Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

What is the function of the public key out of the pair of keys used in an electronic signature?

  1. To create an electronic signature

  2. To verify an electronic signature

  3. To create and verify an electronic signature

  4. All of the above
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Using a public key is to authenticate that a message originated with a holder of the paired private key; or to encrypt a message with a public key to ensure that only the holder of the paired private key can decrypt it.

Multiple choice

Which of these functions of public and private keys is correct?

  1. Private key verifies the digital signatures and public key creates the digital signature.

  2. Public key verifies the digital signatures and private key creates the digital signature.

  3. Private key and public key are used to verify the digital signatures.

  4. Private key and public key are used to create the digital signatures.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

A digital signature in its simplest description is a hash of the data that is subsequently encrypted with the signer's private key. Since that is something only the signer has, that is where the trust comes from. EVERYONE has access to the signer's public key. So, to validate a digital signature, the recipient (1) calculates a hash of the same data, (2) decrypts the digital signature using the sender's PUBLIC key, and (3) compares the 2 hash values. If they match, the signature is considered valid. If they don't match, it either means that a different key was used to sign it, or that the data has been altered. Thus, public key helps in verification. The private key is used to encrypt the hash. The encrypted hash along with other information, such as the hashing algorithm, is the digital signature. Thus, it helps in creating the electronic signature.

Multiple choice

What is/are the function(s) of the private key, out of the pair of keys used in an electronic signature?

  1. To create an electronic signature

  2. To verify an electronic signature

  3. To create and verify an electronic signature

  4. All of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

The private key is used to encrypt the hash. The encrypted hash along with other information, such as the hashing algorithm, is the digital signature. Thus, it helps in creating the electronic signature.

Multiple choice

Which of the following is/are true about Cipher Block Chaining(CBC) and Cipher Feedback Mode (CFB)?

  1. The cipher feedback mode technique is more efficient as compared to cipher block chaining.

  2. CFB decryption is almost identical to CBC encryption performed in reverse.

  3. In CFB, the changed in the plaintext propagate forever in the ciphertext and encryption cannot be parallelized.

  4. All of the above.

  5. Both (2) and (3).
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

Yes, both the statements are correct.

Multiple choice

Which of the following is/are the false statements about PGP (Pretty Good Privacy) algorithm in e-mail security?

  1. PGP provides all security to the emails like privacy, digital signatures and compression.

  2. PGP does not work on Mac OS and Linux platform.

  3. PGP uses IDEA (International Data Encryption Standard) to encrypt the data.

  4. RSA uses a limited amount of data to encrypt or decrypt the data in PGP.

  5. None of the above
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

PGP is easily available in all the platforms like Windows, Linux, Unix and Mac.

Multiple choice

Which of the following is/are true for web security scheme?

  1. A message sent using PGP (Pretty Good Privacy) is first converted into canonical form.

  2. In PGP and PEM, each message is encrypted with a one-time key.

  3. PGP provides non-repudiation.

  4. PGP does not support X.509 certificate.

  5. All of the above.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This is true statement as both uses same technique for that.

Multiple choice

Which of the following is a false statement in SSL (Secure Socket Layer) in web security?

  1. SSL provides mutual authentication between the client and the server.

  2. SSL is also responsible for encryption of the message.

  3. SSL is also responsible for message integrity.

  4. SSL is used in banking and online transactions.

  5. SSL uses TCP protocol for secure communication.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

This is false statement as SSL uses HTTP protocol for that.