Computer Knowledge ยท General Awareness
Information Security
4,634 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
-
Cell site
-
Risk analysis
-
Swipe pattern
-
Authorization
-
Session management
C
Correct answer
Explanation
Due to usability restrictions, mobile applications use this security mechanism to reduce password complexity.
-
Session management routine
-
Server architecture
-
Session management
-
Permission analysis
-
Physical security
A
Correct answer
Explanation
It will be reviewed to gauge their protection for session management errors.
-
Risk analysis
-
Source code analysis
-
Permission analysis
-
Authorization
-
Private cloud
B
Correct answer
Explanation
This analysis should attempt to identify vulnerabilities that affect the application at the host, server and network layers.
-
Physical security
-
Data flow analysis
-
Permission analysis
-
Risk analysis
-
Authorization
B
Correct answer
Explanation
This analysis traces data from the points of the input to the points of the output.
-
Encryption
-
Server architecture
-
Protocols
-
Firewall
-
Input validation control
A
Correct answer
Explanation
This security technique provides adequate protection to sensitive data.
-
Permission analysis
-
Output reconciliation control
-
Change management control
-
Access control list
-
Access control
E
Correct answer
Explanation
By using this security technique, sensitive data must also be protected in storage and transfer.
-
Risk analysis
-
Transport level encryption
-
Output reconciliation control
-
Change management control
-
Backup and recovery control
E
Correct answer
Explanation
This security technique is used to maintain physical and logical controls over data backup.
-
Dialog flow
-
Lattice flow
-
Relay flow
-
Communication support
-
Remote bridge
A
Correct answer
Explanation
This type of flow is an ISO defined term for combinations of staged and unstaged closed 2-way flows between a pair of programs.
-
SQL injection
-
Input validation
-
HMAC verification
-
SetCookies()
-
New MySQLi
A
Correct answer
Explanation
This method is a method in which an attacker inserts malicious code into queries that run on your database.
-
It refers to the maximum length of time a system can be down after a failure or disaster.
-
RTO determines the amount of lost revenue per amount of lost time.
-
It specifies a point in time that data must be recovered and backed up in order for business operations to resume.
-
It determines the expected time for the business operations.
-
Only 1 and 2
E
Correct answer
Explanation
These are correct statements about Recovery Time Objective in Disaster recovery plan.
-
It determines the data recovery and backing time for business processes.
-
It determines the minimum frequency at which interval backups need to occur.
-
It refers to the maximum length of time a system can be down after a failure or disaster before the company is negatively impacted by the downtime.
-
All of the above
-
Only 1 and 2
E
Correct answer
Explanation
These are correct about Recovery Point Objective (RPO) in Disaster recovery plan.
-
This control is used to edit the message.
-
It shows a menu of available actions that can be performed on the currently displayed message.
-
It is used to add a comment to interesting items, to easily identify them later.
-
It is used to toggle all interceptions on and off.
-
Both (1) and (3)
C
Correct answer
Explanation
This control has such facility to check the specific items.
-
It uses multiple payload sets.
-
The total number of requests generated by the attack is the product of the number of payloads.
-
This attack iterates through all payload sets simultaneously.
-
Both (1) and (3)
-
Both (1) and (2)
E
Correct answer
Explanation
These are the correct statements about cluster bomb attack.
-
This tool is a better choice for application security.
-
It defines the application's status in terms of sessions.
-
It maintains the application performance for virus security.
-
All of the above
-
Both (1) and (2)
E
Correct answer
Explanation
These are correct statements about Sequencer tool for request manipulation in burp suite.
-
This tool checks the cross site scripting vulnerability.
-
This tool uses a java script syntax like code to check the vulnerability.
-
It is used for authentication of the web applications.
-
All of the above
-
Both (1) and (2)
E
Correct answer
Explanation
These are the correct statements about XSS with Burp-Repeater tool.