Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is a common security measure used in correctional facilities to prevent contraband from entering?

  1. Body scanners

  2. Metal detectors

  3. X-ray machines

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Body scanners, metal detectors, and X-ray machines are all common security measures used in correctional facilities to prevent contraband from entering.

Multiple choice

Which of the following is NOT a type of HIPAA security safeguard?

  1. Administrative safeguards

  2. Physical safeguards

  3. Technical safeguards

  4. Organizational safeguards
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Organizational safeguards are not a type of HIPAA security safeguard. The three types of HIPAA security safeguards are administrative, physical, and technical.

Multiple choice

Which of the following is NOT a common type of security incident in healthcare?

  1. Phishing attacks

  2. Ransomware attacks

  3. Data breaches

  4. Denial-of-service attacks
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Denial-of-service attacks are not as common in healthcare as phishing attacks, ransomware attacks, and data breaches.

Multiple choice

Which of the following is NOT a common type of data breach in healthcare?

  1. Phishing attacks

  2. Ransomware attacks

  3. Insider attacks

  4. Denial-of-service attacks
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Denial-of-service attacks are not a common type of data breach in healthcare.

Multiple choice

Which of the following is NOT a common type of security incident in healthcare?

  1. Phishing attacks

  2. Ransomware attacks

  3. Data breaches

  4. Denial-of-service attacks
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Denial-of-service attacks are not as common in healthcare as phishing attacks, ransomware attacks, and data breaches.

Multiple choice

Which of the following is a common type of supply chain disruption caused by cyberattacks?

  1. Denial of service (DoS) attacks

  2. Man-in-the-middle (MitM) attacks

  3. Malware infections

  4. Phishing attacks
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Malware infections can disrupt supply chain operations by compromising systems, stealing sensitive information, or causing operational disruptions.

Multiple choice

Which of the following is a common cloud security threat?

  1. Distributed denial-of-service (DDoS) attacks

  2. Malware infections

  3. Phishing attacks

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

DDoS attacks, malware infections, and phishing attacks are all common cloud security threats that can compromise the security of data, applications, and infrastructure.

Multiple choice

What is the purpose of encryption in cloud security?

  1. To protect data at rest

  2. To protect data in transit

  3. To protect data in use

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Encryption is used in cloud security to protect data at rest (stored data), data in transit (data being transferred), and data in use (data being processed).

Multiple choice

Which of the following is NOT a common type of firewall rule?

  1. Allow rule

  2. Deny rule

  3. Default rule

  4. Audit rule
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Audit rules are not a common type of firewall rule. They are used to log network traffic without taking any action.

Multiple choice

Which of the following is NOT a common use case for firewall rules?

  1. To restrict access to certain resources

  2. To protect against DDoS attacks

  3. To enable remote access to a network

  4. To improve network performance
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Firewall rules are not typically used to improve network performance. They are primarily used to control access to network resources and protect against security threats.

Multiple choice

Which of the following is a common type of mobile app security vulnerability?

  1. SQL injection

  2. Cross-site scripting (XSS)

  3. Buffer overflow

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Mobile apps are susceptible to a variety of security vulnerabilities, including SQL injection, cross-site scripting (XSS), and buffer overflow.

Multiple choice

Which of the following is a best practice for securing mobile apps?

  1. Use strong encryption for sensitive data

  2. Implement input validation to prevent malicious input

  3. Regularly update the app with security patches

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

To secure mobile apps, it's essential to use strong encryption, implement input validation, and regularly update the app with security patches.

Multiple choice

What is the purpose of code obfuscation in mobile app security?

  1. To make the app code more readable

  2. To improve the app's performance

  3. To protect the app's intellectual property

  4. To prevent reverse engineering
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Code obfuscation aims to make the app's code difficult to understand and reverse engineer, protecting the app's intellectual property.

Multiple choice

What is the role of secure coding practices in mobile app security?

  1. To prevent buffer overflows

  2. To avoid memory leaks

  3. To protect against cross-site scripting (XSS) attacks

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Secure coding practices help prevent buffer overflows, memory leaks, cross-site scripting (XSS) attacks, and other security vulnerabilities.

Multiple choice

Which of the following is a common type of mobile app malware?

  1. Trojan horse

  2. Virus

  3. Worm

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Mobile apps can be infected with various types of malware, including Trojan horses, viruses, and worms.