Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice technology security

Which one of the following responses is not a recommended way to avoid being victimized by malicious Trojans targeting Symbian-based devices?

  1. Ensure users upgrade their devices every 12 months.

  2. Keep firmware and OS versions up to date.

  3. Use mobile antispyware and antivirus software.

  4. Install only Symbian-signed programs or programs from a trusted source.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Ensuring users upgrade their hardware every 12 months is an impractical and ineffective security measure against malware. In contrast, standard recommended practices for avoiding Symbian Trojans include keeping the operating system updated, installing mobile antivirus software, and only downloading signed applications from official, trusted sources.

Multiple choice technology security

The process to remove all SIM locks to restrict the use to specific countries and network providers from a phone is called as

  1. Hacking.

  2. jailbreaking

  3. unlocking

  4. None of the above
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Unlocking specifically refers to removing carrier restrictions that lock a phone to specific networks or countries. Hacking is a broad term covering many activities, while jailbreaking refers to removing manufacturer software restrictions on iOS devices.

Multiple choice technology storage

Secure web and External web primarily source data from

  1. DWH

  2. Core System

  3. CFD

  4. RRS
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

CFD is the designated primary data source for Secure web and External web interfaces in this system architecture. DWH (Data Warehouse) typically serves analytical rather than operational web needs. Core System and RRS are not the designated primary sources for these web interfaces.

Multiple choice technology architecture

Which of the following encryption is better suited for storing the passwords ?

  1. SHA

  2. AES

  3. 3DES

  4. RSA
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

SHA is correct because it's a cryptographic hash function, which is the proper way to store passwords. Passwords should be hashed (one-way), not encrypted (two-way). AES, 3DES, and RSA are encryption algorithms that can be reversed with the right key, making them unsuitable for secure password storage. If a database is compromised, encrypted passwords can be decrypted.

Multiple choice technology architecture

Identify the techniques that can be used to break password security ?

  1. Eavesdropping

  2. Replay attacks

  3. Social engineering

  4. Trojan horses

  5. All of the above
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

All of the above is correct because all four are valid password attack vectors. Eavesdropping captures passwords during transmission, replay attacks resyoken captured credentials, social engineering tricks users into revealing passwords, and Trojan horses can log keystrokes or steal stored passwords. Each represents a different attack surface.

Multiple choice technology security

In mobile devices, the PIN acts like a password preventing other people from gaining unauthorized access to your device. If a wrong PIN is entered three times in a row the handset is locked until you enter another code, called a PUK code.What do these codes stand for?

  1. Private Identification Number and Private Unique Key

  2. Personal Identification Number and PIN Unlock Key

  3. Private Identification Number and PIN Unlock Key

  4. Personal Identifcation Number and Personal Unlock Key
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Personal Identification Number and PIN Unlock Key is correct. PIN is the standard acronym for the code you enter to unlock devices. PUK stands for PIN Unlock Key, which is used to unlock the device when the wrong PIN is entered too many times. The distractors incorrectly use 'Private' or confuse the 'U' in PUK.

Multiple choice technology security

Which of the following is not a Bluetooth attack vector?

  1. BlueBugging, which lets an attacker make calls on another Bluetooth phone.

  2. BlueJacking, which lets an attacker add contacts to a Bluetooth device's phonebook.

  3. BlueScolding, which lets an attacker trigger program crashes on a Bluetooth device.

  4. BlueSmacking, which crashes a Bluetooth device by sending a "ping-of-death" message.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

BlueScolding is correct because it's not a real Bluetooth attack. BlueBugging (taking over device), BlueJacking (sending unsolicited messages/contacts), and BlueSmacking (ping-of-death DoS) are all documented Bluetooth attack vectors. 'BlueScolding' appears to be a fabricated term - the correct concept might be 'BlueSnarfing' (unauthorized data access).

Multiple choice technology security

Which one of the following responses is not a recommended way to avoid being victimized by malicious Trojans targeting Symbian-based devices?

  1. Ensure users upgrade their devices every 12 months.

  2. Keep firmware and OS versions up to date.

  3. Use mobile antispyware and antivirus software.

  4. Install only Symbian-signed programs or programs from a trusted source.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Ensure users upgrade their devices every 12 months is correct because it's NOT a recommended security practice. Regular hardware upgrades don't protect against Trojans. The recommended practices are: keeping firmware/OS updated, using security software, and only installing trusted/signed applications. Upgrading devices on a fixed schedule is a security policy, not a Trojan defense.

Multiple choice technology security

The process to remove all SIM locks to restrict the use to specific countries and network providers from a phone is called as

  1. Hacking.

  2. jailbreaking

  3. unlocking

  4. None of the above
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Unlocking is correct. Unlocking removes SIM locks that restrict a phone to specific carriers or countries. Hacking is a general term, jailbreaking specifically refers to removing iOS restrictions (installing unapproved apps), and unlocking is the correct term for removing carrier restrictions from any phone.

Multiple choice technology architecture

Identify the techniques that can be used to break password security ?

  1. Eavesdropping

  2. Replay attacks

  3. Social engineering

  4. Trojan horses

  5. All of the above
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

All listed techniques are valid password attack vectors. Eavesdropping captures passwords in transit, replay attacks reuse captured credentials, social engineering tricks users into revealing them, and trojans steal them from infected systems.

Multiple choice technology architecture

Most secure form of password among below

  1. One time password

  2. Static passwords

  3. Dynamic passwords

  4. Hybrid passwords
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

OTPs offer superior security by generating unique, single-use credentials that become invalid immediately after use. This prevents password reuse attacks and significantly reduces vulnerability to theft compared to static passwords.

Multiple choice technology architecture

User selected a password for his account, system detected that the password is been used by another user, what is the correct step

  1. System should indicate to the user that password is already linked to another user, as this comprimises password confidentialty

  2. Ignore and simply complete the password set process

  3. System cannot detect that the user's password are same

  4. Generate a password automatically such that it doesn't duplicate with any other users password and indicate the user of his auto generated password
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Password systems should never indicate whether a password is already in use, as this reveals account information to attackers. Best practice is to accept password reuse while maintaining password hashing for independent account security.

Multiple choice technology architecture

Which of the following defines unattended session ?

  1. When a user fails to terminate the session properly

  2. When an intruder accesses another users session

  3. When a succession of failed login attempts have occured

  4. When a user leaves a host during an active session
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

An unattended session occurs when an authenticated user physically leaves their workstation or connection without properly terminating. This security risk exposes active sessions to potential unauthorized access by nearby individuals.