Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is NOT a common type of cybersecurity threat faced by educational institutions?

  1. Phishing attacks

  2. Ransomware attacks

  3. Denial-of-service attacks

  4. Physical security breaches
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Physical security breaches, such as unauthorized access to buildings or equipment, are not typically considered a cybersecurity threat.

Multiple choice

What is the primary goal of a phishing attack?

  1. To steal sensitive information

  2. To disrupt network operations

  3. To infect systems with malware

  4. To gain unauthorized access to systems
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Phishing attacks aim to trick victims into revealing sensitive information, such as passwords or credit card numbers, by disguising themselves as legitimate entities.

Multiple choice

Which type of malware is designed to encrypt files and demand a ransom payment for their decryption?

  1. Spyware

  2. Adware

  3. Ransomware

  4. Botnet
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Ransomware encrypts files on a victim's computer and demands a ransom payment in exchange for the decryption key.

Multiple choice

What is the term for a network attack that floods a target system with traffic, causing it to become unavailable?

  1. Man-in-the-middle attack

  2. Denial-of-service attack

  3. Phishing attack

  4. Malware attack
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

A denial-of-service attack overwhelms a target system with traffic, making it unavailable to legitimate users.

Multiple choice

Which of the following is a common method used by cybercriminals to gain unauthorized access to systems?

  1. Brute-force attacks

  2. Social engineering attacks

  3. Zero-day exploits

  4. Malware infections
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Brute-force attacks involve trying different combinations of passwords or encryption keys until the correct one is found.

Multiple choice

Which of the following is NOT a recommended practice for protecting against phishing attacks?

  1. Using strong passwords

  2. Being cautious of suspicious emails

  3. Enabling two-factor authentication

  4. Clicking on links in emails from unknown senders
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Clicking on links in emails from unknown senders is a common way for phishing attacks to succeed.

Multiple choice

What is the term for a network of compromised computers controlled by a single entity?

  1. Botnet

  2. Malware

  3. Ransomware

  4. Phishing attack
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A botnet is a network of compromised computers controlled by a single entity, often used for malicious purposes such as launching DDoS attacks or sending spam emails.

Multiple choice

Which of the following is NOT a common type of data breach?

  1. Malware infections

  2. Phishing attacks

  3. Insider threats

  4. Denial-of-service attacks
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Denial-of-service attacks are not typically considered a type of data breach.

Multiple choice

What is the term for a security measure that involves requiring multiple forms of authentication?

  1. Multi-factor authentication

  2. Single-factor authentication

  3. Two-factor authentication

  4. Three-factor authentication
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Multi-factor authentication requires multiple forms of authentication, such as a password and a fingerprint scan, to access a system.

Multiple choice

Which of the following is NOT a recommended practice for protecting against malware infections?

  1. Using antivirus software

  2. Keeping software up to date

  3. Being cautious of suspicious downloads

  4. Disabling firewalls
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Disabling firewalls is not a recommended practice for protecting against malware infections.

Multiple choice

What is the term for a security measure that involves encrypting data in transit?

  1. Encryption

  2. Decryption

  3. Hashing

  4. Salting
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Encryption involves converting data into a form that cannot be easily understood without the appropriate key.

Multiple choice

Which of the following is NOT a common type of cyber attack targeting research institutions?

  1. Phishing attacks

  2. Ransomware attacks

  3. Denial-of-service attacks

  4. Intellectual property theft
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Denial-of-service attacks are not typically targeted specifically at research institutions.

Multiple choice

What is the term for a security measure that involves regularly backing up data?

  1. Data backup

  2. Data recovery

  3. Data encryption

  4. Data destruction
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Data backup involves regularly copying data to a separate location for safekeeping.

Multiple choice

Which of the following is NOT a recommended practice for protecting against insider threats?

  1. Implementing strong access controls

  2. Providing security awareness training

  3. Monitoring user activity

  4. Trusting all employees implicitly
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Trusting all employees implicitly is not a recommended practice for protecting against insider threats.

Multiple choice

In the context of data deduplication, what is a hash function?

  1. A mathematical function that generates a unique fingerprint for a data block

  2. An algorithm that encrypts data for secure storage

  3. A technique for compressing data without losing information

  4. A method for transmitting data over a network efficiently
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A hash function is a mathematical function that takes a data block as input and generates a unique fingerprint, or hash value, for that data block.