Computer Knowledge ยท General Awareness
Information Security
4,634 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
Which of the following is a key element of a cybersecurity incident response plan for energy systems?
-
Identifying roles and responsibilities
-
Establishing communication channels
-
Developing procedures for incident containment and eradication
-
All of the above
D
Correct answer
Explanation
Identifying roles and responsibilities, establishing communication channels, and developing procedures for incident containment and eradication are all key elements of a cybersecurity incident response plan for energy systems.
Which of the following is NOT a common type of cyber attack?
-
Malware
-
Phishing
-
Distributed Denial of Service (DDoS)
-
Spam
D
Correct answer
Explanation
Spam is unsolicited electronic communication, typically in the form of email, but not considered a cyber attack.
Which of the following is NOT a component of the CIA triad in information security?
-
Confidentiality
-
Integrity
-
Availability
-
Non-repudiation
D
Correct answer
Explanation
Non-repudiation is not part of the CIA triad, which focuses on confidentiality, integrity, and availability.
What is the purpose of a firewall in cybersecurity?
-
To block unauthorized access to a network
-
To detect and prevent malware
-
To encrypt data
-
To back up data
A
Correct answer
Explanation
A firewall is a network security device that monitors and controls incoming and outgoing network traffic, blocking unauthorized access.
Which of the following is NOT a best practice for creating strong passwords?
-
Use a combination of upper and lowercase letters
-
Include numbers and symbols
-
Make it easy to remember
-
Use the same password for multiple accounts
D
Correct answer
Explanation
Reusing passwords across multiple accounts compromises security, as a breach in one account can lead to access to others.
Which of the following is NOT a common type of data protection regulation?
-
General Data Protection Regulation (GDPR)
-
California Consumer Privacy Act (CCPA)
-
Health Insurance Portability and Accountability Act (HIPAA)
-
Payment Card Industry Data Security Standard (PCI DSS)
Correct answer
Explanation
PCI DSS is a data security standard, not a data protection regulation.
What are the two main types of public key cryptography algorithms?
-
RSA and Diffie-Hellman
-
AES and DES
-
ECC and DSA
-
SHA-1 and MD5
A
Correct answer
Explanation
RSA and Diffie-Hellman are the two main types of public key cryptography algorithms. RSA is used for encryption and decryption, while Diffie-Hellman is used for key exchange.
-
It uses a public key and a private key to encrypt and decrypt messages.
-
It uses a shared secret key to encrypt and decrypt messages.
-
It uses a one-way function to encrypt messages.
-
It uses a random number generator to encrypt messages.
A
Correct answer
Explanation
RSA uses a public key and a private key to encrypt and decrypt messages. The public key is used to encrypt messages, and the private key is used to decrypt messages.
How does Diffie-Hellman work?
-
It uses a public key and a private key to encrypt and decrypt messages.
-
It uses a shared secret key to encrypt and decrypt messages.
-
It uses a one-way function to encrypt messages.
-
It uses a random number generator to encrypt messages.
B
Correct answer
Explanation
Diffie-Hellman uses a shared secret key to encrypt and decrypt messages. The shared secret key is generated by two parties using a public key exchange protocol.
What is a digital signature?
-
A mathematical algorithm used to verify the authenticity of a message.
-
A unique identifier for a digital document.
-
A method for encrypting messages.
-
A way to compress data.
A
Correct answer
Explanation
A digital signature is a mathematical algorithm used to verify the authenticity of a message. It allows the recipient of a message to verify that the message was sent by the claimed sender and that the message has not been tampered with.
What is a certificate authority?
-
A trusted third party that issues digital certificates.
-
A software program that generates public and private keys.
-
A type of encryption algorithm.
-
A method for storing digital signatures.
A
Correct answer
Explanation
A certificate authority is a trusted third party that issues digital certificates. Digital certificates are used to verify the identity of a website or an individual.
What is the most common type of public key cryptography algorithm used today?
-
RSA
-
Diffie-Hellman
-
ECC
-
DSA
A
Correct answer
Explanation
RSA is the most common type of public key cryptography algorithm used today. It is used in a wide variety of applications, including secure communication, digital signatures, and electronic commerce.
What is the Diffie-Hellman key exchange protocol used for?
-
To securely exchange a secret key between two parties over an insecure channel.
-
To encrypt and decrypt messages.
-
To generate digital signatures.
-
To verify the authenticity of a message.
A
Correct answer
Explanation
The Diffie-Hellman key exchange protocol is used to securely exchange a secret key between two parties over an insecure channel. This allows the parties to communicate securely without having to share a secret key in advance.
What is the Elliptic Curve Cryptography (ECC) algorithm?
-
A public key cryptography algorithm that uses elliptic curves.
-
A symmetric key cryptography algorithm that uses elliptic curves.
-
A hash function that uses elliptic curves.
-
A digital signature algorithm that uses elliptic curves.
A
Correct answer
Explanation
Elliptic Curve Cryptography (ECC) is a public key cryptography algorithm that uses elliptic curves. It is a more efficient alternative to RSA and is often used in applications where performance is critical.
What is the Digital Signature Algorithm (DSA)?
-
A public key cryptography algorithm that uses digital signatures.
-
A symmetric key cryptography algorithm that uses digital signatures.
-
A hash function that uses digital signatures.
-
A digital signature algorithm that uses digital signatures.
A
Correct answer
Explanation
The Digital Signature Algorithm (DSA) is a public key cryptography algorithm that uses digital signatures. It is a widely used algorithm for digital signatures and is often used in applications where security is critical.