Computer Knowledge ยท General Awareness
Information Security
4,634 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
-
Netscape
-
Google
-
Yahoo
-
Microsoft
A
Correct answer
Explanation
SSL was developed by Netscape Communications Corporation in 1994 to ensure secure transactions on the web. It became the standard for encrypted web communication before being succeeded by TLS.
-
Phishing
-
Mishing
-
Missing
-
Masking
B
Correct answer
Explanation
Mishing (SMS phishing or voice phishing) is a fraud technique where scammers use mobile phone calls or text messages instead of emails to trick victims into revealing confidential information. The 'm' comes from mobile/SMS, distinguishing it from email-based phishing. The tactics are similar: creating urgency and impersonating legitimate entities.
-
Phishing
-
Mishing
-
Missing
-
Masking
B
Correct answer
Explanation
Mishing (SMS phishing or voice phishing) is a fraud technique where scammers use mobile phone calls or text messages instead of emails to trick victims into revealing confidential information. The 'm' comes from mobile/SMS, distinguishing it from email-based phishing. The tactics are similar: creating urgency and impersonating legitimate entities.
-
wishing
-
Vishing
-
Viking
-
Fishing
B
Correct answer
Explanation
Vishing is the correct term - it combines 'voice' and 'phishing'. This attack uses VoIP phone systems to deceive victims into revealing personal information, often by spoofing caller ID to appear as legitimate organizations. The other options are incorrect: 'wishing' is unrelated, 'Viking' refers to Norse seafarers, and 'Fishing' is the actual activity (the cybercrime is 'phishing' with a 'ph').
-
A code generation technique
-
A sequence of fibonacci series
-
A portable vault used to hide secret messages
-
None of these
C
Correct answer
Explanation
A Cryptex is a fictional portable vault with a cylindrical combination lock, introduced in Dan Brown's novel 'The Da Vinci Code.' The word is a portmanteau of 'cryptology' and 'codex' - it can only be opened with the correct password, and breaking it destroys the message inside.
-
A malicious techique of tricking web users into revealing confidential information
-
A device that sends and receivers data in a bit second
-
A form of computer engineering
-
A digital process that in used to display an image on the monitor
-
Spamming
-
Spoofing
-
Bombing
-
Spawning
B
Correct answer
Explanation
Email spoofing is the practice of altering email header information to make the message appear to come from a known or trusted source. This is commonly used in phishing attacks and spam campaigns.
-
secure
-
secured
-
security
-
simple
A
Correct answer
Explanation
In HTTPS, the 's' stands for 'secure' - it indicates the connection is encrypted using SSL/TLS protocols. While 'secured' or 'security' might seem logical, the standard abbreviation is simply 'secure'. 'Simple' is incorrect as HTTPS provides more security than HTTP.
-
blankspace viruses
-
cavity viruses
-
gap viruses
-
XSS Worm
B
Correct answer
Explanation
Cavity viruses infect executable files by inserting their code into unused spaces (cavities) within the file, which means they don't change the file's overall size. This stealth technique helps avoid detection based on file size changes. The other options are either made-up terms or unrelated attacks (XSS Worm is a web vulnerability, not a file virus type).
-
virus signature
-
virus pattern
-
virus class
-
virus phyllum
A
Correct answer
Explanation
A virus signature is a unique byte pattern or sequence of code that antivirus software uses to identify specific viruses. It's like a fingerprint that allows detection of known malware.
-
To work-around batch abends
-
To perform any temporary tests that we wish to
-
To perform tests on source code not being changed for a release
-
Options (a) and (c)
D
Correct answer
Explanation
The TEMP project on dimensions serves two purposes: working around batch abends (option A) and testing source code not being changed for the current release (option C). Option B (any temporary tests) is too broad and unfocused. Options A and C together are the correct answer.
-
Process
-
People
-
Product
-
Technology
B
Correct answer
Explanation
People are widely considered the weakest link in security because they can be manipulated, make mistakes, or bypass technical controls through social engineering. Even the most sophisticated security systems can be compromised through human error, phishing attacks, or credential sharing.
-
Intentional, Accidental, Malicious
-
Accidental, Incidental, Deliberate
-
Accidental, Ethical, Intentional
-
Ethical and Non-ethical
C
Correct answer
Explanation
Hacking attempts can be categorized as accidental (unintentional access or exposure), ethical (authorized penetration testing and security research), or intentional (deliberate unauthorized access). This classification framework covers the full spectrum of hacking motivations and methods.
-
One who uses the same tools and techniques as a hacker, but does so in order to disrupt services and bring attention to a political or social cause
-
One who uses hacking skills in a legitimate way to gain a deeper understanding of the subject
-
One who is a skilled hacker who sometimes acts legally, sometimes in good will, and sometimes not
-
An amateur who lacks the ability to write sophisticated hacking programs or exploits on his own. Uses scripts or programs developed by others to attack computer systems and networks.
D
Correct answer
Explanation
A script kiddie is an amateur who lacks technical expertise to develop their own hacking tools or exploits. Instead, they use pre-written scripts and programs created by skilled hackers to attack systems. The term emphasizes their lack of understanding and reliance on existing tools.
-
The shared community concept and interchange of information exposes personal information that can be used in social engineering attacks
-
The rapid integration of new and advanced technology in web services often renders APIs for executable code and automated business processes weak in security and vulnerable to attacks
-
Both of the above
-
Only A
C
Correct answer
Explanation
Web 2.0's community-driven, information-sharing model creates multiple security risks: the exposure of personal data on social platforms facilitates social engineering attacks, while rapid API development often prioritizes functionality over security, creating vulnerabilities in automated processes. Both factors significantly threaten information security.