Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following hash algorithms is much less processor-intensive and the message digest is much shorter than the message?

  1. Password Hashing

  2. Digital Signature Hashing

  3. Downline Load Hashing

  4. Message Fingerprint Hashing

  5. Message Integrity Hashing
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Digital Signature Efficiency is a public key algorithm that is sufficiently processor-intensive and is desirable to compute a message digest of the message and sign that, rather than to sign the message directly. 

Multiple choice

Which of the following authentication tools consists of a question-answer dialog where the user responds to a set of pre-recorded questions or a token device that generates passwords or responses based on a pre-determined algorithm?

  1. Biometric authentication

  2. Out-of-band authentication

  3. Hardware tokens

  4. Challenge response

  5. Software tokens
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Challenge response activity consists of a question-answer dialog where the user responds to a set of pre-recorded questions, such as the mother's maiden name or a token device that generates passwords or responses based on a pre-determined algorithm.

Multiple choice

Which of the following is an incorrect statement about a digital certificate?

  1. Digital certificate or digital id is a kind of digital passport or credential.

  2. Digital id is the user's public key that has itself been digitally signed by someone trusted to do so.

  3. Organisations using digital certificates do not require a relationship with the remote site.

  4. Digital certificate is used to verify the trustworthiness of information.

  5. Digital certificate is used to confirm that a public key belongs to a specific organisation.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A digital certificate is used to verify the trustworthiness of a website and a digital signature is used to verify the trustworthiness of information.

Multiple choice

Which of the following is an incorrect statement about Kerberos protocol?

  1. Kerberos protocol is a network authentication protocol.

  2. Kerberos protocol is a secure protocol.

  3. Kerberos does not perform mutual authentication.

  4. Kerberos protocol requires only a single login per session.

  5. Kerberos depends on a trusted third party – a Key Distribution Centre (KDC).
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Kerberos performs mutual authentication.

Multiple choice

Which of the following statements is incorrect about Rijndael security algorithm?

  1. Rijndael security algorithm is a type of DES security algorithm.

  2. Rijndael security algorithm allows only 128, 192 and 256-bit key sizes.

  3. Rijndael security algorithm consists of an initial round key addition, Nr-1 rounds and a final round, where Nr is the number of rounds.

  4. Rijndael security algorithm is designed by Joan Daemen and Vincent Rijmen.

  5. Rijndael is well-suited for software implementations on 8-bit processors.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Rijndael security algorithm is a type of AES security algorithm and not a DES security algorithm.

Multiple choice

Encapsulation also means ______

  1. abstraction

  2. data hiding

  3. information access

  4. none of these
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Encapsulation means hiding internal object state and requiring all interaction through object methods. Data hiding prevents external code from directly accessing or modifying internal data, maintaining integrity and allowing implementation changes without affecting clients.