Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice general knowledge
  1. Phishing

  2. Mishing

  3. Missing

  4. Masking

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Mishing (SMS phishing or voice phishing) is a fraud technique where scammers use mobile phone calls or text messages instead of emails to trick victims into revealing confidential information. The 'm' comes from mobile/SMS, distinguishing it from email-based phishing. The tactics are similar: creating urgency and impersonating legitimate entities.

Multiple choice general knowledge
  1. Phishing

  2. Mishing

  3. Missing

  4. Masking

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Mishing (SMS phishing or voice phishing) is a fraud technique where scammers use mobile phone calls or text messages instead of emails to trick victims into revealing confidential information. The 'm' comes from mobile/SMS, distinguishing it from email-based phishing. The tactics are similar: creating urgency and impersonating legitimate entities.

Multiple choice general knowledge
  1. wishing

  2. Vishing

  3. Viking

  4. Fishing

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Vishing is the correct term - it combines 'voice' and 'phishing'. This attack uses VoIP phone systems to deceive victims into revealing personal information, often by spoofing caller ID to appear as legitimate organizations. The other options are incorrect: 'wishing' is unrelated, 'Viking' refers to Norse seafarers, and 'Fishing' is the actual activity (the cybercrime is 'phishing' with a 'ph').

Multiple choice general knowledge history
  1. A code generation technique

  2. A sequence of fibonacci series

  3. A portable vault used to hide secret messages

  4. None of these

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

A Cryptex is a fictional portable vault with a cylindrical combination lock, introduced in Dan Brown's novel 'The Da Vinci Code.' The word is a portmanteau of 'cryptology' and 'codex' - it can only be opened with the correct password, and breaking it destroys the message inside.

Multiple choice general knowledge
  1. A malicious techique of tricking web users into revealing confidential information

  2. A device that sends and receivers data in a bit second

  3. A form of computer engineering

  4. A digital process that in used to display an image on the monitor

Reveal answer Fill a bubble to check yourself
A Correct answer
Multiple choice general knowledge science & technology
  1. secure

  2. secured

  3. security

  4. simple

Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In HTTPS, the 's' stands for 'secure' - it indicates the connection is encrypted using SSL/TLS protocols. While 'secured' or 'security' might seem logical, the standard abbreviation is simply 'secure'. 'Simple' is incorrect as HTTPS provides more security than HTTP.

Multiple choice general knowledge science & technology
  1. blankspace viruses

  2. cavity viruses

  3. gap viruses

  4. XSS Worm

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Cavity viruses infect executable files by inserting their code into unused spaces (cavities) within the file, which means they don't change the file's overall size. This stealth technique helps avoid detection based on file size changes. The other options are either made-up terms or unrelated attacks (XSS Worm is a web vulnerability, not a file virus type).

Multiple choice general knowledge
  1. To work-around batch abends

  2. To perform any temporary tests that we wish to

  3. To perform tests on source code not being changed for a release

  4. Options (a) and (c)

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The TEMP project on dimensions serves two purposes: working around batch abends (option A) and testing source code not being changed for the current release (option C). Option B (any temporary tests) is too broad and unfocused. Options A and C together are the correct answer.

Multiple choice general knowledge
  1. Process

  2. People

  3. Product

  4. Technology

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

People are widely considered the weakest link in security because they can be manipulated, make mistakes, or bypass technical controls through social engineering. Even the most sophisticated security systems can be compromised through human error, phishing attacks, or credential sharing.

Multiple choice general knowledge
  1. Intentional, Accidental, Malicious

  2. Accidental, Incidental, Deliberate

  3. Accidental, Ethical, Intentional

  4. Ethical and Non-ethical

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Hacking attempts can be categorized as accidental (unintentional access or exposure), ethical (authorized penetration testing and security research), or intentional (deliberate unauthorized access). This classification framework covers the full spectrum of hacking motivations and methods.

Multiple choice general knowledge
  1. One who uses the same tools and techniques as a hacker, but does so in order to disrupt services and bring attention to a political or social cause

  2. One who uses hacking skills in a legitimate way to gain a deeper understanding of the subject

  3. One who is a skilled hacker who sometimes acts legally, sometimes in good will, and sometimes not

  4. An amateur who lacks the ability to write sophisticated hacking programs or exploits on his own. Uses scripts or programs developed by others to attack computer systems and networks.

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A script kiddie is an amateur who lacks technical expertise to develop their own hacking tools or exploits. Instead, they use pre-written scripts and programs created by skilled hackers to attack systems. The term emphasizes their lack of understanding and reliance on existing tools.

Multiple choice general knowledge
  1. The shared community concept and interchange of information exposes personal information that can be used in social engineering attacks

  2. The rapid integration of new and advanced technology in web services often renders APIs for executable code and automated business processes weak in security and vulnerable to attacks

  3. Both of the above

  4. Only A

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Web 2.0's community-driven, information-sharing model creates multiple security risks: the exposure of personal data on social platforms facilitates social engineering attacks, while rapid API development often prioritizes functionality over security, creating vulnerabilities in automated processes. Both factors significantly threaten information security.