Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following security techniques is used when a company with multiple offices wants to encrypt the data portion of all email to addresses as its other offices?

  1. Application proxy

  2. Stateful inspection firewall

  3. The certificate scheme

  4. ProtectedData

  5. Transport layer security
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This security technique is used when a company with multiple offices wants to encrypt the data portion of all email to addresses at its other offices.

Multiple choice

Which of the following protocol is used when the client may, at any time ask for a change in the existing cryptographic parameters like the handshake key exchange?

  1. Hyper text transfer protocol

  2. File transfer protocol

  3. Change CipherSpec protocol

  4. Simple mail transfer protocol

  5. User datagram protocol
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

This protocol is used when the client may, at any time ask for a change in the existing cryptographic parameters like the handshake key exchange.

Multiple choice

Which of the following security standards is used to secure email attachment, handle all types of attachments, such as sound, presentation, graphics, etc?

  1. Secure multipurpose internet mail extension

  2. Stateful inspection firewall

  3. The certificate scheme

  4. Message confidentiality

  5. Transport layer security
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This security standard is used to secure email attachments, handles all types of attachments, such as sound, presentation, graphics, etc.

Multiple choice

Which of the following security mechanisms is a dynamic and automated scheme, which enables secure transaction between a vendor and a customer over the internet?

  1. Transport layer security

  2. Secure electronic transaction

  3. Message integrity check

  4. Non repudiation

  5. Stateful inspection firewall
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This security mechanism is a dynamic and automated scheme, which enables secure transaction between a vendor and a customer over the internet.

Multiple choice

To prevent introduction of viruses in files, a company will first pass all incoming files through a virus scanner. This activity is achieved by which of the following security techniques?

  1. Stateful inspection firewall

  2. Message integrity check

  3. ProtectedData

  4. Transport layer security

  5. Guard
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

To prevent introduction of viruses in files, a company will first pass all incoming files through a virus scanner. This activity is achieved by this security technique.

Multiple choice

Which of the following statements is incorrect about 'packet sniffing' method in Ethical hacking?

  1. It captures data from information packets.

  2. It can have user specific data or information.

  3. It does not require any administrator-level access to proceed.

  4. A packet sniffer can be installed on any cable modem user's computer.

  5. It causes the computer to crash and make it busy processing data that the user is unable to use.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

It does not make the system crash or busy in processing. Denial of Service attack makes the system crash.

Multiple choice

Which of the following statements is correct about 'Strobe Scan' in Port Scanning technique?

  1. This scanning technique is performed for limited ports.

  2. In this type of scan, the hackers try to connect to all the ports of the victim.

  3. It does not establish a complete connection with the host.

  4. It is a heavyweight scan.

  5. It is based on IP routing function.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In strobe scanning, the hackers try to scan only a selected number of port connections.

Multiple choice

Which of the following statements is correct about Trojan horse programs?

  1. These programs capture data from information packets.

  2. These programs infect the computer with the intruders.

  3. These are used by intruders to gain remote access to the computer.

  4. These programs cause the computer to crash or make it busy in processing data.

  5. Using these programs, a malicious web developer may attach a script to something sent to a website.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Trojan horse programs allow intruders easy access to the computer and change the system configurations.

Multiple choice

Which of the following is false about cross-site scripting attack in Ethical hacking?

  1. This attack is spread by using the web URL.

  2. By this attack, a malicious script is transferred to the browser.

  3. This type of attack is very harmful for e-mails or other forms.

  4. It can be used by intruders to gather information.

  5. Due to this attack, the generated pages are affected where users can post text containing HTML tags.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

This attack cannot be used by intruders for such information.