Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is NOT a recommended best practice for HIPAA compliance?

  1. Use strong passwords and regularly change them

  2. Implement multi-factor authentication

  3. Use a firewall to protect your network

  4. Allow employees to access ePHI from their personal devices
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Allowing employees to access ePHI from their personal devices is not a recommended best practice for HIPAA compliance.

Multiple choice

Which of the following is NOT a type of web application vulnerability?

  1. Cross-site scripting (XSS)

  2. SQL injection

  3. Buffer overflow

  4. Man-in-the-middle attack
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Buffer overflow is a type of memory corruption vulnerability that can occur in any program, not just web applications.

Multiple choice

What is the purpose of a web application firewall (WAF)?

  1. To block malicious traffic at the network layer

  2. To detect and prevent SQL injection attacks

  3. To protect against cross-site scripting (XSS) attacks

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A WAF is a security device that is placed in front of a web application to protect it from malicious traffic and attacks.

Multiple choice

What is the OWASP Top 10?

  1. A list of the most common web application vulnerabilities

  2. A set of best practices for securing web applications

  3. A tool for scanning web applications for vulnerabilities

  4. A training program for web application developers
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

The OWASP Top 10 is a list of the most common web application vulnerabilities, as identified by the Open Web Application Security Project (OWASP).

Multiple choice

What is the purpose of a security header?

  1. To protect a web application from malicious traffic and attacks

  2. To improve the performance of a web application

  3. To make a web application more user-friendly

  4. To track user activity on a web application
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A security header is a response header that is sent by a web server to a web browser in order to protect the web application from malicious traffic and attacks.

Multiple choice

Which of the following is NOT a type of honeypot?

  1. Production honeypot

  2. Research honeypot

  3. Honeynet

  4. Decoy system
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A decoy system is not a type of honeypot. It is a system that is designed to look like a real system, but is actually a fake system. Decoy systems are used to trick attackers into thinking that they have compromised a real system, when in fact they have not.

Multiple choice

Which of the following is NOT a type of security audit?

  1. Vulnerability assessment

  2. Penetration testing

  3. Risk assessment

  4. Compliance audit
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A compliance audit is not a type of security audit. It is an audit that is conducted to ensure that a system complies with a set of regulations or standards.

Multiple choice

Which of the following is a best practice for improving network resiliency?

  1. Regularly updating network firmware and software.

  2. Implementing security measures to protect against cyberattacks.

  3. Conducting regular network audits and assessments.

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All of the options are best practices for improving network resiliency. Regularly updating network firmware and software helps to address vulnerabilities and improve performance. Implementing security measures protects against cyberattacks, and conducting regular network audits and assessments helps to identify potential problems and vulnerabilities.

Multiple choice

Which of the following is NOT a common type of mobile device malware?

  1. Virus

  2. Trojan

  3. Spyware

  4. Adware
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Adware is not a common type of mobile device malware.

Multiple choice

What is the best way to protect a mobile device from malware?

  1. Install a mobile security app

  2. Keep the device's software up to date

  3. Avoid downloading apps from unknown sources

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All of the options listed are important in protecting a mobile device from malware.

Multiple choice

Which of the following is a common web application security best practice?

  1. Implementing input validation and sanitization

  2. Using secure coding practices

  3. Regularly updating software and dependencies

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Implementing input validation and sanitization, using secure coding practices, and regularly updating software and dependencies are all common web application security best practices that help protect web applications from vulnerabilities and attacks.

Multiple choice

Which of the following is a common cybersecurity compliance framework for critical infrastructure?

  1. NIST Cybersecurity Framework

  2. ISO 27001/27002

  3. PCI DSS

  4. HIPAA
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

The NIST Cybersecurity Framework is a comprehensive framework that provides guidance on how to manage cybersecurity risks in critical infrastructure.

Multiple choice

What is the primary focus of the NIST Cybersecurity Framework?

  1. Protecting sensitive data

  2. Ensuring the continuity of essential services

  3. Maintaining a competitive advantage

  4. Complying with industry regulations
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

The NIST Cybersecurity Framework focuses on ensuring the continuity of essential services by providing guidance on how to identify, protect, detect, respond to, and recover from cybersecurity incidents.

Multiple choice

What is the importance of cybersecurity compliance in critical infrastructure?

  1. To protect sensitive data and systems from unauthorized access

  2. To ensure the continuity of essential services

  3. To maintain a competitive advantage

  4. To comply with industry regulations
Reveal answer Fill a bubble to check yourself
Correct answer
Explanation

Cybersecurity compliance in critical infrastructure is important for protecting sensitive data and systems from unauthorized access, ensuring the continuity of essential services, maintaining a competitive advantage, and complying with industry regulations.

Multiple choice

Which of the following is a common cybersecurity compliance framework for critical infrastructure in the water and wastewater sector?

  1. AWWA G430

  2. ISO 27001/27002

  3. PCI DSS

  4. HIPAA
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

AWWA G430 is a cybersecurity compliance framework specifically designed for the water and wastewater sector, developed by the American Water Works Association (AWWA).