Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

CASE tool does not help in

  1. understanding requirements

  2. code generation

  3. security labels

  4. system prototyping

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

CASE (Computer-Aided Software Engineering) tools assist developers in requirements analysis, code generation, system prototyping, and documentation. Security labels are access control and security attributes managed by operating systems or databases, not a function provided by software engineering design tools.

Multiple choice

A policy on firewalls need not .........

  1. include log reports of database

  2. include guidelines for assessment of logs

  3. ensure that it is physically secured

  4. ensure that it is logically secured
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A firewall policy is concerned with network traffic filtering, access control, and logical security. Physical security of the firewall device is a facilities/operations concern, not part of the firewall configuration policy itself.

Multiple choice

The messages are converted into symbols through the process of

  1. encoding

  2. decoding

  3. bugging

  4. encryption
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Encoding is the process of converting messages into symbols, codes, or signals that can be transmitted through a communication channel. The sender encodes their thoughts into a format suitable for transmission. Decoding is the reverse process where the receiver interprets these symbols back into meaningful messages.

Multiple choice

Which of the following is called 'availability' in mobile security?

  1. A smartphone can limit access to itself and deprive the owner of the service.

  2. It denotes the customized information of the user specific data.

  3. It determines the web specific information.

  4. It determines the application specific information.

  5. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is correct statement about 'availability'.

Multiple choice

Which of the following causes the mobile threats and attacks?

  1. By Storing information on email, calendar etc.

  2. Using mobile Apps for downloading.

  3. SMS or MMS based purchasing.

  4. All of the above.

  5. Only (1) and (2) are correct.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

These are correct statements about mobile threats and attacks.

Multiple choice

Which of the following is called eavesdropping in mobile device security threats?

  1. These include worms, viruses, trojans and spyware.

  2. These threats can get the user's sensitive information.

  3. By these threats, the unauthorized users can easily access corporate e-mail accounts and applications, social media networks and more.

  4. These threats can modify the user programs.

  5. Both (1) and (2).
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

The eavesdropping threats unencrypt the sensitive data from the client and gather user specific information.

Multiple choice

Which of the following is called Mobile Malware in mobile device security threats?

  1. These include worms, viruses, trojans and spyware.

  2. These threats can get the user's sensitive information.

  3. By these threats, the unauthorized users can easily access corporate e-mail accounts and applications, social media networks and more.

  4. These threats can modify the user programs.

  5. Both (1) and (2).
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

These are called Mobile Malware.

Multiple choice

What is the importance of mobile device security in mobile computing?

  1. It relates to the security of personal and business information now stored on smartphones.

  2. Different security counter measures are being developed and applied to smartphones for the security measures.

  3. These technologies have the organisation specific information systems to be secure.

  4. All of the above.

  5. Both (1) and (3).
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All are the specific views related to mobile computing security.

Multiple choice

What is called Explicit permission in Malware attacks in Mobile device computing?

  1. It is allowed to infect the machine, clearly indicating its potential malicious behaviour. This is typical behaviour of a proof of concept malware.

  2. It is based on the fact that the user has a habit of installing software.

  3. It is related to a common behavior, such as opening an MMS or email.

  4. This attack is not possible in Malware attack.

  5. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is correct about Explicit permission in Malware attacks in Mobile device computing.

Multiple choice

Which of the following is called CardTrap in mobile computing?

  1. It is a virus that is available on different types of smartphone and it is used to deactivate the system and third party applications.

  2. It is a malicious software on Windows Mobile which aims to earn money for its authors,

  3. A computer worm which is designed to infect mobile phones running Symbian OS.

  4. It affects the user specific information.

  5. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is true statement as CardTrap badly affects the application specific information.