Computer Knowledge ยท General Awareness
Information Security
4,143 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
-
Timetable
-
Current state
-
Requirements
-
Risk analysis
-
Realism
B
Correct answer
Explanation
It is describing the status of security at the time of the plan.
-
Firewall
-
Virus
-
Worm
-
Trozan
-
Spam
A
Correct answer
Explanation
a firewall is a software or hardware-based network security system that controls the incoming and outgoing network traffic by analyzing the data packets and determining whether they should be allowed through or not, based on a rule set. A firewall establishes a barrier between a trusted, secure internal network and another network (e.g., the Internet) that is not assumed to be secure and trusted.
-
It prevent legitimate use of the system.
-
It involves unauthorised use of resources.
-
It involves unauthorised modification of data.
-
It involves unauthorised reading of data.
-
Both (1) and (2)
A
Correct answer
Explanation
Yes, it is called 'Denial of service attack'. This is an accidental attack due to failure of bug's rapid spread.
-
Asymmetric cryptography
-
Symmetric cryptography
-
RC2CryptoService provider
-
Rijndael
-
ProtectedMemory
B
Correct answer
Explanation
This type of encryption uses a single shared secret key to encrypt and decrypt data.
-
Aes
-
MD5Cng
-
AesCryptoService provider
-
SHA1
-
ProtectedData
C
Correct answer
Explanation
It performs asymmetric encryption and decryption using the CAPI implementation of the advance encryption standard algorithm.
-
Aes
-
AsnEncodedDataCollection
-
RijndaelManaged
-
AesManaged
-
SHA1Managed
D
Correct answer
Explanation
It provides a managed implementation of the advanced encryption standard symmetric algorithm.
-
Asymmetric cryptography
-
PasswordDeriveBytes
-
MD5CryptoServiceProvider
-
Oid
-
Cryptographic signing
E
Correct answer
Explanation
It helps verify that data originates from a specific party by creating a digital signature that is unique to that party.
-
SHA512CrptoServiceProvider
-
SHA256Cng
-
SHA1
-
SHA512Cng
-
ProtectedMemory
D
Correct answer
Explanation
It provides a cryptography next generation implementation of the secure hash algorithm for 512 bit hash values.
-
SHA512CryptoServiceProvider
-
SHA256Managed
-
SHA512Managed
-
SHA1Managed
-
ProtectedData
C
Correct answer
Explanation
It computes the SHA512 hash algorithm for the input data using the managed library.
-
The remote session is encrypted.
-
A password is sent in plain text.
-
A connection that is using secure HTTP is enabled.
-
A local username database is used for authentication.
-
PAP uses a two-way handshake.
-
The password is unique and random.
-
PAP conducts periodic password challenges.
-
PAP uses MD5 hashing to keep the password secure.
A
Correct answer
Explanation
PAP uses a simple two-way handshake: the authenticator sends a challenge, and the peer responds with the username and password in plaintext. PAP is not secure as it transmits credentials unencrypted and doesn't use hashing like CHAP does.
-
Authorized access points can transmit excess traffic to rogue access points to help alleviate congestion.
-
Unauthorized users can gain access to internal servers, thus causing a security hole.
-
All traffic that uses the same channel as the rogue access point will be encrypted.
-
All traffic that uses the same channel as the rogue access point will be required to authenticate.
B
Correct answer
Explanation
A rogue access point is an unauthorized AP installed on a network without the IT department's knowledge, creating a security vulnerability. It allows unauthorized users to bypass network security and gain access to internal resources. Rogue APs do not alleviate congestion (option A), they do not encrypt traffic (option C - encryption is a function of legitimate APs using WPA/WPA2), and they definitely do not enforce authentication (option D - they bypass security). The primary risk is the security hole they create.
-
reconnaissance
-
access
-
DoS
-
worm
-
virus
C
Correct answer
Explanation
A Denial of Service (DoS) attack overwhelms a server with fake requests, consuming resources and preventing legitimate users from accessing the service. The key symptom is a server operating slowly under a high volume of malicious requests. Reconnaissance (A) is information gathering, access attacks (B) involve unauthorized entry, while worms (D) and viruses (E) are self-replicating malware.
-
vty
-
aux
-
console
-
enable secret
-
enable password
-
virus
-
worm
-
Trojan horse
-
man-in-the-middle
B
Correct answer
Explanation
A worm is a self-replicating malware that propagates across networks without requiring user interaction or a host program. Unlike viruses (which attach to files), Trojan horses (which disguise themselves as legitimate software), or man-in-the-middle attacks (which intercept communications), worms actively exploit vulnerabilities to spread automatically across network connections, making them particularly dangerous for network propagation.