Computer Knowledge · General Awareness
Information Security
4,634 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
-
It uses 2 DES for encryption.
-
Decryption requires that the keys be applied in reverse order.
-
It results in a dramatic increase in cryptographic strength for DES.
-
It uses 2 keys for processing.
-
It is used to provide the potential vulnerability of DES to a brute force attack.
D
Correct answer
Explanation
Double-DES uses a single key that is equivalent to using 2 keys.
-
It occurs where a valid signed message is copied and later resent.
-
The message repetition that can be logged.
-
The message repetition that cannot be detected.
-
It used sequence numbers for the process.
-
There is no timestamp defined in this attack.
E
Correct answer
Explanation
Timestamp is used for synchronised blocks.
-
It must depend on the message signed.
-
It must be practically save digital signature in storage.
-
Security depends on sender’s private-key.
-
The signed message and signature should be encrypted.
-
The message can encrypt using receivers private-key.
E
Correct answer
Explanation
It can only be encrypted by using receiver's public key.
-
It uses a trusted Key Distribution Center (KDC).
-
Each party shares own master key with KDC.
-
There is a session keys is maintained between the parties.
-
The master keys are used to distribute the session keys to both the parties.
-
This approach is useful for more then two senders.
E
Correct answer
Explanation
This is incorrect as there can be only one sender and one receiver.
-
Identification and authentication
-
Lattice model of access security
-
Multilevel security model
-
Protection of memory
-
Security policy
B
Correct answer
Explanation
In lattice model of access security, the dominance relation <= is defined in the military model.
-
Non-repudiation
-
Threat
-
Virus
-
Worm
-
Logic bomb
E
Correct answer
Explanation
This type of malicious code is a class of malicious code that detonates when a specified condition occurs.
-
DEK-Info
-
Stateful inspection firewall
-
Packet filtering gateway firewall
-
Secure electronic transaction
-
Message integrity check
B
Correct answer
Explanation
This firewall does not follow the concept of context from one packet to the next.
-
Mandatory access control
-
Discretionary access control
-
Complete mediation
-
Authentication of users
-
Ease of use
A
Correct answer
Explanation
It means that access control policy decisions are made beyond the control of the individual owner of an object.
-
Object reuse protection
-
Complete meditation
-
Discretionary access control
-
Identification and authentication
-
Message integrity check
A
Correct answer
Explanation
This security feature is used when a malicious user may claim a large amount of disk space and then scavenge for sensitive data.
-
Open design
-
Least privilege
-
Ease of use
-
Authentication of users
-
Message confidentiality
A
Correct answer
Explanation
This principle applied in the design element of OS is also available for extensive public scrutiny, thereby providing independent confirmation of the design security.
-
Packet filtering gateway firewall
-
Secure socket layer
-
Secure electronic transaction
-
Key-Info
-
The certificate scheme
B
Correct answer
Explanation
This security mechanism provides services such as fragmentation, compression, message integrity etc.
-
Message confidentiality
-
Vulnerability
-
Virus
-
Rabbit
-
Worm
D
Correct answer
Explanation
This type of malicious code replicates itself without limit to exhaust resource.
-
Packet filtering gateway protocol
-
Secure electronic transaction
-
Secure multipurpose internet mail extension
-
The certificate scheme
-
Proc-Type
C
Correct answer
Explanation
This security standard uses hierarchically validated certificates usually represented in X.509 format.
-
Personal firewall
-
Packet filtering gateway firewall
-
Message integrity check
-
Secure electronic transaction
-
Proc-Type
A
Correct answer
Explanation
This security technique can generate logs of accesses which can be useful to examine in case of something harmful.
-
Military security policy
-
Multilevel security model
-
Bell-La Padula confidentiality model
-
Least privilege
-
Message confidentiality
C
Correct answer
Explanation
This security model is a formal description of the allowable paths of information flow in a secure system.