Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is a good practice for protecting mobile devices from physical theft?

  1. Using a strong screen lock

  2. Enabling remote tracking and wiping

  3. Backing up data regularly

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All of the mentioned practices are important for protecting mobile devices from physical theft. Using a strong screen lock makes it more difficult for unauthorized individuals to access the device. Enabling remote tracking and wiping allows you to locate and erase the data on your device if it is lost or stolen. Backing up data regularly ensures that you have a copy of your data in case your device is lost, stolen, or damaged.

Multiple choice

Which of the following is a good practice for securing mobile devices when using public Wi-Fi networks?

  1. Using a virtual private network (VPN)

  2. Avoiding websites and apps that require sensitive information

  3. Disabling automatic Wi-Fi connections

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All of the mentioned practices are important for securing mobile devices when using public Wi-Fi networks. Using a VPN encrypts your internet traffic and protects your privacy. Avoiding websites and apps that require sensitive information reduces the risk of exposing your personal data. Disabling automatic Wi-Fi connections prevents your device from automatically connecting to unsecured Wi-Fi networks.

Multiple choice

Which of the following is a good practice for securing mobile devices when using Bluetooth?

  1. Pairing only with trusted devices

  2. Disabling Bluetooth when not in use

  3. Keeping Bluetooth software up to date

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All of the mentioned practices are important for securing mobile devices when using Bluetooth. Pairing only with trusted devices reduces the risk of connecting to malicious devices. Disabling Bluetooth when not in use prevents unauthorized devices from connecting to your device. Keeping Bluetooth software up to date ensures that you have the latest security patches and features.

Multiple choice

Which of the following is a good practice for protecting mobile devices from phishing attacks?

  1. Being cautious of unsolicited emails and text messages

  2. Avoiding clicking on links or opening attachments from unknown senders

  3. Using a strong spam filter

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All of the mentioned practices are important for protecting mobile devices from phishing attacks. Being cautious of unsolicited emails and text messages, avoiding clicking on links or opening attachments from unknown senders, and using a strong spam filter can help reduce the risk of falling victim to a phishing attack.

Multiple choice

What is the concept of 'data security' in data ethics?

  1. Protecting data from unauthorized access, use, or disclosure

  2. Storing data in an insecure manner

  3. Sharing data with third parties without encryption

  4. Using data for purposes other than originally intended
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Data security is a fundamental aspect of data ethics, involving the implementation of measures to protect data from unauthorized access, use, or disclosure, ensuring the confidentiality and integrity of data.

Multiple choice

Which of the following is a symmetric encryption algorithm?

  1. AES

  2. RSA

  3. ECC

  4. SHA-256
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

AES (Advanced Encryption Standard) is a symmetric encryption algorithm, meaning that it uses the same key for both encryption and decryption.

Multiple choice

What is the primary goal of data masking?

  1. To encrypt data

  2. To anonymize data

  3. To compress data

  4. To backup data
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Data masking is a technique used to protect sensitive data by replacing it with fictitious or synthetic data that maintains the same statistical properties as the original data.

Multiple choice

Which of the following is a common type of security threat?

  1. Phishing

  2. Malware

  3. DDoS attack

  4. SQL injection
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Phishing is a type of security threat in which attackers attempt to trick users into revealing sensitive information, such as passwords or credit card numbers, by disguising themselves as legitimate organizations.

Multiple choice

What is the purpose of a firewall?

  1. To block unauthorized access to a network

  2. To encrypt data

  3. To detect and respond to security threats

  4. To backup data
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A firewall is a network security device that monitors and controls incoming and outgoing network traffic based on predetermined security rules.

Multiple choice

Which of the following is a best practice for creating strong passwords?

  1. Use common words or phrases

  2. Include personal information

  3. Use the same password for multiple accounts

  4. Make passwords at least 12 characters long and include a mix of upper and lower case letters, numbers, and symbols
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Strong passwords should be at least 12 characters long and include a mix of upper and lower case letters, numbers, and symbols. Avoid using common words or phrases, personal information, or the same password for multiple accounts.

Multiple choice

Which of the following is a type of cryptographic attack?

  1. Brute-force attack

  2. Man-in-the-middle attack

  3. Phishing attack

  4. DDoS attack
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A brute-force attack is a type of cryptographic attack in which an attacker tries all possible combinations of keys until they find the correct one.

Multiple choice

What is the term "Phishing" used to describe?

  1. Online Scams

  2. Identity Theft

  3. Malware Attacks

  4. Spam Emails
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Phishing involves sending fraudulent emails or messages to trick people into revealing personal information or financial details.

Multiple choice

What is the term "Cybersecurity" used to describe?

  1. Online Safety

  2. Data Protection

  3. Network Security

  4. Information Security
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Cybersecurity involves protecting information and systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

Multiple choice

Which of the following is NOT a common type of cyberattack in e-commerce?

  1. Phishing

  2. Malware

  3. SQL injection

  4. Denial-of-service (DoS) attack
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

SQL injection is a type of cyberattack that targets websites and web applications that use SQL databases. It involves injecting malicious SQL code into a website or web application to gain unauthorized access to sensitive data or to manipulate the data in the database.

Multiple choice

What is the purpose of a secure socket layer (SSL) certificate in e-commerce?

  1. To encrypt data transmitted between a website and a user's browser

  2. To increase website speed and performance

  3. To improve website ranking in search engine results pages (SERPs)

  4. To prevent unauthorized access to a website's content
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

An SSL certificate is used to establish a secure connection between a website and a user's browser. It encrypts data transmitted between the two parties, such as personal information, credit card numbers, and transaction details, to protect it from eavesdropping and interception.