Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following statements is true about Symantec backup exec system recovery?

  1. It includes enforce policy-based encryption of files as they are copied in real-time to USBs.

  2. It includes scanning of backup images for confidential data.

  3. It includes incident data that can be imported into control compliance suite to identify systems that may be subject to technical control policies.

  4. It includes mobile management to enforce virtual private network settings on mobile devices.

  5. It uses messaging gateway to release and route quarantined messages directly from the DLP enforce platform.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Data loss prevention integrates with backup exec system recovery to enable scanning of backup images for confidential data.

Multiple choice

Which of the following statements is true about 'Symantec control compliance suite' technique in endpoint security?

  1. It includes scanning of backup images for confidential data.

  2. It is used to identify systems that may be subject to technical control policies based on the data that is stored in them.

  3. It includes enforce policy-based encryption of files as they are copied in real-time to USBs.

  4. It uses messaging gateway to release and route quarantined messages directly from the DLP enforce platform.

  5. It includes mobile management to enforce virtual private network settings on mobile devices.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This is correct as the incident data can be imported into control compliance suite to identify systems that may be subject to technical control policies based on the data that is stored in them.

Multiple choice

Which of the following statements is true about endpoint encryption technique?

  1. It is used to keep the email confidential, simplify compliance, and reduce management costs.

  2. It protects PCs, USB devices and removable media with full disk encryption.

  3. It provides an efficient and easy-to-use encryption service to keep the data safe in public and private clouds.

  4. It does not belong to enterprise data protection.

  5. It is used with VMware vSphere virtual environments.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This is correct, as it provides file encryption and removable media encryption, so that if lost or stolen, your data remains secure.

Multiple choice

Which of the following statements is false about Trend Micro™ mobile security?

  1. It is used to provide mobile security for all the data and applications.

  2. It is an important part of endpoint security.

  3. It enforces compliance and prevents data loss from lost or stolen mobile devices.

  4. It provides an efficient and easy-to-use encryption service to keep your data safe in public and private clouds.

  5. It is a component of the enterprise data protection.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Trend Micro™ mobile security does not work for cloud security.

Multiple choice

Which of the following statements is false about IRM (information rights management) in endpoint security?

  1. IRM prevents the leakage of sensitive information to others.

  2. It uses the encryption techniques to secure the documents.

  3. The authorised users can have their access revoked at any time.

  4. IRM protection does not require any document to be encrypted.

  5. It is suitable to sensitive data and triggers the IRM encryption process.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

This is incorrect, as IRM protection requires  documents to be encrypted.

Multiple choice

Which of the following statements is false about file shares, databases and document repositories security?

  1. It includes discover and protects confidential data stored on file shares, databases, and repositories.

  2. The policy-based encryption and digital rights management are required for such security.

  3. Scanning of files or documents is used for that.

  4. It also uses encryption techniques to secure the files.

  5. The business data owners can not review such network file policy violations directly from an intuitive online portal.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

It enables business data owners to review and remediate network file policy violations directly from an intuitive online portal.

Multiple choice

Which of the following statements is false about integrated DLP technique?

  1. It extends the existing security with single-click deployment of data loss prevention (DLP).

  2. It provides device security also.

  3. It does not provide central management for security and data protection.

  4. DLP policies can be enforced across multiple layers of security to prevent data loss.

  5. It also provides security for microsoft sharepoint.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Integrated DLP technique provides central management for security and data protection.

Multiple choice

Which of the following statements is false about email and web security?

  1. Email and the web can cause data loss.

  2. For email and web security, the detection of the data in the networking medium is needed.

  3. The users are not informed for the security policy violations while detecting the confidential data.

  4. Encryption gateways should be separated to secure the emails.

  5. Web security can be maintained by securing data from the HTTP protocol.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Network prevents  email detection of confidential data and notifies users of policy violations.

Multiple choice

Which of the following statements is false about the symantec data loss prevention for laptops and desktops?

  1. It is used to protect the data used within the network or in the network.

  2. This technique is used to scan and protect the confidential data.

  3. Endpoint agent monitors a wide range of user events on physical endpoints.

  4. It does not protect the shared data.

  5. It monitors the data transferred through the microsoft remote desktop protocol (RDP).
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Endpoint prevents confidential data from being copied or shared inappropriately over email, removable storage.

Multiple choice

Which of the following statements is false about data loss prevention (DLP)?

  1. It is used to prevent leaks of sensitive information.

  2. The monitoring and blocking DLP components run either on the network or on endpoints.

  3. DLP is used for the organisations that have all internal knowledge about the stored information.

  4. It can not block access of previously bypass information to the third parties.

  5. DLP provides decisions about content at a point in time.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

DLP is used where an organisation doesn't know where its sensitive information is being stored or sent.

Multiple choice

Which of the following statements is true about EAP?

  1. It uses an arbitrary authentication method, such as certificates, smart cards or credentials.

  2. It is used in certificate-based security environments.

  3. It uses a mutual authentication method that supports password-based user or computer authentication.

  4. It uses an authentication method that uses TLS to enhance the security of other authentication protocols.

  5. It provides security violations.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is correct for EAP and it is used to secure the smart cards and other personnel credentials.

Multiple choice

Which of the following will not help your computer's security?

  1. Firewall

  2. VLAN

  3. Good Password

  4. Updated software
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

A Virtual LAN (VLAN) is a network segmentation technique used within organizations, not a personal computer security measure. While VLANs improve network security by isolating traffic, the question asks about 'your computer's' personal security - which is protected by firewalls, strong passwords, and updated software. The other options are direct personal security tools.