Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is/are applicable about the Port Scanning in Ethical Hacking?

  1. Port Scanning is used to find out the vulnerabilities in the services listing on a port.

  2. In this scanning, the associate resources find out the parts of the target organisation.

  3. This scanning involves connecting with TCP and UDP ports on a system.

  4. The most common and popular tool is Nmap in Port scanning.

  5. All of the above
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

All are the correct statements about Port Scanning in Ethical Hacking.

Multiple choice

Which of the following is/are incorrect about 'Covering Tracks' in hacking?

  1. In this process, the hackers cover their tracks to avoid detection by security personnel.

  2. In this process, the hackers remove all traces of the attack, such as log files or intrusion detection system (IDS) alarms.

  3. In this process, once the hacker owns the system, they can use it as a base to launch additional attacks.

  4. The steganography, the use of tunneling protocols and altering log files are the example of such processes.

  5. Both (2) and (3)
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

This is incorrect statement about 'Covering Tracks' process in hacking and this is known as 'Maintaining access'.

Multiple choice

Which of the following is/are the scenarios of Computer hacking?

  1. Hacking is a breach of computer security.

  2. Hackers may even delete sensitive information on gaining access to it.

  3. Identity theft is another important consequence of computer hacking.

  4. It can lead to theft of critical business information.

  5. All of the above
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

All are the scenarios of Computer hacking.

Multiple choice

Which of the following are the causes to apply Penetration test in Ethical Hacking?

  1. To determe the feasibility of a particular set of attack vectors.

  2. Penetration tester identifies all level vulnerabilities for a successful exploit.

  3. Assessing the magnitude of potential business and operational impacts of successful attacks.

  4. All of the above

  5. Both (1) and (2)
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

These are the causes to apply Penetration test in Ethical Hacking.

Multiple choice

Which of the following is/are correct about IP spoofing attack in hacking?

  1. The attack may be directed to a specific computer addressed as though it is from that same computer.

  2. In this attack, the hackers may be able to break through other friendly but less secure networks and get access to your network using this method.

  3. This attack may cause the IP address location ambiguity.

  4. All of the above

  5. Both (1) and (3)
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

These are the correct statements about IP spoofing attack in hacking.

Multiple choice

Which of the following is called Password cracking attack in hacking?

  1. In this attack, the attacker uses the authentication to track the session information.

  2. In this attack, the attacker may fake their IP address so the receiver thinks it is sent from a location that it is not actually from.

  3. This is an attack where DNS information is falsified.

  4. This attack may cause unauthorized access in the system.

  5. Both (1) and (4)
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

By Password cracking attack, the attacker gets the password of a user or administrator on a network and gain unauthorized access.

Multiple choice

Which of the following is known as Server spoofing in hacking?

  1. In this attack, the attacker uses the LANMAN authentication to get information about the credentials of the network packets.

  2. By this attack, the attacker gets the password of a user or administrator on a network and gain unauthorized access.

  3. In this attack, the attacker may fake their IP address so the receiver thinks it is sent from a location that it is not actually from.

  4. Both (1) and (2)

  5. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is correct as If the client is tricked into sending LANMAN authentication, the attacker can read their username and password from the network packets sent.

Multiple choice

Which of the following is called Session hijacking attack?

  1. In this attack, the attacker uses the authentication to track the session information.

  2. In this attack, the attacker may fake their IP address so the receiver thinks it is sent from a location that it is not actually from.

  3. This is an attack where DNS information is falsified.

  4. By this attack, the attacker gets the password of a user or administrator on a network and gain unauthorized access.

  5. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is correct as once authentication is complete, they may attack the client computer to disable it, and use IP spoofing to claim to be the client who was just authenticated and steal the session.

Multiple choice

Which of the following is/are applicable for Ping broadcast attack in hacking?

  1. In this attack, a ping request packet is sent to a broadcast network address where there are many hosts.

  2. The source address is shown in the packet to be the IP address of the computer to be attacked.

  3. This attack may cause some network delay with lot of ping traffic.

  4. All of the above

  5. Both (1) and (2)
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All are correct statements about Ping broadcast attack.

Multiple choice

Which of the following is/are applicable for Teardrop attack in hacking?

  1. In this attack, a ping request packet is sent to a broadcast network address where there are many hosts.

  2. In this attack, one packet in the network may cause the overlappings in the existing packet.

  3. This attack may cause an unexpected error condition to occur on the victim host.

  4. All of the above

  5. Both (2) and (3)
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

These are correct statements about Teardrop attack in hacking.