Computer Knowledge · General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following sources is not considered when performing technical vulnerability assessmen

  1. Operating systems e.g. Windows, UNIX, Cisco, Linux, CentOS

  2. Databases e.g. SQL Server, MySQL, Oracle

  3. Web servers e.g. IIS, Apache

  4. Social engineering
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Technical vulnerability assessments focus on identifying flaws in software, hardware, and network configurations. Social engineering is a human-centric attack vector, not a technical vulnerability of a system component.

Multiple choice

Log files will be kept for a period defined in the_______ document

  1. Anti-Malware Policy

  2. Internet Acceptable Use Policy

  3. Physical Security Policy

  4. Records Retention and Protection Policy
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The Records Retention and Protection Policy defines the lifecycle of data, including how long log files and other records must be maintained to meet compliance and operational requirements.

Multiple choice

RAT (Security)

  1. Remote Access Trojan

  2. Remote Access Technology

  3. Remote Access Tick

  4. Remove Access Trojan
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

RAT stands for Remote Access Trojan. It is a type of malware that allows an attacker to gain remote control over a target computer.

Multiple choice

Attack

  1. Smurf

  2. DDoS

  3. Session

  4. ARP poisoning
Reveal answer Fill a bubble to check yourself
A Correct answer
Multiple choice

Attack

  1. DoS

  2. IP spoofing

  3. Replay

  4. ARP spoofing
Reveal answer Fill a bubble to check yourself
B Correct answer
Multiple choice

Attack

  1. Assault

  2. Replay

  3. DDoS

  4. DoS
Reveal answer Fill a bubble to check yourself
D Correct answer
Multiple choice

Attack

  1. DDoS

  2. Replay

  3. Brute force

  4. Smurf
Reveal answer Fill a bubble to check yourself
A Correct answer
Multiple choice

Attack 

  1. Replay

  2. Brute force

  3. Smurf

  4. Keylogger
Reveal answer Fill a bubble to check yourself
B Correct answer
Multiple choice

Attack

  1. ARP poisoning

  2. IP spoofing

  3. Man in the middle

  4. Replay
Reveal answer Fill a bubble to check yourself
A Correct answer
Multiple choice

Which type of virus uses a keylogger?

  1. Crimeware

  2. Adware

  3. Trojan horse

  4. Rootkit
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Crimeware is a class of malware designed specifically to facilitate illegal activities, often incorporating keyloggers to steal credentials or financial information.

Multiple choice

Which kind of social engineering hack occurs over VoIP?

  1. Whaling

  2. Phishing

  3. Vishing

  4. Valing
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Vishing is a combination of 'voice' and 'phishing', referring to social engineering attacks conducted over voice communication channels like VoIP or telephone. Whaling and phishing are broader terms that do not specifically denote the VoIP medium.