Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

What is a side-channel attack?

  1. A type of cyberattack that exploits the physical characteristics of a device

  2. A type of cyberattack that steals data from a server

  3. A type of cyberattack that takes control of a server

  4. A type of cyberattack that deletes data from a server
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A side-channel attack is a type of cyberattack that exploits the physical characteristics of a device, such as its power consumption or electromagnetic emissions, to extract information from the device.

Multiple choice

What is a zero-day attack?

  1. A type of cyberattack that exploits a vulnerability that is not yet known to the vendor

  2. A type of cyberattack that steals data from a server

  3. A type of cyberattack that takes control of a server

  4. A type of cyberattack that deletes data from a server
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A zero-day attack is a type of cyberattack that exploits a vulnerability that is not yet known to the vendor, allowing the attacker to take advantage of the vulnerability before it can be patched.

Multiple choice

What is a buffer overflow attack?

  1. A type of cyberattack that exploits a buffer overflow vulnerability

  2. A type of cyberattack that steals data from a server

  3. A type of cyberattack that takes control of a server

  4. A type of cyberattack that deletes data from a server
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A buffer overflow attack is a type of cyberattack that exploits a buffer overflow vulnerability, allowing the attacker to execute arbitrary code on the device.

Multiple choice

What is a SQL injection attack?

  1. A type of cyberattack that exploits a SQL injection vulnerability

  2. A type of cyberattack that steals data from a server

  3. A type of cyberattack that takes control of a server

  4. A type of cyberattack that deletes data from a server
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A SQL injection attack is a type of cyberattack that exploits a SQL injection vulnerability, allowing the attacker to execute arbitrary SQL queries on the database.

Multiple choice

What is a cross-site scripting (XSS) attack?

  1. A type of cyberattack that exploits a cross-site scripting vulnerability

  2. A type of cyberattack that steals data from a server

  3. A type of cyberattack that takes control of a server

  4. A type of cyberattack that deletes data from a server
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A cross-site scripting (XSS) attack is a type of cyberattack that exploits a cross-site scripting vulnerability, allowing the attacker to inject malicious code into a web page.

Multiple choice

What is a remote code execution (RCE) attack?

  1. A type of cyberattack that allows the attacker to execute arbitrary code on the device

  2. A type of cyberattack that steals data from a server

  3. A type of cyberattack that takes control of a server

  4. A type of cyberattack that deletes data from a server
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A remote code execution (RCE) attack is a type of cyberattack that allows the attacker to execute arbitrary code on the device.

Multiple choice

What is a denial-of-service (DoS) attack?

  1. A type of cyberattack that prevents the device from providing its services

  2. A type of cyberattack that steals data from a server

  3. A type of cyberattack that takes control of a server

  4. A type of cyberattack that deletes data from a server
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A denial-of-service (DoS) attack is a type of cyberattack that prevents the device from providing its services.

Multiple choice

What is a man-in-the-middle (MITM) attack?

  1. A type of cyberattack that allows the attacker to intercept communications between two parties

  2. A type of cyberattack that steals data from a server

  3. A type of cyberattack that takes control of a server

  4. A type of cyberattack that deletes data from a server
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A man-in-the-middle (MITM) attack is a type of cyberattack that allows the attacker to intercept communications between two parties.

Multiple choice

What is a phishing attack?

  1. A type of cyberattack that attempts to trick the user into giving up their personal information

  2. A type of cyberattack that steals data from a server

  3. A type of cyberattack that takes control of a server

  4. A type of cyberattack that deletes data from a server
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A phishing attack is a type of cyberattack that attempts to trick the user into giving up their personal information, such as their password or credit card number.

Multiple choice

What is a social engineering attack?

  1. A type of cyberattack that exploits human psychology to trick the user into performing a desired action

  2. A type of cyberattack that steals data from a server

  3. A type of cyberattack that takes control of a server

  4. A type of cyberattack that deletes data from a server
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A social engineering attack is a type of cyberattack that exploits human psychology to trick the user into performing a desired action, such as clicking on a malicious link or opening a malicious email attachment.

Multiple choice

Which of the following is a common MDM strategy for securing mobile devices?

  1. Implementing a Bring Your Own Device (BYOD) policy

  2. Enforcing strong password policies

  3. Enabling remote wipe capabilities

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

MDM strategies for securing mobile devices include implementing BYOD policies, enforcing strong passwords, enabling remote wipe capabilities, and more.

Multiple choice

Which of the following is NOT a common MDM feature?

  1. Remote device management

  2. Application management

  3. Data encryption

  4. Device tracking
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Device tracking is typically not a common MDM feature, as it involves monitoring the physical location of devices, which may raise privacy concerns.

Multiple choice

Which of the following is a common MDM security policy?

  1. Requiring strong passwords

  2. Enforcing device encryption

  3. Restricting access to certain apps

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Common MDM security policies include requiring strong passwords, enforcing device encryption, restricting access to certain apps, and more.

Multiple choice

Which of the following is a common MAM security policy?

  1. Requiring strong passwords

  2. Enforcing application encryption

  3. Restricting access to certain data

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Common MAM security policies include requiring strong passwords, enforcing application encryption, restricting access to certain data, and more.

Multiple choice

Which of the following is a common MDM compliance requirement?

  1. Encryption of sensitive data

  2. Strong password policies

  3. Remote wipe capabilities

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Common MDM compliance requirements include encryption of sensitive data, strong password policies, remote wipe capabilities, and more.