Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

A network administrator determines that falsified routing information is propagating through the network. What action can be used to address this threat?

  1. Update the IOS images.

  2. Change console passwords.

  3. Employ end-user authentication.

  4. Configure routing protocol authentication.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

When falsified routing information propagates through a network, it indicates that unauthorized or malicious routers are injecting incorrect routing data. The most effective mitigation is routing protocol authentication, which ensures that only trusted routers can participate in the routing process. Authentication methods like MD5 or plain text passwords verify the identity of routing peers before accepting their updates. Changing console passwords or updating IOS images address different security concerns (access control and software vulnerabilities respectively), while end-user authentication is unrelated to routing protocol security.

Multiple choice

Which characteristic of VPN technology prevents the contents of data communications from being read by unauthorized parties?

  1. QoS

  2. Latency

  3. Reliability

  4. Confidentiality
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

VPN technology uses encryption and tunneling protocols to provide confidentiality, which prevents unauthorized parties from reading the contents of data communications. Even if traffic is intercepted, the encrypted data is unreadable without the decryption keys. QoS manages traffic priority, latency refers to delay, and reliability ensures delivery - none of these prevent data from being read if intercepted.

Multiple choice

An administrator learns of an e-mail that has been received by a number of users in the company. This e-mail appears to come from the office of the administrator. The e-mail asks the users to confirm their account and password information. Which type of security threat does this e-mail represent?

  1. Cracking

  2. Phishing

  3. Phreaking

  4. Spamming
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Phishing is a social engineering attack where fraudulent emails appear to come from trusted sources (like the administrator's office) to trick recipients into revealing sensitive information like passwords and account details. The email described matches this pattern exactly. Cracking involves breaking passwords or encryption, phreaking refers to hacking telecommunications systems, and spamming is unsolicited bulk email - none of which involve tricking users into voluntarily revealing credentials.

Multiple choice

Compared with IDS systems, what can IPS systems do to provide further protection of computer systems?

  1. Detect potential attacks

  2. Stop the detected attack from executing

  3. Update OS patches for computer systems

  4. Scan computer systems for viruses and spyware
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

The key difference between IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) is that IDS is passive - it only detects and alerts on attacks. IPS is inline and can actively block or prevent detected attacks from executing. This provides real-time protection rather than just notification after the fact.