Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Directions: For this question, select the best of the answer choices given.

A computer equipped with signature-recognition software, which restricts access to a computer to those people whose signatures are on file, identifies a person's signature by analyzing not only the form of the signature but also such characteristics as pen pressure and signing speed. Even the most adept forgers cannot duplicate all of the characteristics the program analyzes. Which of the following can be logically concluded from the passage above?

  1. The time it takes to record and analyze a signature makes the software impractical for everyday use.

  2. Computers equipped with the software will soon be installed in most banks.

  3. Nobody can gain access to a computer equipped with the software solely by virtue of skill at forging signatures.

  4. Signature-recognition software has taken many years to develop and perfect.

  5. In many cases even authorized users are denied legitimate access to computers equipped with the software.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The software analyzes multiple signature characteristics including form, pen pressure, and speed. Since even skilled forgers cannot duplicate all these characteristics, skill alone cannot bypass the system. Option C logically follows - forgery skill is insufficient when the software checks characteristics beyond visual appearance.

Multiple choice

When an organization gives contract for development of software, it has to give data to the service provider. In such cases, the ownership of data should _________ .

  1. be transferred to the service provider

  2. be with the client/organization that outsource services

  3. be shared by both parties

  4. not be transferred
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

When an organization outsources software development, the data ownership must remain with the client organization that provides the data. This is crucial for data security, privacy, and intellectual property protection. The service provider only gets access to the data needed for the development work and must maintain confidentiality. Transferring ownership would create unacceptable risks for the client's business continuity and competitive advantage.

Multiple choice

The most dangerous risk in leaking of information is

  1. ready access to online terminals

  2. online processing of data

  3. ignorance about the existence of risk

  4. all of these
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Unrecognized security risks present the greatest danger because organizations cannot implement defenses against threats they do not know exist. Visible risks like online terminals and processing can be addressed through proper controls, but ignorance leaves organizations completely vulnerable. Security awareness and risk assessment programs exist precisely to combat this hazard.

Multiple choice

In which of the following security policies, every data item under any level of categorisation will have varying levels of sensitivity such as public, proprietary or internal?

  1. Commercial security policy

  2. Security policy

  3. ProtectedData

  4. Military security policy

  5. Multilevel security
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In this security policy, every data item under any level of categorisation will have varying levels of sensitivity, such as public, proprietary or internal.

Multiple choice

Which of the following security techniques is used when a workstation could be vulnerable to malicious code, leakage of personal data stored on the workstation, and vulnerability scans to identify potential weakness?

  1. Stateful inspection firewall

  2. Transport layer security

  3. Personal firewall

  4. Message integrity check

  5. Sender authenticity
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

This security technique is used when a workstation could be vulnerable to malicious code, leakage of personal data stored on the workstation and vulnerability scans to identify potential weakness.

Multiple choice

Which of the following security features of a trusted operating system, occurs in military security policy where an individual data owner does not decide who has a top secret clearance?

  1. Discretionary access control

  2. Authentication of users

  3. Protection of memory

  4. Mandatory access control

  5. Object reuse protection

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

This security feature of trusted operating system occurs in military security where an individual data owner does not decide, who has a top secret clearance.

Multiple choice

In which of the following security features of operating system, peripheral devices and users must be protected from unauthorised access by the operating system?

  1. Authentication of users

  2. Protection of memory

  3. I/O devices access control

  4. Output reconciliation control

  5. Input validation control
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

In this security feature of operating system, peripheral devices and users must be protected from unauthorised access by the operating system.

Multiple choice

In which of the following security features of operating system, one way for a malicious user to gain inappropriate access is to spoof users, making them think that they are communicating with a legitimate security enforcement system?

  1. Intrusion detection

  2. Object reuse protection

  3. Discretionary access control

  4. Authentication of users

  5. Trusted path
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

In this security feature of operating system, one way for a malicious user to gain inappropriate access is to spoof users, making them think that they are communicating with a legitimate security enforcement system.