Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice technology operating systems

What does umask do?

  1. It puts a mask on user accounts

  2. It means unix mask

  3. default permissions

  4. default names
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

umask (user file-creation mode mask) determines default permissions for newly created files and directories. It specifies which permission bits to turn off when creating new files.

Multiple choice technology security

Which of the following vulnerability can not be handled by Input Validation?

  1. Cross site Scripting

  2. Injection flaws

  3. Privilege Escalation

  4. None of the above
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Privilege escalation cannot be handled by input validation alone. It's a logic flaw where users can access functions or data beyond their intended permissions. It requires proper authorization checks, access controls, and session management, not just input validation.

Multiple choice technology security

HTTP Vs HTTPS

  1. uses different ports

  2. HTTPS is insure while HTTP is secure

  3. HTTPS is designed to withstand such attacks and is secure.

  4. Both 1 and 3

  5. Both 2 and 3
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

HTTP uses port 80 while HTTPS uses port 443. HTTPS provides security through SSL/TLS encryption. The question wording is vague - option C lacks context about which attacks, and option B has a typo ('insure' instead of 'insecure').

Multiple choice technology security

A type of computer threat that exploits vulnerabilities in Application that is not yet known to vendor or others and for which a patch is yet to be released

  1. Rootkit

  2. Denial of Service

  3. Zero Day

  4. Worm
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

A Zero Day vulnerability is a security flaw unknown to the software vendor, for which no patch exists. Attackers exploit these vulnerabilities before developers become aware and can release fixes, making them particularly dangerous.

Multiple choice technology security

A technique where in a hacker masquerades a fake website to look like the original one to obtain sensitive information from a victim

  1. Keylogging

  2. Backdoor

  3. Phishing

  4. Masquerading
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

To solve this question, the user needs to be familiar with different hacking techniques. The user must identify the technique used by the hacker to obtain sensitive information from a victim.

The correct answer is:

C. Phishing

Explanation:

Phishing is a technique used by hackers to create a fake website or email to look like an original one to trick the victims into providing sensitive information, such as passwords, credit card numbers, or social security numbers. The fake website or email will usually contain a link to the original website, but when the victim clicks on the link, they will be directed to the fake website where the hacker can obtain their sensitive information.

Option A, Keylogging, is a technique used to record the keystrokes of a victim to obtain their login credentials.

Option B, Backdoor, is a technique used to create a hidden entry point to a computer system to gain access to it later.

Option D, Masquerading, is a general term that refers to any technique used to disguise oneself or one's activities.

Therefore, the correct answer is C. Phishing.

Multiple choice technology security

Which of the below Algorithm is the strongest in using cariable key mechanism for Encyption

  1. Mars

  2. Serpent

  3. Twofish

  4. Des
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Serpent is considered the strongest among these for variable key encryption. It was an AES competition finalist known for its conservative design and high security margins, supporting 128, 192, and 256-bit keys. MARS and Twofish were also AES finalists but Serpent had the highest security margin. DES is weak with only 56-bit keys.

Multiple choice technology security

How many versions does a DES algorithm have

  1. 5

  2. 2

  3. 9

  4. 13
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

DES (Data Encryption Standard) has two primary versions: the original DES and Triple DES (3DES). Triple DES was developed to address DES's vulnerability by applying the cipher three times with different keys, effectively strengthening the encryption.

Multiple choice technology security

What is the vulnerability in this code? char output[20]; /* Assume data is a character array with value %200d asdf */ sprintf(output, data);

  1. Buffer overflow

  2. Off by one error

  3. Format string vulnerability

  4. No vulnerabilities are present in this code
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The code has a format string vulnerability because sprintf() uses the 'data' array as the format string. If data contains format specifiers like %200d, they will be interpreted as format directives rather than literal text, potentially leaking stack data or causing crashes. Buffer overflow is not the primary issue.

Multiple choice technology security

What is the vulnerability in this code? int main(int argc, char * argv[]) { printf (argv[1]); }

  1. Buffer overflow

  2. Off by one error

  3. Format string vulnerability

  4. No vulnerabilities are present in this code
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The code has a format string vulnerability because printf() directly uses argv[1] as the format string. If argv[1] contains format specifiers like %n or %s, they will be interpreted by printf, allowing potential code execution or information disclosure. This is not a buffer overflow.

Multiple choice technology security

Is there a vulnerability in this code? If yes, which line(s) int main (int argc, char argv[]){ char chararray[3]; int intarray[3]; int i; strncpy(chararray, argv[1], sizeof(chararray) - 1); for (i=0;i<=3;i++){ /*1/ chararray[i]= getchar(); intarray[i]=i*i; /2/ } }

  1. for (i=0;i<=3;i++)

  2. intarray[i]=i*i;

  3. Both

  4. None
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

The loop runs for i=0,1,2,3 but arrays are size 3 (indices 0-2). When i=3, both chararray[3] and intarray[3] write past array bounds, buffer overflow. The loop condition i<=3 should be i<3 or i<=2. Line 1 is the vulnerability source.

Multiple choice technology security

What is the vulnerability ? int main (int argc, char *argv[]){ char k[3]; int i=0,j=1; char buffer[50]; strncpy(buffer, argv[1], sizeof(buffer) - 1); buffer[49]='/0'; unsigned char ch='a'; k[0]=1; do{ i++; k[i]=ch+i; } while(i<3); return 0; }

  1. Heap overflow

  2. Integer overflow

  3. Off by one error

  4. None
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The loop 'do { i++; k[i]=ch+i; } while(i<3);' will execute for i=1, 2, and 3. Since 'k' is defined as 'char k[3]', the valid indices are 0, 1, and 2. Writing to 'k[3]' causes an off-by-one error (buffer overflow).