Computer Knowledge ยท General Awareness
Information Security
4,143 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
-
Vandalism
-
Terrorism
-
Theft and Burglary
-
All the Above
D
Correct answer
Explanation
Physical security threats include any action that compromises the physical integrity of a facility, including vandalism, terrorism, theft, and burglary.
A
Correct answer
Explanation
Cyber attacks can lead to system downtime, data loss, and operational failure, all of which directly interrupt business activities.
-
disease identification and cures
-
medical training and certifications
-
levels of protection in electronic data
-
robotic design studies
C
Correct answer
Explanation
Cyber security is defined as the practice of protecting systems, networks, and programs from digital attacks, essentially providing levels of protection for electronic data.
-
Disease identification and cures
-
Levels of protection in electronic data
-
Medical certifications
-
Robotic design studies
B
Correct answer
Explanation
Cyber security involves the protection of electronic data and systems from unauthorized access or damage.
-
DDoS attacks
-
Botnet attacks
-
Social engineering
-
All of the above
D
Correct answer
Explanation
DDoS attacks, botnets, and social engineering are all well-documented methods used by attackers to compromise systems and data.
-
False negative
-
False positive
-
True negative
-
True positive
D
Correct answer
Explanation
A true positive occurs when an alert correctly identifies an actual security incident that is taking place.
-
CSIRT
-
Cyber Kill Chain
-
Diamond model
-
VERIS
D
Correct answer
Explanation
VERIS (Vocabulary for Event Recording and Incident Sharing) is a framework designed to provide a common language and structure for sharing security incident data.
-
WannaCry
-
Pwnedd
-
Petya.A
-
Anon
C
Correct answer
Explanation
The 2017 NotPetya attack, often referred to as Petya.A or NotPetya, caused massive disruption to Maersk's global operations. It was a destructive wiper malware disguised as ransomware.
-
Reconnaissance
-
Attack
-
Threat modeling
-
Post-Attack
C
Correct answer
Explanation
The anatomy of a cyber attack typically includes reconnaissance, weaponization, delivery, exploitation, installation, and post-attack actions. Threat modeling is a proactive security design process, not a phase of an active attack.
-
Attack trees
-
STRIDE
-
Trike
-
Open Source Requirements
B
Correct answer
Explanation
STRIDE (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) is a widely used framework for classifying threats during the threat modeling process.
-
Enumeration
-
Packet trace analysis
-
Scanning tools
-
Footprinting tools
B
Correct answer
Explanation
Packet trace analysis allows security professionals to inspect network traffic patterns, which is highly effective for identifying reconnaissance activities like port scanning or network mapping.
-
Winning the super bowl?
-
Detecting Cyber security threats
-
Fighting fires?
-
A plan with which a company takes action against a cyber attack
D
Correct answer
Explanation
Incident Response (IR) is the organized approach to addressing and managing the aftermath of a security breach or cyber attack to limit damage and reduce recovery time.
-
hacking
-
web security
-
data base
-
programming
B
Correct answer
Explanation
Web security encompasses the measures and protocols used to protect websites and web applications from unauthorized access, attacks, and data breaches.
-
It is about the privilege of using electronic information
-
It is about the right to have equal, secure access
-
providing an Internet access tothe public at affordable rate
-
It is about Internet security and how to protect from hacker
D
Correct answer
Explanation
Cyber access refers to the ability to reach and utilize digital information and services. While security is important, the core definition of 'Cyber Access' is about the availability and right to use the technology, not the act of protecting it.