Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice technology

What are the commonly used Security settings in IIS?(Select Applicable)

  1. Anonymous

  2. Integrated Windows Authentication

  3. Basic Authentication

  4. Digest Authentication

  5. Passport Authentication

  6. PEAP
Reveal answer Fill a bubble to check yourself
A,B,C,D,E Correct answer
Explanation

IIS supports Anonymous (no authentication), Integrated Windows Authentication (Kerberos/NTLM), Basic Authentication (base64 encoded), Digest Authentication (hash-based), and Passport Authentication (Microsoft's centralized auth). PEAP is a wireless authentication protocol not part of IIS.

Multiple choice technology

How passwords for FTP components can be encrypted?

  1. Use the epw parameter in FTP component

  2. .netrc file

  3. settting AB_FTP_PASSWORD configuration variable

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Ab Initio provides multiple methods to encrypt FTP component passwords: the epw parameter in the FTP component itself, using a .netrc file for stored credentials, or setting the AB_FTP_PASSWORD configuration variable. All three approaches are valid and serve different security and operational needs.

Multiple choice technology programming languages

An application uses encapsulation to achieve ________

  1. Information hiding

  2. Minimizing interdependencies among modules

  3. Make implementation independent

  4. All of these options
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Encapsulation achieves information hiding by bundling data and methods within a class and controlling access through public interfaces. The other options are benefits of information hiding, not encapsulation itself. Encapsulation is the mechanism that enables information hiding, which in turn reduces interdependencies and supports implementation independence.

Multiple choice technology embedded technologies

Which of the following policies are supported by Device Administration API

  1. Minimum password length

  2. Maximum inactivity time limit

  3. Alphanumeric password requirement

  4. Prompt user to set new password
Reveal answer Fill a bubble to check yourself
A,B,C,D Correct answer
Explanation

Android's Device Administration API supports policies including minimum password length, maximum inactivity timeout (after which the device locks), password quality requirements like alphanumeric content, and requesting/prompting the user to reset or set a new password. Thus, all listed policies are correct.

Multiple choice technology platforms and products

Which methodology can be used to extend the standard password rules?

  1. None; password rules cannot be extended.

  2. Password rules can be extended using JavaScript.

  3. Password Java APIs can be used to extend password rules.

  4. Password rules can be extended using the Pluggable Authentication Module (PAM) framework.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

IBM Tivoli Identity Manager provides Password Java APIs that allow developers to extend standard password rules with custom logic. This enables organizations to implement password policies beyond the built-in rules. JavaScript and PAM are not the extension mechanisms for TIM password rules.

Multiple choice technology platforms and products

Adaptive Strong Authenticator is Oracle Adaptive Access Manager's user-facing "front-end" product with fraud protection against online Identity theft.

  1. True

  2. False
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Adaptive Strong Authenticator is the user-facing component of Oracle Adaptive Access Manager that provides multi-factor authentication and fraud protection mechanisms directly to end users, guarding against identity theft during online sessions.

Multiple choice technology platforms and products

In SAML integration, the customers can use Oracle Adaptive Access Manager as an

  1. Authentication service

  2. Authorization service

  3. None

  4. Both
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Oracle Adaptive Access Manager serves as the authentication service in SAML integrations, handling user authentication and risk-based fraud detection. Authorization decisions are typically made by the service provider after authentication succeeds.

Multiple choice technology testing

DoS attack (Security Attack) means

  1. Denial-of-Service

  2. Denial of security

  3. Debugging-of-SOA Web Service

  4. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

DoS (Denial-of-Service) is a type of cyber attack where an attacker overwhelms a target system with excessive requests or traffic, making the service unavailable to legitimate users. It's not related to debugging or denial of security - those are incorrect distractors. The attack exploits resource limitations to disrupt normal service operations.

Multiple choice technology programming languages

What kind of security levels are offered in TFS?

  1. SharePoint Security

  2. Reporting Security

  3. TFS Security

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

TFS provides a multi-layered security model that includes its own security system for project-level permissions, integration with SharePoint security for portal access, and Reporting Services security for report access. This layered approach allows fine-grained control over different aspects of the TFS environment.

Multiple choice technology programming languages

Team foundation security is based on?

  1. Users

  2. Groups

  3. a and b

  4. None of the above
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

TFS security operates on both individual users and groups. You can assign permissions directly to specific users or to Windows/Active Directory groups and TFS groups. This dual approach provides flexibility - use users for specific permissions and groups for role-based access control.

Multiple choice technology security

What is risk ?

  1. The potential for loss, damage or destruction of an asset as a result of a threat exploiting a vulnerability

  2. Anything that can exploit a vulnerability, intentionally or accidentally, and obtain, damage, or destroy an asset

  3. Weaknesses or gaps in a security program that can be exploited by threats to gain unauthorized access to an asset

  4. All of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Risk is the potential for loss, damage, or destruction when a threat exploits a vulnerability. Option B describes threat, Option C describes vulnerability - these are distinct but related security concepts.

Multiple choice technology security

What is vulnerability?

  1. Weaknesses or gaps in a security program that can be exploited by threats to gain unauthorized access to an asset

  2. The potential for loss, damage or destruction of an asset as a result of a threat exploiting a vulnerability

  3. Anything that can exploit a vulnerability, intentionally or accidentally, and obtain, damage, or destroy an asset

  4. All of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

A vulnerability is a weakness or gap in security that can be exploited. Option B describes risk (potential for loss), Option C describes threat (what exploits vulnerabilities). Understanding these distinctions is fundamental to security analysis.

Multiple choice technology security

In the below which of the following are true in case of RSA and Diffie-Hellman Protocol? i)    RSA is an Encryption protocol and Key exchange protocol ii)   RSA is an encryption protocol/Signing Protocol iii)  Diffie-Hellman is an Encryption protocol iv) Diffie-Hellman is only a key exchange protocol

  1. i&ii

  2. ii

  3. iii&iv

  4. iv
Reveal answer Fill a bubble to check yourself
B,D Correct answer
Explanation

RSA provides encryption and digital signatures (statement ii is true), but is not primarily a key exchange protocol (statement i is false). Diffie-Hellman is exclusively a key exchange protocol (statement iv is true), not an encryption protocol (statement iii is false).

Multiple choice technology security

What is an Internet firewall?

  1. Asbestos cloth that protects your computer from open flames

  2. A strong password

  3. Software or hardware that helps protect your computer against malicious attacks, such as computer viruses

  4. A lock you can place on your computer to prevent unauthorized people from using it
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

A firewall is software or hardware that protects against malicious attacks by filtering network traffic. Options A, B, and D are incorrect - A is nonsensical (firewalls aren't literal fire protection), B is authentication, and D is physical security.

Multiple choice technology security

What is "phishing"?

  1. "Spoofed" e-mails and fraudulent websites designed to fool recipients into divulging personal financial data

  2. A type of computer virus

  3. An example of a strong password

  4. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Phishing is a social engineering attack where attackers impersonate legitimate entities to trick victims into revealing sensitive information. The term comes from 'fishing' - attackers cast out many fraudulent emails hoping victims will 'bite' and provide their data. Option A correctly describes this as using spoofed emails and fake websites. Option B is incorrect because phishing is not a virus - it's a deception technique. Option C describes a security practice, not an attack.