Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is a recommended practice for securing mobile devices against phishing attacks?

  1. Enable automatic software updates

  2. Use strong passwords and change them regularly

  3. Be cautious of suspicious links and attachments in emails and messages

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

To protect against phishing attacks, it's important to keep software up to date, use strong passwords, and be vigilant about suspicious links and attachments.

Multiple choice

What is the primary concern regarding mobile security in healthcare?

  1. Data breaches

  2. Malware infections

  3. Device theft

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Mobile security in healthcare encompasses a range of concerns, including data breaches, malware infections, device theft, and other threats that can compromise patient data.

Multiple choice

Which of the following is NOT a recommended practice for securing mobile devices in healthcare?

  1. Using strong passwords

  2. Enabling two-factor authentication

  3. Jailbreaking or rooting devices

  4. Installing security updates
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Jailbreaking or rooting devices compromises the security of mobile devices by removing manufacturer-imposed restrictions, making them more vulnerable to malware and other threats.

Multiple choice

Which of the following is NOT a type of mobile malware commonly encountered in healthcare?

  1. Ransomware

  2. Spyware

  3. Adware

  4. Firmware attacks
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Firmware attacks are not typically associated with mobile malware in healthcare. Ransomware, spyware, and adware are more common types of mobile malware encountered in this sector.

Multiple choice

What is the role of encryption in protecting patient data on mobile devices?

  1. Encrypting data at rest

  2. Encrypting data in transit

  3. Both of the above

  4. None of the above
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Encryption plays a crucial role in protecting patient data on mobile devices by encrypting data both at rest (when stored on the device) and in transit (when being transmitted over a network).

Multiple choice

Which of the following is NOT a recommended practice for securing mobile devices used by healthcare professionals?

  1. Using a virtual private network (VPN)

  2. Disabling Bluetooth and Wi-Fi when not in use

  3. Allowing untrusted apps to be installed

  4. Using a strong password or passcode
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Allowing untrusted apps to be installed on mobile devices used by healthcare professionals poses a significant security risk, as these apps may contain malware or other malicious code.

Multiple choice

Which of the following is NOT a recommended practice for securing mobile devices used by patients?

  1. Using a strong password or passcode

  2. Enabling two-factor authentication

  3. Jailbreaking or rooting devices

  4. Installing security updates
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Jailbreaking or rooting devices compromises the security of mobile devices by removing manufacturer-imposed restrictions, making them more vulnerable to malware and other threats.

Multiple choice

Which of the following is NOT a recommended practice for securing mobile devices used by healthcare organizations?

  1. Using a mobile device management (MDM) solution

  2. Implementing a mobile security policy

  3. Conducting regular security audits

  4. Allowing employees to use personal devices for work purposes
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Allowing employees to use personal devices for work purposes, also known as BYOD (Bring Your Own Device), can introduce security risks if proper security measures are not implemented.

Multiple choice

Which of the following is NOT a recommended practice for securing mobile devices used by healthcare researchers?

  1. Using a strong password or passcode

  2. Enabling two-factor authentication

  3. Jailbreaking or rooting devices

  4. Installing security updates
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Jailbreaking or rooting devices compromises the security of mobile devices by removing manufacturer-imposed restrictions, making them more vulnerable to malware and other threats.

Multiple choice

Which type of cyberattack involves the unauthorized access, use, disclosure, disruption, modification, or destruction of information in an electronic format?

  1. Malware

  2. Phishing

  3. DDoS

  4. Data Breach
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A data breach is a type of cyberattack that involves the unauthorized access, use, disclosure, disruption, modification, or destruction of information in an electronic format.

Multiple choice

What is the term for a type of malware that encrypts a victim's files and demands a ransom payment to decrypt them?

  1. Trojan

  2. Worm

  3. Ransomware

  4. Spyware
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Ransomware is a type of malware that encrypts a victim's files and demands a ransom payment to decrypt them.

Multiple choice

Which type of cyberattack involves sending fraudulent emails or messages that appear to come from a legitimate source in order to trick victims into revealing personal or financial information?

  1. Malware

  2. Phishing

  3. DDoS

  4. Data Breach
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Phishing is a type of cyberattack that involves sending fraudulent emails or messages that appear to come from a legitimate source in order to trick victims into revealing personal or financial information.

Multiple choice

What is the term for a type of cyberattack that involves flooding a target system with so much traffic that it becomes unavailable to legitimate users?

  1. Malware

  2. Phishing

  3. DDoS

  4. Data Breach
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

A DDoS attack is a type of cyberattack that involves flooding a target system with so much traffic that it becomes unavailable to legitimate users.

Multiple choice

Which type of cyberattack involves the unauthorized access to a computer system or network in order to steal data or disrupt operations?

  1. Malware

  2. Phishing

  3. DDoS

  4. Hacking
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Hacking is a type of cyberattack that involves the unauthorized access to a computer system or network in order to steal data or disrupt operations.

Multiple choice

What is the term for a type of cyberattack that involves exploiting vulnerabilities in software or operating systems to gain unauthorized access to a system or network?

  1. Malware

  2. Phishing

  3. DDoS

  4. Exploit
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

An exploit is a type of cyberattack that involves exploiting vulnerabilities in software or operating systems to gain unauthorized access to a system or network.