Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is NOT a key component of the NIST Cybersecurity Framework?

  1. Identify

  2. Protect

  3. Detect

  4. Respond
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The NIST Cybersecurity Framework consists of five key components: Identify, Protect, Detect, Respond, and Recover.

Multiple choice

Which of the following is NOT a key component of the HIPAA Security Rule?

  1. Administrative safeguards

  2. Physical safeguards

  3. Technical safeguards

  4. Organizational safeguards
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The HIPAA Security Rule consists of three key components: Administrative safeguards, Physical safeguards, and Technical safeguards.

Multiple choice

Which of the following is NOT a key component of the PCI DSS?

  1. Build and maintain a secure network

  2. Protect cardholder data

  3. Maintain a vulnerability management program

  4. Implement strong access control measures
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The PCI DSS consists of six key components: Build and maintain a secure network, Protect cardholder data, Maintain a vulnerability management program, Implement strong authentication measures, Regularly test security systems and processes, and Maintain an information security policy.

Multiple choice

Which of the following is NOT a key component of the FISMA?

  1. Information security management system

  2. Risk assessment

  3. Incident response

  4. Business continuity
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The FISMA consists of three key components: Information security management system, Risk assessment, and Incident response.

Multiple choice

What is the primary goal of social engineering attacks?

  1. To gain unauthorized access to sensitive information

  2. To disrupt or disable computer systems

  3. To steal physical assets

  4. To cause physical harm to individuals
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Social engineering attacks aim to manipulate individuals into divulging confidential information or performing actions that compromise security, leading to unauthorized access to sensitive data.

Multiple choice

Which of the following is a common social engineering technique?

  1. Phishing

  2. Malware

  3. DDoS attacks

  4. SQL injection
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Phishing is a social engineering technique that involves sending fraudulent emails or creating fake websites to trick individuals into providing personal information or clicking malicious links.

Multiple choice

What is the primary defense against social engineering attacks?

  1. Strong passwords

  2. Firewalls

  3. Anti-virus software

  4. User education and awareness
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Educating users about social engineering techniques and raising awareness of potential threats is the most effective defense against these attacks, as it empowers individuals to recognize and resist manipulation attempts.

Multiple choice

Which of the following is an example of a human factor that can contribute to cybersecurity breaches?

  1. Lack of user training

  2. Software vulnerabilities

  3. Hardware failures

  4. Natural disasters
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Lack of user training can lead to employees making mistakes that compromise security, such as clicking on malicious links or providing sensitive information to unauthorized individuals.

Multiple choice

Which of the following is a recommended best practice for creating strong passwords?

  1. Use common words found in the dictionary

  2. Include personal information like birthdates or names

  3. Use the same password for multiple accounts

  4. Create long and complex passwords with a mix of characters
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Strong passwords should be long, complex, and include a mix of uppercase and lowercase letters, numbers, and symbols to make them difficult to guess or crack.

Multiple choice

What is the purpose of multi-factor authentication (MFA)?

  1. To increase the number of authentication factors required for access

  2. To reduce the number of authentication factors required for access

  3. To bypass the need for authentication altogether

  4. To allow users to access multiple accounts with a single password
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

MFA adds an extra layer of security by requiring multiple forms of authentication, such as a password and a one-time code sent to a mobile device, to verify a user's identity.

Multiple choice

Which of the following is a common social engineering tactic used in phishing attacks?

  1. Creating a sense of urgency or fear

  2. Offering too-good-to-be-true deals

  3. Impersonating legitimate organizations or individuals

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Phishing attacks often employ a combination of tactics to manipulate individuals, including creating a sense of urgency or fear, offering attractive deals, and impersonating legitimate entities to gain trust.

Multiple choice

What is the recommended approach to handling suspicious emails?

  1. Open and read the email to see what it's about

  2. Click on any links or attachments included in the email

  3. Forward the email to your IT department for analysis

  4. Delete the email without opening it
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

It is recommended to delete suspicious emails without opening them to avoid potential malware infections or phishing attempts.

Multiple choice

Which of the following is a good practice for protecting against social engineering attacks?

  1. Never share personal information online

  2. Be cautious of unsolicited emails and phone calls

  3. Use strong passwords and enable MFA

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

To protect against social engineering attacks, it is important to be vigilant, protect personal information, be cautious of suspicious communications, and implement strong security measures like strong passwords and MFA.

Multiple choice

Which of the following is a common human error that can lead to cybersecurity breaches?

  1. Clicking on malicious links in emails

  2. Using weak passwords

  3. Sharing sensitive information over unsecure networks

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Common human errors that can compromise cybersecurity include clicking on malicious links, using weak passwords, and sharing sensitive information over unsecure networks.

Multiple choice

Which of the following is a good practice for protecting against social engineering attacks on social media?

  1. Be cautious of friend requests from strangers

  2. Never share personal information on public posts

  3. Use strong passwords and enable privacy settings

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

To protect against social engineering attacks on social media, it is important to be cautious of friend requests from strangers, avoid sharing personal information publicly, use strong passwords, and enable privacy settings.