Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

What is the legal term for the unauthorized use of a person's personal information for commercial purposes?

  1. Data mining

  2. Data harvesting

  3. Data scraping

  4. Dataveillance
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Data mining is the legal term for the unauthorized use of a person's personal information for commercial purposes.

Multiple choice

What is the legal term for the unauthorized use of a person's personal information to make a decision about them?

  1. Profiling

  2. Scoring

  3. Targeting

  4. Dataveillance
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Profiling is the legal term for the unauthorized use of a person's personal information to make a decision about them.

Multiple choice

What is the best way to educate employees about cybersecurity?

  1. Provide them with training materials

  2. Hold regular security awareness training sessions

  3. Make them sign a security policy

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The best way to educate employees about cybersecurity is to provide them with training materials, hold regular security awareness training sessions, and make them sign a security policy.

Multiple choice

Which of the following is NOT a common type of security control?

  1. Firewalls

  2. Intrusion detection systems

  3. Antivirus software

  4. Penetration testing
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Penetration testing is not a common type of security control. It is a security assessment technique that is used to identify vulnerabilities in a system.

Multiple choice

What is the best way to protect against zero-day attacks?

  1. Use a firewall

  2. Use an intrusion detection system

  3. Use antivirus software

  4. Keep software up to date
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The best way to protect against zero-day attacks is to keep software up to date. This is because zero-day attacks exploit vulnerabilities in software that have not yet been patched.

Multiple choice

What is the difference between a denial-of-service attack and a distributed denial-of-service attack?

  1. A denial-of-service attack is an attack that targets a single system, while a distributed denial-of-service attack is an attack that targets multiple systems

  2. A denial-of-service attack is an attack that targets a network, while a distributed denial-of-service attack is an attack that targets a system

  3. A denial-of-service attack is an attack that targets a service, while a distributed denial-of-service attack is an attack that targets a network

  4. A denial-of-service attack is an attack that targets a system, while a distributed denial-of-service attack is an attack that targets a service
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A denial-of-service attack is an attack that targets a single system, while a distributed denial-of-service attack is an attack that targets multiple systems. A denial-of-service attack is typically carried out by a single attacker, while a distributed denial-of-service attack is typically carried out by a group of attackers.

Multiple choice

What is the best way to protect against phishing attacks?

  1. Use a firewall

  2. Use an intrusion detection system

  3. Use antivirus software

  4. Educate employees about phishing
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The best way to protect against phishing attacks is to educate employees about phishing. This is because phishing attacks rely on tricking employees into clicking on malicious links or opening malicious attachments.

Multiple choice

What is the best way to protect against ransomware attacks?

  1. Use a firewall

  2. Use an intrusion detection system

  3. Use antivirus software

  4. Back up data regularly
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The best way to protect against ransomware attacks is to back up data regularly. This is because ransomware attacks encrypt data, making it inaccessible to the victim. If the victim has a backup of their data, they can restore their data after the ransomware attack.

Multiple choice

Which of the following is NOT a common method for detecting security incidents?

  1. Security information and event management (SIEM) systems

  2. Intrusion detection systems (IDS)

  3. Vulnerability scanners

  4. Penetration testing
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Penetration testing is not a common method for detecting security incidents. It is a proactive measure that is used to identify vulnerabilities in a system before they can be exploited.

Multiple choice

Which of the following is NOT a common method for eradicating security incidents?

  1. Antivirus software

  2. Malware removal tools

  3. Patch management

  4. Vulnerability assessment
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Vulnerability assessment is not a common method for eradicating security incidents. It is a proactive measure that is used to identify vulnerabilities in a system before they can be exploited.

Multiple choice

Which of the following is NOT a common type of security incident?

  1. Malware attacks

  2. Phishing attacks

  3. Denial-of-service attacks

  4. Vulnerability assessments
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Vulnerability assessments are not a common type of security incident. They are a proactive measure that is used to identify vulnerabilities in a system before they can be exploited.

Multiple choice

Which of the following is NOT a common component of an intrusion detection system (IDS)?

  1. Sensors

  2. Console

  3. Reporting system

  4. Vulnerability scanner
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A vulnerability scanner is not a common component of an intrusion detection system (IDS). It is a proactive measure that is used to identify vulnerabilities in a system before they can be exploited.

Multiple choice

Which of the following is NOT a common type of vulnerability assessment?

  1. Network vulnerability assessment

  2. Host vulnerability assessment

  3. Application vulnerability assessment

  4. Penetration testing
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Penetration testing is not a common type of vulnerability assessment. It is a proactive measure that is used to identify vulnerabilities in a system before they can be exploited.

Multiple choice

Which of the following is NOT a common method for containing an incident?

  1. Isolating affected systems

  2. Disabling user accounts

  3. Patching vulnerable systems

  4. Rolling back to a previous system state
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Patching vulnerable systems is not a common method for containing an incident. It is a preventive measure that can be taken to reduce the risk of an incident occurring in the first place.

Multiple choice

Which of the following is NOT a common type of incident response tool?

  1. Security information and event management (SIEM) system

  2. Vulnerability scanner

  3. Incident response platform

  4. Penetration testing tool
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Penetration testing tools are not a common type of incident response tool. They are used to identify vulnerabilities in an organization's systems and networks.