Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which term refers to the unauthorized collection and use of personal information for commercial or malicious purposes?

  1. Data Mining

  2. Identity Theft

  3. Phishing

  4. Spam
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Identity theft involves the unauthorized acquisition and use of someone's personal information, such as their name, Social Security number, or credit card number, for fraudulent purposes.

Multiple choice

Which term refers to the unauthorized access of a computer system or network with the intent to cause damage or disruption?

  1. Hacking

  2. Cracking

  3. Phishing

  4. Malware
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Hacking involves gaining unauthorized access to a computer system or network, often with the intent to steal data, disrupt operations, or install malicious software.

Multiple choice

What is the name of the technology that allows individuals to securely store and transmit data over the internet?

  1. Encryption

  2. Digital Signature

  3. Firewall

  4. Virtual Private Network (VPN)
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Encryption involves converting information into a form that cannot be easily understood by unauthorized parties, ensuring the confidentiality and integrity of data.

Multiple choice

Which term refers to the unauthorized collection and use of personal information for commercial or malicious purposes?

  1. Data Mining

  2. Identity Theft

  3. Phishing

  4. Spam
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Identity theft involves the unauthorized acquisition and use of someone's personal information, such as their name, Social Security number, or credit card number, for fraudulent purposes.

Multiple choice

Which term refers to the unauthorized access of a computer system or network with the intent to cause damage or disruption?

  1. Hacking

  2. Cracking

  3. Phishing

  4. Malware
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Hacking involves gaining unauthorized access to a computer system or network, often with the intent to steal data, disrupt operations, or install malicious software.

Multiple choice

What is the name of the technology that allows individuals to securely store and transmit data over the internet?

  1. Encryption

  2. Digital Signature

  3. Firewall

  4. Virtual Private Network (VPN)
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Encryption involves converting information into a form that cannot be easily understood by unauthorized parties, ensuring the confidentiality and integrity of data.

Multiple choice

Which technology facilitates the secure and efficient exchange of legal documents between parties?

  1. Electronic signatures

  2. Digital rights management

  3. Secure file transfer protocols

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Electronic signatures, digital rights management, and secure file transfer protocols are all technologies that can be used to facilitate the secure and efficient exchange of legal documents between parties.

Multiple choice

Which regulation requires organizations to implement and maintain a comprehensive cybersecurity program to protect customer data and financial information?

  1. PCI DSS

  2. GDPR

  3. HIPAA

  4. NIST 800-53
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards designed to ensure the secure handling of cardholder data by organizations that process, store, or transmit credit card information.

Multiple choice

Which regulation requires organizations to implement and maintain a risk management program to identify, assess, and mitigate cybersecurity risks?

  1. NIST 800-53

  2. ISO 27001

  3. PCI DSS

  4. GDPR
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

NIST 800-53 is a set of security controls and guidelines that organizations can use to implement a comprehensive risk management program.

Multiple choice

Which regulation requires organizations to implement and maintain a comprehensive incident response plan to address cybersecurity incidents?

  1. ISO 27001

  2. NIST 800-53

  3. PCI DSS

  4. GDPR
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

ISO 27001 requires organizations to have an incident response plan that defines the procedures and responsibilities for responding to and managing cybersecurity incidents.

Multiple choice

What is the primary focus of the International Organization for Standardization (ISO) 27002 standard?

  1. To provide guidance on how to implement an information security management system (ISMS)

  2. To establish mandatory cybersecurity standards for government agencies

  3. To regulate the use of artificial intelligence and machine learning

  4. To promote the development of blockchain technology
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

ISO 27002 provides guidance on how to implement an ISMS, including the selection and implementation of appropriate security controls.

Multiple choice

Which regulation requires organizations to implement and maintain a comprehensive security awareness and training program for employees?

  1. NIST 800-53

  2. ISO 27001

  3. PCI DSS

  4. GDPR
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

NIST 800-53 requires organizations to have a security awareness and training program that educates employees about cybersecurity risks and best practices.

Multiple choice

Which regulation requires organizations to implement and maintain a comprehensive vulnerability management program to identify, assess, and mitigate vulnerabilities in their systems?

  1. NIST 800-53

  2. ISO 27001

  3. PCI DSS

  4. GDPR
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

NIST 800-53 requires organizations to have a vulnerability management program that includes regular scanning and assessment of systems for vulnerabilities.

Multiple choice

Which of the following is NOT a common type of cyber attack in finance?

  1. Phishing

  2. Malware

  3. Ransomware

  4. Insider trading
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Insider trading is not a cyber attack, but rather a type of financial crime involving the use of non-public information to make trades in the stock market.

Multiple choice

Which of the following is NOT a best practice for securing financial data?

  1. Using strong passwords

  2. Regularly updating software and security patches

  3. Implementing multi-factor authentication

  4. Storing financial data on a personal computer
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Storing financial data on a personal computer is not a secure practice, as personal computers are more vulnerable to cyber attacks.