Computer Knowledge · General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

What is footprinting?

  1. Measuring the shoe size of an ethical hacker

  2. Accumulation of data by gathering information on a target

  3. Scanning a target network to detect operating system types

  4. Mapping the physical layout of a target’s network
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Footprinting is the initial phase of ethical hacking where an attacker gathers as much information as possible about a target system or network to identify potential entry points.

Multiple choice

What is the next step to be performed after footprinting?

  1. Scanning

  2. Enumeration

  3. System hacking

  4. Active information gathering
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In the standard ethical hacking methodology, the phase immediately following footprinting is scanning, where the gathered information is used to identify active services and vulnerabilities.

Multiple choice

The security, functionality, and ease of use triangle illustrates which concept?

  1. As security increases, functionality and ease of use increase.

  2. As security decreases, functionality and ease of use increase.

  3. As security decreases, functionality and ease of use decrease.

  4. Security does not affect functionality and ease of use.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

The security triangle suggests that as you decrease security, systems often become easier to use and more functional, as restrictive security measures are removed.

Multiple choice

The five security associations to configure in ISAKMP policy configuration mode?

  1. Hash, Authentication, Group, Lifetime, Encryption

  2. Hash, Authentication, GRE, Lifetime, ESP

  3. Hash, Authorization, Group, Lifetime, Encryption

  4. Hash, Authorization, Group, Lifetime, Encryption
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

ISAKMP (Internet Security Association and Key Management Protocol) policies require five parameters: Encryption, Hash, Authentication, Group (Diffie-Hellman), and Lifetime.

Multiple choice

What is defined by an ISAKMP policy?

  1. A security associations that IPsec peers are willing to use

  2. A preshared keys that will be exchanged between IPsec peers

  3. access lists that identify interesting traffic

  4. the IP addresses of IPsec peers
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

An ISAKMP policy defines the security parameters (encryption, hash, authentication method, Diffie-Hellman group, and lifetime) that two peers agree to use to establish a secure management tunnel (Phase 1).

Multiple choice

What are two reasons for establishing VPNs

  1. Enables transmission of sensitive data via encrypted connections.

  2. Allow database access from application servers

  3. Setting up DMZ networks

  4. Prevents unauthorized people from eavesdropping on traffic.
Reveal answer Fill a bubble to check yourself
A,D Correct answer
Explanation

VPNs are primarily used to provide secure, encrypted communication (A) and to protect traffic from unauthorized interception or eavesdropping (D).

Multiple choice organization of commerce and management management by objectives (mbo) and management by exception (mbe) meaning and definition of mbo meaning and definition of mbe controlling

When would "auditing around the computer" be appropriate?

  1. When controls over the computer system are strong.

  2. When controls over the computer system are non-existent.

  3. When controls over the computer system are adequate.

  4. It is never appropriate to audit around the computer.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Auditing around the computer is one of the methods of evaluating a client's computer controls. It picks source documents randomly and verifies the outputs with the inputs. This method can only exist when controls over the computer system are non-existent.