Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

What is the term for a DDoS attack that uses multiple compromised devices to launch the attack?

  1. Botnet DDoS attack

  2. SYN flood attack

  3. UDP flood attack

  4. HTTP flood attack
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A botnet DDoS attack uses multiple compromised devices, known as bots, to launch a DDoS attack. These bots are controlled by a central command and control server and can be used to generate a large amount of traffic to overwhelm the target.

Multiple choice

Which of the following is NOT a common impact of a DDoS attack?

  1. Loss of revenue

  2. Damage to reputation

  3. Increased bandwidth costs

  4. Improved website performance
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Improved website performance is not a common impact of a DDoS attack. DDoS attacks typically result in decreased website performance or even complete unavailability.

Multiple choice

Which of the following is NOT a common defense mechanism against DDoS attacks at the network layer?

  1. Rate limiting

  2. Blacklisting malicious IP addresses

  3. Using a firewall

  4. Implementing access control lists (ACLs)
Reveal answer Fill a bubble to check yourself
Correct answer
Explanation

Implementing ACLs is not a common defense mechanism against DDoS attacks at the network layer. ACLs are used to control access to network resources, but they do not provide protection against DDoS attacks.

Multiple choice

What is the term for a DDoS attack that targets a specific application or service by exploiting vulnerabilities in the application code?

  1. Application-layer DDoS attack

  2. Protocol-layer DDoS attack

  3. Network-layer DDoS attack

  4. Transport-layer DDoS attack
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

An application-layer DDoS attack targets a specific application or service by exploiting vulnerabilities in the application code. This type of attack can cause the application to crash or become unavailable.

Multiple choice

Which of the following is NOT a common defense mechanism against DDoS attacks at the application layer?

  1. Using a web application firewall (WAF)

  2. Implementing input validation

  3. Using a content delivery network (CDN)

  4. Blacklisting malicious IP addresses
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Blacklisting malicious IP addresses is not a common defense mechanism against DDoS attacks at the application layer. Blacklisting is typically used to prevent access to specific IP addresses at the network layer.

Multiple choice

What is the term for a DDoS attack that uses a large number of compromised devices to launch the attack?

  1. Botnet DDoS attack

  2. SYN flood attack

  3. UDP flood attack

  4. HTTP flood attack
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A botnet DDoS attack uses a large number of compromised devices, known as bots, to launch a DDoS attack. These bots are controlled by a central command and control server and can be used to generate a large amount of traffic to overwhelm the target.

Multiple choice

Which of the following is NOT a common target of cyberterrorism?

  1. Government agencies

  2. Financial institutions

  3. Critical infrastructure

  4. Private individuals
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

While private individuals can be victims of cybercrime, they are not typically the target of cyberterrorism, which is focused on causing harm or disruption to governments, businesses, and other organizations.

Multiple choice

What is the term used to describe a type of cyberattack that involves taking control of a computer system and holding it for ransom?

  1. Phishing

  2. Malware

  3. Ransomware

  4. DDoS attack
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Ransomware is a type of cyberattack that involves taking control of a computer system and holding it for ransom, typically demanding payment in the form of cryptocurrency.

Multiple choice

Which of the following is NOT a common method used by cyberterrorists to carry out attacks?

  1. Hacking

  2. Phishing

  3. Social engineering

  4. Physical attacks
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

While cyberterrorists may use physical attacks as part of their operations, such as planting explosives or carrying out assassinations, these are not typically considered to be common methods of cyberterrorism.

Multiple choice

What is the term used to describe a type of cyberattack that involves flooding a website or server with traffic in order to make it inaccessible?

  1. Phishing

  2. Malware

  3. DDoS attack

  4. Ransomware
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

A DDoS attack (Distributed Denial of Service attack) involves flooding a website or server with traffic from multiple sources in order to make it inaccessible to legitimate users.

Multiple choice

Which of the following is NOT a potential consequence of cyberterrorism?

  1. Economic losses

  2. Loss of life

  3. Disruption of critical infrastructure

  4. Increased public awareness of cybersecurity risks
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

While cyberterrorism can lead to increased public awareness of cybersecurity risks, this is not typically considered to be a negative consequence.

Multiple choice

What is the term used to describe the use of cyberattacks to target and disrupt critical infrastructure, such as power grids, water systems, and transportation networks?

  1. Cyberwarfare

  2. Cyberterrorism

  3. Cybercrime

  4. Cyberespionage
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Cyberwarfare involves the use of cyberattacks to target and disrupt critical infrastructure, with the intent of causing widespread harm and disruption.

Multiple choice

Which of the following is NOT a common motivation for cyberterrorism?

  1. Political extremism

  2. Financial gain

  3. Personal revenge

  4. National security
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

National security is not typically a motivation for cyberterrorism, as cyberattacks are more commonly carried out by non-state actors with political or financial motivations.

Multiple choice

What is the term used to describe the use of cyberattacks to steal sensitive information, such as trade secrets, financial data, or personal information?

  1. Cyberwarfare

  2. Cyberterrorism

  3. Cybercrime

  4. Cyberespionage
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Cyberespionage involves the use of cyberattacks to steal sensitive information, such as trade secrets, financial data, or personal information, for economic or political advantage.

Multiple choice

Which of the following is NOT a common target of cyberterrorism?

  1. Government agencies

  2. Financial institutions

  3. Critical infrastructure

  4. Small businesses
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Small businesses are not typically a common target of cyberterrorism, as they are less likely to have the resources and expertise to defend against sophisticated cyberattacks.