Computer Knowledge ยท General Awareness
Information Security
4,634 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
-
False negative
-
False positive
-
True negative
-
True positive
D
Correct answer
Explanation
A true positive occurs when an alert correctly identifies an actual security incident that is taking place.
-
CSIRT
-
Cyber Kill Chain
-
Diamond model
-
VERIS
D
Correct answer
Explanation
VERIS (Vocabulary for Event Recording and Incident Sharing) is a framework designed to provide a common language and structure for sharing security incident data.
-
Detecting network threats
-
Controlling firewalls
-
Privilliged Account Management
-
Securing cloud connections
C
Correct answer
Explanation
IBM Security Secret Server is a privileged account management (PAM) solution. It helps organizations manage, secure, and monitor access to privileged credentials.
-
WannaCry
-
Pwnedd
-
Petya.A
-
Anon
C
Correct answer
Explanation
The 2017 NotPetya attack, often referred to as Petya.A or NotPetya, caused massive disruption to Maersk's global operations. It was a destructive wiper malware disguised as ransomware.
-
Reconnaissance
-
Attack
-
Threat modeling
-
Post-Attack
C
Correct answer
Explanation
The anatomy of a cyber attack typically includes reconnaissance, weaponization, delivery, exploitation, installation, and post-attack actions. Threat modeling is a proactive security design process, not a phase of an active attack.
-
Attack trees
-
STRIDE
-
Trike
-
Open Source Requirements
B
Correct answer
Explanation
STRIDE (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) is a widely used framework for classifying threats during the threat modeling process.
-
Enumeration
-
Packet trace analysis
-
Scanning tools
-
Footprinting tools
B
Correct answer
Explanation
Packet trace analysis allows security professionals to inspect network traffic patterns, which is highly effective for identifying reconnaissance activities like port scanning or network mapping.
-
Winning the super bowl?
-
Detecting Cyber security threats
-
Fighting fires?
-
A plan with which a company takes action against a cyber attack
D
Correct answer
Explanation
Incident Response (IR) is the organized approach to addressing and managing the aftermath of a security breach or cyber attack to limit damage and reduce recovery time.
-
hacking
-
web security
-
data base
-
programming
B
Correct answer
Explanation
Web security encompasses the measures and protocols used to protect websites and web applications from unauthorized access, attacks, and data breaches.
-
It is about the privilege of using electronic information
-
It is about the right to have equal, secure access
-
providing an Internet access tothe public at affordable rate
-
It is about Internet security and how to protect from hacker
D
Correct answer
Explanation
Cyber access refers to the ability to reach and utilize digital information and services. While security is important, the core definition of 'Cyber Access' is about the availability and right to use the technology, not the act of protecting it.
-
Cyber Safety
-
Cyber Access
-
Cyber bulling
-
Cyber Literate.
B
Correct answer
Explanation
Cyber Access is defined as the right and ability to utilize electronic information and digital services, encompassing the privilege of access.
-
Use it, it is open
-
Use it but during the night only
-
Use it but only when you get permission
-
Use it and give them some money later
C
Correct answer
Explanation
Accessing a neighbor's wireless network without permission is unauthorized access, which is unethical and often illegal.
-
Difference between those who have & those who do not.
-
A privilege to use electronic information on the internet.
-
For disabled people that need to use special equipment
-
Everyone in the world can access the internet
B
Correct answer
Explanation
Cyber access refers to the ability to utilize electronic information and digital resources via the internet. It is a functional privilege or capability rather than a definition of the digital divide or specific accessibility equipment.
-
Asia Pacific Economic Cooperation (APEC)
-
Asia Pacific Computer Emergency Response Team (APCERT)
-
G20
-
Association of South East Asia Nations (ASEAN)
B
Correct answer
Explanation
APCERT (Asia Pacific Computer Emergency Response Team) is the specific regional organization focused on collaboration for cyber security incident response and information sharing.
-
Create strong passwords that used effectively and changed regularly.
-
Be smart about how and where you surf.
-
Never be complacent about maintaining your privacy online.
-
All of the above
D
Correct answer
Explanation
All the listed options, including strong password management, cautious browsing habits, and maintaining privacy awareness, are fundamental best practices for personal cyber security.