Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

What is the process of encrypting and decrypting data called?

  1. Cryptography

  2. Steganography

  3. Hashing

  4. Digital signature
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Cryptography is the practice of using mathematical algorithms to encrypt and decrypt data, ensuring its confidentiality and integrity.

Multiple choice

Which of the following is a common defense mechanism against cyberattacks?

  1. Firewalls

  2. Intrusion detection systems (IDS)

  3. Antivirus software

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Firewalls, intrusion detection systems, and antivirus software are all commonly used defense mechanisms to protect systems and networks from cyberattacks.

Multiple choice

What is the term for an unauthorized attempt to access or use a computer system or network?

  1. Hacking

  2. Cracking

  3. Phishing

  4. Malware
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Hacking refers to the unauthorized attempt to access or use a computer system or network, often with malicious intent.

Multiple choice

Which of the following is a type of malware that encrypts files and demands a ransom payment to decrypt them?

  1. Virus

  2. Trojan horse

  3. Ransomware

  4. Worm
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Ransomware is a type of malware that encrypts files on a victim's computer and demands a ransom payment to decrypt them.

Multiple choice

What is the term for a network of computers infected with malware and controlled by a single entity?

  1. Botnet

  2. Zombie network

  3. DDoS network

  4. Malware network
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A botnet is a network of computers infected with malware and controlled by a single entity, often used to launch cyberattacks or spread malware.

Multiple choice

Which of the following is a common method used to protect sensitive data during transmission?

  1. Encryption

  2. Hashing

  3. Steganography

  4. Digital signature
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Encryption is a common method used to protect sensitive data during transmission by converting it into an unreadable format.

Multiple choice

What is the term for a security measure that involves restricting access to certain resources or information based on specific criteria?

  1. Authentication

  2. Authorization

  3. Encryption

  4. Non-repudiation
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Authorization is a security measure that involves restricting access to certain resources or information based on specific criteria, such as user roles or permissions.

Multiple choice

Which of the following is a type of cyberattack that involves flooding a target system or network with excessive traffic to disrupt its normal operation?

  1. Phishing

  2. Malware

  3. Denial-of-service (DoS)

  4. Man-in-the-middle (MitM)
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

A denial-of-service (DoS) attack involves flooding a target system or network with excessive traffic to disrupt its normal operation.

Multiple choice

What is the term for a security measure that involves monitoring and analyzing system logs and events to detect suspicious activities?

  1. Intrusion detection system (IDS)

  2. Firewall

  3. Antivirus software

  4. Security information and event management (SIEM)
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

An intrusion detection system (IDS) is a security measure that involves monitoring and analyzing system logs and events to detect suspicious activities that may indicate a security breach.

Multiple choice

Which of the following is a common type of security monitoring tool?

  1. Intrusion Detection System (IDS)

  2. Security Information and Event Management (SIEM)

  3. Vulnerability Scanner

  4. Penetration Testing Tool
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

SIEM is a widely used security monitoring tool that collects, aggregates, and analyzes security-related events from various sources to provide a comprehensive view of an organization's security posture.

Multiple choice

Which of the following is a common compliance auditing standard for cybersecurity?

  1. ISO 27001

  2. NIST Cybersecurity Framework

  3. PCI DSS

  4. HIPAA
Reveal answer Fill a bubble to check yourself
Correct answer
Explanation

ISO 27001, NIST Cybersecurity Framework, PCI DSS, and HIPAA are widely recognized compliance auditing standards for cybersecurity.

Multiple choice

Which of the following is a common type of cybersecurity audit?

  1. Internal Audit

  2. External Audit

  3. Compliance Audit

  4. Risk Assessment
Reveal answer Fill a bubble to check yourself
Correct answer
Explanation

Internal Audit, External Audit, Compliance Audit, and Risk Assessment are common types of cybersecurity audits.

Multiple choice

Which of the following is a common type of vulnerability assessment tool?

  1. Network Scanner

  2. Web Application Scanner

  3. Host-Based Scanner

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Network Scanner, Web Application Scanner, and Host-Based Scanner are common types of vulnerability assessment tools.

Multiple choice

Which of the following is a common type of security monitoring tool?

  1. Log Management System

  2. Security Information and Event Management (SIEM)

  3. Intrusion Detection System (IDS)

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Log Management System, Security Information and Event Management (SIEM), and Intrusion Detection System (IDS) are common types of security monitoring tools.

Multiple choice

Which of the following is a common type of cybersecurity audit?

  1. Financial Audit

  2. Operational Audit

  3. IT Audit

  4. All of the above
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

IT Audit is a common type of cybersecurity audit that focuses on assessing the security of an organization's information technology systems and infrastructure.