Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

What is the purpose of a content delivery network (CDN) in e-commerce security?

  1. To improve website speed and performance

  2. To detect and prevent unauthorized access to a website or web application

  3. To encrypt data transmitted between a website and a user's browser

  4. To scan websites and web applications for vulnerabilities
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A content delivery network (CDN) is a system of distributed servers that deliver content to users based on their geographic location. This can help to improve website speed and performance, especially for users who are located far from the origin server. CDNs can also help to mitigate the impact of DDoS attacks by distributing traffic across multiple servers.

Multiple choice

What is the role of regular software updates in e-commerce security?

  1. To fix security vulnerabilities and improve software performance

  2. To improve website speed and performance

  3. To increase website traffic and sales

  4. To prevent unauthorized access to a website's content
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Regular software updates are essential for fixing security vulnerabilities and improving software performance. E-commerce businesses should ensure that they are running the latest versions of all software, including operating systems, web servers, and e-commerce platforms. This can help to reduce the risk of cyberattacks and improve the overall security of the e-commerce website.

Multiple choice

Which of the following is NOT a common data warehousing security measure?

  1. Access control

  2. Encryption

  3. Data masking

  4. Data profiling
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Data profiling is not a common data warehousing security measure. Data profiling is the process of analyzing data to understand its structure, content, and quality. Access control, encryption, and data masking are all common data warehousing security measures.

Multiple choice

Which of the following is a key security concern in IaaS?

  1. Data Leakage

  2. Network Infiltration

  3. DDoS Attacks

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

In IaaS, data leakage, network infiltration, and DDoS attacks are all key security concerns.

Multiple choice

Which of the following is a common attack vector in IaaS environments?

  1. Cross-site scripting (XSS)

  2. SQL injection

  3. Phishing

  4. Man-in-the-middle (MitM) attacks
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Man-in-the-middle (MitM) attacks are a common attack vector in IaaS environments, where an attacker intercepts communication between two parties and impersonates one of them.

Multiple choice

Which of the following is a type of security control that can be used to protect IaaS resources from unauthorized access?

  1. Firewall

  2. Intrusion detection system (IDS)

  3. Virtual private network (VPN)

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Firewalls, intrusion detection systems (IDSs), and virtual private networks (VPNs) are all types of security controls that can be used to protect IaaS resources from unauthorized access.

Multiple choice

Which of the following is a type of security assessment that can be used to identify vulnerabilities in an IaaS environment?

  1. Penetration testing

  2. Vulnerability scanning

  3. Risk assessment

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Penetration testing, vulnerability scanning, and risk assessment are all types of security assessments that can be used to identify vulnerabilities in an IaaS environment.

Multiple choice

Which of the following is a type of security control that can be used to protect IaaS resources from data leakage?

  1. Data loss prevention (DLP)

  2. Encryption

  3. Tokenization

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Data loss prevention (DLP), encryption, and tokenization are all types of security controls that can be used to protect IaaS resources from data leakage.

Multiple choice

Which of the following is a type of security assessment that can be used to evaluate the overall security posture of an IaaS environment?

  1. Security audit

  2. Risk assessment

  3. Compliance assessment

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Security audits, risk assessments, and compliance assessments are all types of security assessments that can be used to evaluate the overall security posture of an IaaS environment.

Multiple choice

Which of the following is a type of security control that can be used to protect IaaS resources from phishing attacks?

  1. User awareness training

  2. Email filtering

  3. Multi-factor authentication (MFA)

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

User awareness training, email filtering, and multi-factor authentication (MFA) are all types of security controls that can be used to protect IaaS resources from phishing attacks.

Multiple choice

Which of the following is a type of security assessment that can be used to identify misconfigurations in an IaaS environment?

  1. Configuration audit

  2. Vulnerability scanning

  3. Penetration testing

  4. All of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A configuration audit is a type of security assessment that can be used to identify misconfigurations in an IaaS environment.

Multiple choice

Which of the following is NOT a common mobile device security risk?

  1. Malware and viruses

  2. Phishing attacks

  3. Strong passwords

  4. Unsecured Wi-Fi networks
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Strong passwords are a security measure, not a risk.

Multiple choice

Which of the following is NOT a recommended best practice for securing mobile devices?

  1. Using strong and unique passwords or passcodes

  2. Enabling two-factor authentication

  3. Jailbreaking or rooting devices

  4. Installing security updates and patches regularly
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Jailbreaking or rooting devices compromises the security of the device and makes it more vulnerable to attacks.

Multiple choice

What is the most effective way to protect against phishing attacks on mobile devices?

  1. Using a strong antivirus software

  2. Being cautious when clicking on links in emails or text messages

  3. Enabling pop-up blockers

  4. Using a VPN
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Being cautious and verifying the authenticity of links before clicking is the most effective way to prevent phishing attacks.

Multiple choice

Which of the following is NOT a recommended practice for securing mobile devices when using public Wi-Fi networks?

  1. Using a VPN

  2. Disabling automatic Wi-Fi connections

  3. Using strong passwords for Wi-Fi networks

  4. Accessing sensitive information over public Wi-Fi
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Accessing sensitive information over public Wi-Fi is not recommended due to the risk of eavesdropping and interception.