Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

What is the term used to describe a cybersecurity incident that has a significant impact on the operations of an energy system?

  1. Cybersecurity event

  2. Cybersecurity incident

  3. Cybersecurity breach

  4. Cybersecurity attack
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Cybersecurity incident is the term used to describe a cybersecurity event that has a significant impact on the operations of an energy system.

Multiple choice

Which of the following is a common type of cybersecurity incident that can affect energy systems?

  1. Malware infection

  2. Phishing attack

  3. DDoS attack

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Malware infection, phishing attack, and DDoS attack are all common types of cybersecurity incidents that can affect energy systems.

Multiple choice

Which of the following is a key step in the cybersecurity incident response process?

  1. Containing the incident

  2. Eradicating the incident

  3. Recovering from the incident

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Containing the incident, eradicating the incident, and recovering from the incident are all key steps in the cybersecurity incident response process.

Multiple choice

Which of the following is NOT a common type of cyber attack?

  1. Malware

  2. Phishing

  3. Distributed Denial of Service (DDoS)

  4. Spam
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Spam is unsolicited electronic communication, typically in the form of email, but not considered a cyber attack.

Multiple choice

Which of the following is NOT a component of the CIA triad in information security?

  1. Confidentiality

  2. Integrity

  3. Availability

  4. Non-repudiation
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Non-repudiation is not part of the CIA triad, which focuses on confidentiality, integrity, and availability.

Multiple choice

What is the purpose of a firewall in cybersecurity?

  1. To block unauthorized access to a network

  2. To detect and prevent malware

  3. To encrypt data

  4. To back up data
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A firewall is a network security device that monitors and controls incoming and outgoing network traffic, blocking unauthorized access.

Multiple choice

Which of the following is NOT a best practice for creating strong passwords?

  1. Use a combination of upper and lowercase letters

  2. Include numbers and symbols

  3. Make it easy to remember

  4. Use the same password for multiple accounts
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Reusing passwords across multiple accounts compromises security, as a breach in one account can lead to access to others.

Multiple choice

Which of the following is NOT a common type of data breach?

  1. Phishing

  2. Malware

  3. SQL injection

  4. Buffer overflow
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Phishing is a type of cyber attack, not a data breach.

Multiple choice

Which of the following is NOT a common type of data protection regulation?

  1. General Data Protection Regulation (GDPR)

  2. California Consumer Privacy Act (CCPA)

  3. Health Insurance Portability and Accountability Act (HIPAA)

  4. Payment Card Industry Data Security Standard (PCI DSS)
Reveal answer Fill a bubble to check yourself
Correct answer
Explanation

PCI DSS is a data security standard, not a data protection regulation.

Multiple choice

Which of the following is NOT a common type of data protection technology?

  1. Encryption

  2. Tokenization

  3. Data masking

  4. Data leakage prevention (DLP)
Reveal answer Fill a bubble to check yourself
Correct answer
Explanation

DLP is a data security technology, not a data protection technology.

Multiple choice

What are the two main types of public key cryptography algorithms?

  1. RSA and Diffie-Hellman

  2. AES and DES

  3. ECC and DSA

  4. SHA-1 and MD5
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

RSA and Diffie-Hellman are the two main types of public key cryptography algorithms. RSA is used for encryption and decryption, while Diffie-Hellman is used for key exchange.

Multiple choice

How does RSA work?

  1. It uses a public key and a private key to encrypt and decrypt messages.

  2. It uses a shared secret key to encrypt and decrypt messages.

  3. It uses a one-way function to encrypt messages.

  4. It uses a random number generator to encrypt messages.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

RSA uses a public key and a private key to encrypt and decrypt messages. The public key is used to encrypt messages, and the private key is used to decrypt messages.

Multiple choice

How does Diffie-Hellman work?

  1. It uses a public key and a private key to encrypt and decrypt messages.

  2. It uses a shared secret key to encrypt and decrypt messages.

  3. It uses a one-way function to encrypt messages.

  4. It uses a random number generator to encrypt messages.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Diffie-Hellman uses a shared secret key to encrypt and decrypt messages. The shared secret key is generated by two parties using a public key exchange protocol.

Multiple choice

What is a digital signature?

  1. A mathematical algorithm used to verify the authenticity of a message.

  2. A unique identifier for a digital document.

  3. A method for encrypting messages.

  4. A way to compress data.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A digital signature is a mathematical algorithm used to verify the authenticity of a message. It allows the recipient of a message to verify that the message was sent by the claimed sender and that the message has not been tampered with.

Multiple choice

What is a certificate authority?

  1. A trusted third party that issues digital certificates.

  2. A software program that generates public and private keys.

  3. A type of encryption algorithm.

  4. A method for storing digital signatures.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A certificate authority is a trusted third party that issues digital certificates. Digital certificates are used to verify the identity of a website or an individual.