Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which hashing algorithm is widely used for password storage?

  1. MD5

  2. SHA-1

  3. SHA-256

  4. SHA-512
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

SHA-256 is commonly employed for password storage due to its strong cryptographic properties and resistance to collision attacks.

Multiple choice

What is the purpose of a salt in password hashing?

  1. To increase the length of the password

  2. To make the password more complex

  3. To prevent rainbow table attacks

  4. To generate a unique hash value
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Salting is a technique used in password hashing to prevent precomputed attacks like rainbow tables by adding a random value to the password before hashing, making it more difficult to crack.

Multiple choice

Which hashing algorithm is suitable for generating message digests?

  1. MD5

  2. SHA-1

  3. SHA-256

  4. SHA-512
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

SHA-256 is commonly used for generating message digests due to its strong cryptographic properties and resistance to collision attacks, making it suitable for ensuring data integrity and authenticity.

Multiple choice

Which hashing algorithm is suitable for generating cryptographic hashes?

  1. MD5

  2. SHA-1

  3. SHA-256

  4. SHA-512
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

SHA-512 is widely used for generating cryptographic hashes due to its high level of security and resistance to collision attacks, making it suitable for applications requiring strong cryptographic protection.

Multiple choice

Which of the following is a best practice for data security in oceanographic data management?

  1. Implementing access control mechanisms to restrict unauthorized access to data

  2. Encrypting sensitive data to protect it from unauthorized access

  3. Regularly backing up data to protect against data loss

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Best practices for data security in oceanographic data management include implementing access control mechanisms, encrypting sensitive data, and regularly backing up data.

Multiple choice

Which of the following is NOT a common type of cyber threat to critical infrastructure?

  1. Malware

  2. Phishing

  3. Denial-of-service attack

  4. Physical attack
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Physical attacks involve physical damage or manipulation of critical infrastructure components, while malware, phishing, and denial-of-service attacks are all cyber threats.

Multiple choice

What is the primary goal of a cyber attack on critical infrastructure?

  1. To steal sensitive data

  2. To disrupt operations

  3. To gain financial profit

  4. To cause physical damage
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Cyber attacks on critical infrastructure typically aim to disrupt operations, causing widespread disruption and economic loss.

Multiple choice

Which of the following is a common vulnerability in critical infrastructure systems?

  1. Unpatched software

  2. Weak passwords

  3. Lack of network segmentation

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Unpatched software, weak passwords, and lack of network segmentation are all common vulnerabilities that can be exploited by cyber attackers to gain access to critical infrastructure systems.

Multiple choice

Which of the following is a common mitigation strategy for cyber threats to critical infrastructure?

  1. Implementing strong cybersecurity policies and procedures

  2. Regularly updating software and firmware

  3. Using multi-factor authentication

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Implementing strong cybersecurity policies and procedures, regularly updating software and firmware, and using multi-factor authentication are all common mitigation strategies for cyber threats to critical infrastructure.

Multiple choice

What is the role of threat intelligence in cybersecurity for critical infrastructure?

  1. To identify and analyze potential threats

  2. To develop mitigation strategies

  3. To improve incident response capabilities

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Threat intelligence plays a crucial role in cybersecurity for critical infrastructure by identifying and analyzing potential threats, developing mitigation strategies, and improving incident response capabilities.

Multiple choice

Which of the following is a key component of a comprehensive cybersecurity program for critical infrastructure?

  1. Risk assessment

  2. Vulnerability management

  3. Incident response planning

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Risk assessment, vulnerability management, and incident response planning are all key components of a comprehensive cybersecurity program for critical infrastructure.

Multiple choice

Which of the following is a recommended practice for securing critical infrastructure systems against cyber threats?

  1. Implementing network segmentation and firewalls

  2. Using strong encryption for data protection

  3. Regularly monitoring and logging system activity

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Implementing network segmentation and firewalls, using strong encryption for data protection, and regularly monitoring and logging system activity are all recommended practices for securing critical infrastructure systems against cyber threats.

Multiple choice

Which of the following is a key component of a cybersecurity risk assessment for critical infrastructure?

  1. Identifying critical assets and their vulnerabilities

  2. Assessing the likelihood and impact of potential threats

  3. Evaluating existing cybersecurity controls and measures

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Identifying critical assets and their vulnerabilities, assessing the likelihood and impact of potential threats, and evaluating existing cybersecurity controls and measures are all key components of a cybersecurity risk assessment for critical infrastructure.

Multiple choice

What is the main concern regarding the cybersecurity of autonomous vehicles?

  1. Hackers gaining control of the vehicle's systems

  2. Unauthorized access to sensitive data

  3. Malware attacks disrupting the vehicle's operation

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Autonomous vehicles face cybersecurity concerns related to hacking, unauthorized data access, and malware attacks, which could compromise the vehicle's safety and functionality.

Multiple choice

Which of the following is a key consideration in designing a system's security architecture?

  1. Confidentiality

  2. Integrity

  3. Availability

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Confidentiality, integrity, and availability (CIA) are fundamental principles of security architecture, aiming to protect sensitive information, ensure data accuracy and consistency, and maintain system accessibility and functionality.