Computer Knowledge · General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice technology security

Identify the Name of the security risk in the below scenario : Malicious script echoed back into HTML returned from a trusted site, and runs under trusted Context

  1. Cross Site scripting

  2. SQL Injection

  3. Session Fixation

  4. Cross Site Request Forgery
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This scenario describes Cross-Site Scripting (XSS), where malicious script is injected into a trusted site's output and executed in a user's browser under the trusted site's context. SQL Injection involves database manipulation, Session Fixation involves session hijacking, and CSRF involves forced actions.

Multiple choice technology security

Authenticating a user without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

  1. Phishing

  2. Injection flaws

  3. Session Fixation

  4. Http Response splitting attack
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Session Fixation attacks occur when an attacker sets a user's session ID before authentication, then uses that known session after the user logs in. Phishing and injection are different attack vectors.

Multiple choice technology security

This attack significantly degrades service quality experienced by legitimate users. It introduces large response delays, excessive losses, and service interruptions, resulting in direct impact on availability.

  1. Eavesdropping attack

  2. Path traversal attack

  3. URL Tampering attack

  4. Denial Of Service attack
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A Denial of Service (DoS) attack aims to make a service unavailable by overwhelming it with traffic or exploiting vulnerabilities, causing delays, losses, and interruptions. This directly impacts availability as described. Eavesdropping, path traversal, and URL tampering focus on data theft or unauthorized access rather than service degradation.

Multiple choice technology security

This attack uses malicious code masqueraded as a trusted application. The malicious code can be injected on benign applications, masqueraded in e-mail links, or sometimes hidden in JavaScript pages to make furtive attacks against vulnerable internet Browsers.

  1. Trojan horse

  2. Spyware

  3. Man in the middle attack

  4. HTTP Request Smuggling
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A Trojan horse is malicious code disguised as legitimate software - it can be injected into benign applications, delivered via email links, or hidden in JavaScript for covert attacks. Spyware monitors activity without masquerading, MITM intercepts communications, and HTTP smuggling exploits request parsing vulnerabilities.

Multiple choice technology security

This is a network layer attack consisting of capturing packets from the network transmitted by others' computers and reading the data content in search of sensitive information like passwords, session tokens, or any kind of confidential information.

  1. Network Eavesdropping

  2. Man in the Middle

  3. Page Hijacking

  4. Path Manipulation
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Network eavesdropping (also called sniffing) involves capturing packets from the network to read sensitive data like passwords and tokens. MITM is an active attack that intercepts and potentially modifies communications. Page hijacking and path manipulation are different attack types.

Multiple choice technology platforms and products

If you automatically download pictures in e-mail messages you receive, why might you be sorry?

  1. Everything about downloading pictures in e-mail is negative.

  2. You tell the sender that your e-mail address is valid and so may get more junk e-mail.

  3. You might get a message that you don't have enough hard drive space to download the picture.

  4. None of these
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Automatically downloading images in emails can alert spammers that your email address is active and valid via tracking pixels, leading to an increase in junk email.

Multiple choice technology platforms and products

Which type of picture will Outlook block?

  1. A picture that is downloaded from a computer outside the e-mail system when you open the message.

  2. An attached photograph that appears inside a message

  3. An attached picture in an e-mail message from anyone not in your Contacts folder.

  4. None of these
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Outlook blocks external content in emails by default, including pictures downloaded from outside servers when you open a message. This security feature prevents spammers from tracking whether you've opened their emails. Attached pictures and images from known contacts are not blocked.

Multiple choice technology platforms and products

Which of the following might result if you added your own e-mail name to the Safe Recipients List?

  1. You might not receive any e-mail.

  2. You might receive a lot of junk e-mail.

  3. You might receive e-mail intended for someone else.

  4. None of these
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

The Safe Recipients List is designed to allow emails sent to distribution lists or groups you belong to. If you add yourself to this list, Outlook may treat more emails as safe, potentially allowing junk email that would otherwise be filtered.

Multiple choice technology platforms and products

You have received an e-mail message from someone you know with an unexpected file attached to it. What should you do?

  1. Make sure the sender actually sent you the file, being cautious not to open the attached file until you can trace its source.

  2. Go to antivirus Web sites that monitor possible virus attacks to see if this file is known to be bad.

  3. Do not open it.

  4. Both 1 & 2
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

For unexpected attachments, safety protocols recommend verifying with the sender and checking antivirus resources before opening, making both actions 1 and 2 correct and prudent.

Multiple choice technology databases

Which of the following DB2 command can be used to change bob’s password?

  1. CHANGE PASSWORD USER bob OLD bobpass NEW newpass

  2. CONNECT TO sample USER bob USING bobpass NEW newpass

  3. CONNECT TO sample USER bob USING bobpass NEW newpass CONFIRM newpass

  4. No DB2 command can be used to change the password of a user ID
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

In DB2, you can change a user's password during connection using the syntax: CONNECT TO database USER username USING old_password NEW new_password CONFIRM new_password. This verifies and updates the password in the operating system or external security manager.

Multiple choice technology databases

Which of the following privilege is required to create a new package in a database?

  1. CONTROL

  2. BIND

  3. EXECUTE

  4. BINDADD
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

BINDADD is the privilege required to create new packages in a DB2 database. CONTROL is a high-level privilege, BIND allows binding packages, and EXECUTE allows running them. BINDADD specifically grants the ability to create packages, which is different from BIND (re-binding existing packages).

Multiple choice technology databases

Which of the following system catalog view contains the grantee information of the REFERENCE privilege on a view?

  1. SYSCAT.VIEWS

  2. SYSCAT.TABLES

  3. SYSCAT.TABAUTH

  4. SYSCAT.REFERENCES
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

SYSCAT.TABAUTH contains grantee information for table and view privileges including REFERENCE. SYSCAT.VIEWS has view metadata, SYSCAT.TABLES has table metadata, and SYSCAT.REFERENCES doesn't exist as a separate catalog view. TABAUTH is the authorization catalog tracking who has what privileges.