender and the receiver.

  2. Exchange of keys also possible.

  3. It allows the data, without allowing others to see the key.

  4. The secure system can be failure in this technique.

  5. It also works for asymmetric schemas.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

Key Distribution techniques is not applicable for asymmetric schemas.

Multiple choice

Which of the following is incorrect about Differential Cryptanalysis attack on DES algorithm?

  1. It uses multiple text blocks.

  2. It performs attack by repeatedly encrypting plaintext pairs with known input XOR.

  3. This technique is not efficient for large number of rounds.

  4. It gives linear equation for key bits.

  5. The differential cryptanalysis attack is complex and provides a complete description.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

This is incorrect about Differential Cryptanalysis attack. Linear Cryptanalysis attack uses linear equation for key bits.

Multiple choice

Which of the following functionality does S/MIME (Secure/Multipurpose Internet Mail Extensions) algorithm not contain?

  1. It is used for content types and texts messages.

  2. S/MIME supports in many mail agents.

  3. It has signed data to encode messages.

  4. It has encrypted content and associated keys.

  5. It uses digital signatures with DES algorithm.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

S/MIME uses digital signatures with DSS  and RSA algorithms only and not DES.

Multiple choice

Which of the following is incorrect about S/MIME Certificate Processing?

  1. It uses X.509 v3 certificates.

  2. Each client has a list of trusted CA’s certificates.

  3. Each client has own public/private key pairs and certificates.

  4. The certificates must be signed by trusted CA’s.

  5. It verifies the incoming signatures and decrypt outgoing messages.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

It encrypts outgoing messages and not encrypt.