Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is a common method for securely exchanging the symmetric key between two parties?

  1. Public key cryptography

  2. Diffie-Hellman key exchange

  3. Man-in-the-middle attack

  4. Brute-force attack
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Diffie-Hellman key exchange is a method for securely exchanging a symmetric key between two parties over an insecure channel.

Multiple choice

What is the term used to describe the process of converting plaintext into ciphertext using a symmetric key?

  1. Encryption

  2. Decryption

  3. Hashing

  4. Encoding
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Encryption is the process of converting plaintext into ciphertext using a symmetric key.

Multiple choice

Which of the following is a common mode of operation used in symmetric key cryptography?

  1. Electronic Codebook (ECB)

  2. Cipher Block Chaining (CBC)

  3. Counter (CTR) mode

  4. Galois/Counter Mode (GCM)
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Cipher Block Chaining (CBC) is a common mode of operation used in symmetric key cryptography that provides better security compared to Electronic Codebook (ECB) mode.

Multiple choice

What is the term used to describe the process of converting ciphertext back into plaintext using a symmetric key?

  1. Encryption

  2. Decryption

  3. Hashing

  4. Decoding
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Decryption is the process of converting ciphertext back into plaintext using a symmetric key.

Multiple choice

Which of the following is a common attack against symmetric key cryptography?

  1. Brute-force attack

  2. Man-in-the-middle attack

  3. Replay attack

  4. Side-channel attack
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Brute-force attack is a common attack against symmetric key cryptography where an attacker tries all possible keys until the correct key is found.

Multiple choice

What is the term used to describe the process of generating a random symmetric key?

  1. Key generation

  2. Key exchange

  3. Key derivation

  4. Key management
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Key generation is the process of generating a random symmetric key.

Multiple choice

Which of the following is a common method for managing symmetric keys?

  1. Key escrow

  2. Key distribution center (KDC)

  3. Public key infrastructure (PKI)

  4. Certificate authority (CA)
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Key distribution center (KDC) is a common method for managing symmetric keys in a secure and centralized manner.

Multiple choice

What is the term used to describe the process of securely storing and protecting symmetric keys?

  1. Key management

  2. Key exchange

  3. Key derivation

  4. Key generation
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Key management is the process of securely storing and protecting symmetric keys.

Multiple choice

Which of the following is a common symmetric key cryptography algorithm used for encrypting data in transit?

  1. AES

  2. DES

  3. 3DES

  4. Blowfish
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

AES (Advanced Encryption Standard) is a common symmetric key cryptography algorithm used for encrypting data in transit due to its strong security and efficiency.

Multiple choice

What is the term used to describe the process of deriving a symmetric key from a shared secret?

  1. Key generation

  2. Key exchange

  3. Key derivation

  4. Key management
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Key derivation is the process of deriving a symmetric key from a shared secret.

Multiple choice

Which of the following is a common method for securely exchanging a symmetric key between two parties over a public network?

  1. Public key cryptography

  2. Diffie-Hellman key exchange

  3. Man-in-the-middle attack

  4. Brute-force attack
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Public key cryptography can be used to securely exchange a symmetric key between two parties over a public network.

Multiple choice

What is the term used to describe the process of converting a symmetric key into a form that is more secure for storage or transmission?

  1. Key wrapping

  2. Key encryption

  3. Key management

  4. Key generation
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Key wrapping is the process of converting a symmetric key into a form that is more secure for storage or transmission.

Multiple choice

Which of the following is NOT a type of online privacy concern?

  1. Data collection and use

  2. Identity theft

  3. Cyberbullying

  4. Malware and viruses
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Malware and viruses are not directly related to online privacy concerns, as they are malicious software that can infect and damage computer systems.

Multiple choice

Which of the following is NOT a common type of IoT security attack?

  1. Malware

  2. Phishing

  3. Man-in-the-Middle (MitM)

  4. Denial-of-Service (DoS)
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Phishing is a type of cyber attack that targets users, not devices, and is not specific to IoT.

Multiple choice

Which of the following is NOT a recommended strategy for managing a crisis involving a data breach?

  1. Notifying affected individuals and authorities promptly

  2. Conducting a thorough investigation

  3. Offering credit monitoring and identity theft protection to affected individuals

  4. Ignoring the issue and hoping it will go away
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Ignoring a data breach crisis can lead to severe consequences for the organization's reputation and legal liability.