Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is NOT a recommended practice for supply chain incident response planning?

  1. Conducting regular risk assessments

  2. Developing incident response playbooks

  3. Implementing security controls and monitoring systems

  4. Ignoring the possibility of supply chain disruptions
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Ignoring the possibility of supply chain disruptions is not a recommended practice, as it increases the likelihood of being unprepared and unable to respond effectively to incidents.

Multiple choice

Which of the following is a key element of supply chain incident response governance?

  1. Establishing clear roles and responsibilities

  2. Defining incident response policies and procedures

  3. Providing adequate resources for incident response

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Effective supply chain incident response governance requires clear roles and responsibilities, well-defined policies and procedures, and adequate resources to ensure a coordinated and effective response.

Multiple choice

Which of the following is a common cloud security threat?

  1. Distributed denial-of-service (DDoS) attacks

  2. Malware infections

  3. Phishing attacks

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

DDoS attacks, malware infections, and phishing attacks are all common cloud security threats that can compromise the security of data, applications, and infrastructure.

Multiple choice

What is the purpose of encryption in cloud security?

  1. To protect data at rest

  2. To protect data in transit

  3. To protect data in use

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Encryption is used in cloud security to protect data at rest (stored data), data in transit (data being transferred), and data in use (data being processed).

Multiple choice

Which of the following is NOT a common type of firewall rule?

  1. Allow rule

  2. Deny rule

  3. Default rule

  4. Audit rule
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Audit rules are not a common type of firewall rule. They are used to log network traffic without taking any action.

Multiple choice

Which of the following is NOT a common use case for firewall rules?

  1. To restrict access to certain resources

  2. To protect against DDoS attacks

  3. To enable remote access to a network

  4. To improve network performance
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Firewall rules are not typically used to improve network performance. They are primarily used to control access to network resources and protect against security threats.

Multiple choice

Which of the following is a common type of mobile app security vulnerability?

  1. SQL injection

  2. Cross-site scripting (XSS)

  3. Buffer overflow

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Mobile apps are susceptible to a variety of security vulnerabilities, including SQL injection, cross-site scripting (XSS), and buffer overflow.

Multiple choice

Which of the following is a best practice for securing mobile apps?

  1. Use strong encryption for sensitive data

  2. Implement input validation to prevent malicious input

  3. Regularly update the app with security patches

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

To secure mobile apps, it's essential to use strong encryption, implement input validation, and regularly update the app with security patches.

Multiple choice

What is the purpose of code obfuscation in mobile app security?

  1. To make the app code more readable

  2. To improve the app's performance

  3. To protect the app's intellectual property

  4. To prevent reverse engineering
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Code obfuscation aims to make the app's code difficult to understand and reverse engineer, protecting the app's intellectual property.

Multiple choice

What is the role of secure coding practices in mobile app security?

  1. To prevent buffer overflows

  2. To avoid memory leaks

  3. To protect against cross-site scripting (XSS) attacks

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Secure coding practices help prevent buffer overflows, memory leaks, cross-site scripting (XSS) attacks, and other security vulnerabilities.

Multiple choice

Which of the following is a common type of mobile app malware?

  1. Trojan horse

  2. Virus

  3. Worm

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Mobile apps can be infected with various types of malware, including Trojan horses, viruses, and worms.

Multiple choice

What is the role of secure storage in mobile app security?

  1. To protect sensitive data from unauthorized access

  2. To prevent data breaches

  3. To comply with data protection regulations

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Secure storage helps protect sensitive data from unauthorized access, prevents data breaches, and ensures compliance with data protection regulations.

Multiple choice

Which of the following is a common type of mobile app attack?

  1. Man-in-the-middle (MITM) attack

  2. Phishing attack

  3. Denial-of-service (DoS) attack

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Mobile apps can be targeted by various types of attacks, including man-in-the-middle (MITM) attacks, phishing attacks, and denial-of-service (DoS) attacks.

Multiple choice

What is the role of secure network communication in mobile app security?

  1. To protect data in transit

  2. To prevent eavesdropping and man-in-the-middle attacks

  3. To ensure data integrity and authenticity

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Secure network communication protects data in transit, prevents eavesdropping and man-in-the-middle attacks, and ensures data integrity and authenticity.

Multiple choice

Which of the following is a best practice for managing mobile app permissions?

  1. Request only the permissions necessary for the app's functionality

  2. Clearly explain to users why each permission is required

  3. Allow users to control which permissions the app has access to

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

To protect user privacy and prevent misuse of permissions, it's essential to request only necessary permissions, explain their purpose, and allow users to control them.