Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice
  1. Firewall

  2. Virus

  3. Worm

  4. Trozan

  5. Spam

Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

a firewall is a software or hardware-based network security system that controls the incoming and outgoing network traffic by analyzing the data packets and determining whether they should be allowed through or not, based on a rule set. A firewall establishes a barrier between a trusted, secure internal network and another network (e.g., the Internet) that is not assumed to be secure and trusted.

Multiple choice
  1. It prevent legitimate use of the system.

  2. It involves unauthorised use of resources.

  3. It involves unauthorised modification of data.

  4. It involves unauthorised reading of data.

  5. Both (1) and (2)

Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Yes, it is called 'Denial of service attack'. This is an accidental attack due to failure of bug's rapid spread.

Multiple choice
  1. PAP uses a two-way handshake.

  2. The password is unique and random.

  3. PAP conducts periodic password challenges.

  4. PAP uses MD5 hashing to keep the password secure.

Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

PAP uses a simple two-way handshake: the authenticator sends a challenge, and the peer responds with the username and password in plaintext. PAP is not secure as it transmits credentials unencrypted and doesn't use hashing like CHAP does.

Multiple choice
  1. Authorized access points can transmit excess traffic to rogue access points to help alleviate congestion.

  2. Unauthorized users can gain access to internal servers, thus causing a security hole.

  3. All traffic that uses the same channel as the rogue access point will be encrypted.

  4. All traffic that uses the same channel as the rogue access point will be required to authenticate.

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

A rogue access point is an unauthorized AP installed on a network without the IT department's knowledge, creating a security vulnerability. It allows unauthorized users to bypass network security and gain access to internal resources. Rogue APs do not alleviate congestion (option A), they do not encrypt traffic (option C - encryption is a function of legitimate APs using WPA/WPA2), and they definitely do not enforce authentication (option D - they bypass security). The primary risk is the security hole they create.

Multiple choice
  1. reconnaissance

  2. access

  3. DoS

  4. worm

  5. virus

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

A Denial of Service (DoS) attack overwhelms a server with fake requests, consuming resources and preventing legitimate users from accessing the service. The key symptom is a server operating slowly under a high volume of malicious requests. Reconnaissance (A) is information gathering, access attacks (B) involve unauthorized entry, while worms (D) and viruses (E) are self-replicating malware.

Multiple choice
  1. virus

  2. worm

  3. Trojan horse

  4. man-in-the-middle

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

A worm is a self-replicating malware that propagates across networks without requiring user interaction or a host program. Unlike viruses (which attach to files), Trojan horses (which disguise themselves as legitimate software), or man-in-the-middle attacks (which intercept communications), worms actively exploit vulnerabilities to spread automatically across network connections, making them particularly dangerous for network propagation.