Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

What are some common techniques used in MitM attacks?

  1. ARP spoofing

  2. DNS spoofing

  3. SSL stripping

  4. Packet sniffing
Reveal answer Fill a bubble to check yourself
Correct answer
Explanation

ARP spoofing, DNS spoofing, SSL stripping, and packet sniffing are all common techniques used in MitM attacks. ARP spoofing allows an attacker to redirect traffic to their own computer, DNS spoofing allows them to redirect users to malicious websites, SSL stripping allows them to downgrade a secure connection to an insecure one, and packet sniffing allows them to capture data passing over a network.

Multiple choice

What are some signs that you may be the victim of a MitM attack?

  1. Your web browser displays a warning message about an invalid security certificate.

  2. You are unable to access certain websites or online services.

  3. Your internet connection is slow or unreliable.

  4. You see strange or unexpected messages or pop-ups on your computer.
Reveal answer Fill a bubble to check yourself
Correct answer
Explanation

If you see any of these signs, it is possible that you are the victim of a MitM attack. However, it is also possible that these signs are caused by other issues, such as a network problem or a malware infection. It is important to investigate further to determine the cause of the problem.

Multiple choice

How can you protect yourself from MitM attacks?

  1. Use a VPN to encrypt your internet traffic.

  2. Use strong passwords and two-factor authentication.

  3. Keep your software and operating system up to date.

  4. Be cautious about clicking on links or opening attachments in emails from unknown senders.
Reveal answer Fill a bubble to check yourself
Correct answer
Explanation

There are a number of things you can do to protect yourself from MitM attacks, including using a VPN, using strong passwords and two-factor authentication, keeping your software and operating system up to date, and being cautious about clicking on links or opening attachments in emails from unknown senders.

Multiple choice

What is SSL stripping?

  1. A technique used to downgrade a secure HTTPS connection to an insecure HTTP connection.

  2. A technique used to intercept and modify data passing between two parties.

  3. A technique used to impersonate a legitimate user to access sensitive information.

  4. A technique used to disrupt the normal operation of a network or system.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

SSL stripping is a technique used in MitM attacks to downgrade a secure HTTPS connection to an insecure HTTP connection. This allows the attacker to intercept and modify the data passing between the user and the website.

Multiple choice

What is ARP spoofing?

  1. A technique used to redirect traffic to an attacker's computer.

  2. A technique used to intercept and modify data passing between two parties.

  3. A technique used to impersonate a legitimate user to access sensitive information.

  4. A technique used to disrupt the normal operation of a network or system.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

ARP spoofing is a technique used in MitM attacks to redirect traffic to an attacker's computer. This allows the attacker to intercept and modify the data passing between the user and the intended destination.

Multiple choice

What is DNS spoofing?

  1. A technique used to redirect users to malicious websites.

  2. A technique used to intercept and modify data passing between two parties.

  3. A technique used to impersonate a legitimate user to access sensitive information.

  4. A technique used to disrupt the normal operation of a network or system.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

DNS spoofing is a technique used in MitM attacks to redirect users to malicious websites. This is done by modifying the DNS records for a domain name so that they point to the attacker's website instead of the legitimate website.

Multiple choice

What is the difference between a MitM attack and a phishing attack?

  1. In a MitM attack, the attacker intercepts and modifies data passing between two parties, while in a phishing attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information.

  2. In a MitM attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information, while in a phishing attack, the attacker intercepts and modifies data passing between two parties.

  3. In a MitM attack, the attacker disrupts the normal operation of a network or system, while in a phishing attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information.

  4. In a MitM attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information, while in a phishing attack, the attacker disrupts the normal operation of a network or system.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In a MitM attack, the attacker positions themselves between two communicating parties and intercepts their data. They can then modify the data, eavesdrop on the communication, or impersonate one of the parties. In a phishing attack, the attacker impersonates a legitimate entity, such as a bank or a government agency, to trick the victim into giving up sensitive information, such as their password or credit card number.

Multiple choice

What is the difference between a MitM attack and a DDoS attack?

  1. In a MitM attack, the attacker intercepts and modifies data passing between two parties, while in a DDoS attack, the attacker floods a target with traffic to disrupt its normal operation.

  2. In a MitM attack, the attacker floods a target with traffic to disrupt its normal operation, while in a DDoS attack, the attacker intercepts and modifies data passing between two parties.

  3. In a MitM attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information, while in a DDoS attack, the attacker floods a target with traffic to disrupt its normal operation.

  4. In a MitM attack, the attacker floods a target with traffic to disrupt its normal operation, while in a DDoS attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In a MitM attack, the attacker positions themselves between two communicating parties and intercepts their data. They can then modify the data, eavesdrop on the communication, or impersonate one of the parties. In a DDoS (Distributed Denial of Service) attack, the attacker floods a target with traffic from multiple sources, such as botnets, to disrupt its normal operation.

Multiple choice

What is the difference between a MitM attack and a ransomware attack?

  1. In a MitM attack, the attacker intercepts and modifies data passing between two parties, while in a ransomware attack, the attacker encrypts the victim's files and demands a ransom to decrypt them.

  2. In a MitM attack, the attacker encrypts the victim's files and demands a ransom to decrypt them, while in a ransomware attack, the attacker intercepts and modifies data passing between two parties.

  3. In a MitM attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information, while in a ransomware attack, the attacker encrypts the victim's files and demands a ransom to decrypt them.

  4. In a MitM attack, the attacker encrypts the victim's files and demands a ransom to decrypt them, while in a ransomware attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In a MitM attack, the attacker positions themselves between two communicating parties and intercepts their data. They can then modify the data, eavesdrop on the communication, or impersonate one of the parties. In a ransomware attack, the attacker encrypts the victim's files and demands a ransom to decrypt them.

Multiple choice

What is the difference between a MitM attack and a social engineering attack?

  1. In a MitM attack, the attacker intercepts and modifies data passing between two parties, while in a social engineering attack, the attacker manipulates the victim into giving up sensitive information.

  2. In a MitM attack, the attacker manipulates the victim into giving up sensitive information, while in a social engineering attack, the attacker intercepts and modifies data passing between two parties.

  3. In a MitM attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information, while in a social engineering attack, the attacker manipulates the victim into giving up sensitive information.

  4. In a MitM attack, the attacker manipulates the victim into giving up sensitive information, while in a social engineering attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In a MitM attack, the attacker positions themselves between two communicating parties and intercepts their data. They can then modify the data, eavesdrop on the communication, or impersonate one of the parties. In a social engineering attack, the attacker manipulates the victim into giving up sensitive information, such as their password or credit card number, by tricking them into thinking that they are dealing with a legitimate entity.

Multiple choice

What is the difference between a MitM attack and a zero-day attack?

  1. In a MitM attack, the attacker intercepts and modifies data passing between two parties, while in a zero-day attack, the attacker exploits a previously unknown vulnerability in software.

  2. In a MitM attack, the attacker exploits a previously unknown vulnerability in software, while in a zero-day attack, the attacker intercepts and modifies data passing between two parties.

  3. In a MitM attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information, while in a zero-day attack, the attacker exploits a previously unknown vulnerability in software.

  4. In a MitM attack, the attacker exploits a previously unknown vulnerability in software, while in a zero-day attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In a MitM attack, the attacker positions themselves between two communicating parties and intercepts their data. They can then modify the data, eavesdrop on the communication, or impersonate one of the parties. In a zero-day attack, the attacker exploits a previously unknown vulnerability in software to gain unauthorized access to a system or network.

Multiple choice

What is the difference between a MitM attack and a buffer overflow attack?

  1. In a MitM attack, the attacker intercepts and modifies data passing between two parties, while in a buffer overflow attack, the attacker exploits a buffer overflow vulnerability to execute arbitrary code.

  2. In a MitM attack, the attacker exploits a buffer overflow vulnerability to execute arbitrary code, while in a buffer overflow attack, the attacker intercepts and modifies data passing between two parties.

  3. In a MitM attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information, while in a buffer overflow attack, the attacker exploits a buffer overflow vulnerability to execute arbitrary code.

  4. In a MitM attack, the attacker exploits a buffer overflow vulnerability to execute arbitrary code, while in a buffer overflow attack, the attacker impersonates a legitimate entity to trick the victim into giving up sensitive information.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In a MitM attack, the attacker positions themselves between two communicating parties and intercepts their data. They can then modify the data, eavesdrop on the communication, or impersonate one of the parties. In a buffer overflow attack, the attacker exploits a buffer overflow vulnerability in software to execute arbitrary code on the victim's system.

Multiple choice

What is the term used to describe the unauthorized access, use, disclosure, disruption, modification, or destruction of information in electronic form?

  1. Cybercrime

  2. Cybersecurity

  3. Digital Forensics

  4. Information Assurance
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Cybercrime is the term used to describe the unauthorized access, use, disclosure, disruption, modification, or destruction of information in electronic form.

Multiple choice

Which type of cybercrime involves the unauthorized access and use of a computer system or network?

  1. Hacking

  2. Phishing

  3. Malware

  4. DDoS Attack
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Hacking is the term used to describe the unauthorized access and use of a computer system or network.

Multiple choice

What is the term used to describe the fraudulent attempt to obtain sensitive information such as passwords, credit card numbers, or personal data by disguising oneself as a trustworthy entity?

  1. Phishing

  2. Malware

  3. DDoS Attack

  4. Spam
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Phishing is the term used to describe the fraudulent attempt to obtain sensitive information such as passwords, credit card numbers, or personal data by disguising oneself as a trustworthy entity.