Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Secure Electronic Transaction (SET) specification

  1. is a notice issued and verified by a certificate authority that guarantees whether a user or Web site is legitimate or not

  2. provides private-key encryption of all data that passes between a client and a server

  3. allows users to choose an encryption scheme for the data that passes between a client and a server

  4. uses a public-key encryption to secure credit-card transaction systems

  5. none of these
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

SET (Secure Electronic Transaction) is a protocol for securing credit card transactions over networks. It uses public-key encryption (digital certificates) to authenticate both merchants and cardholders, ensuring secure payment processing. Options A, B, and C describe other security concepts (digital certificates, SSL, and encryption choice respectively).

Multiple choice

Which of the following is NOT a good Web security strategy?

  1. Restrict access to the Web server; keep a minimum number of ports open

  2. Limit the users who can load software, edit or add files

  3. Add demo programs, so that users can test system without accessing production data

  4. Remove unnecessary compilers and interpreters

  5. None of these
Reveal answer Fill a bubble to check yourself
D Correct answer
Multiple choice

RSA is a/an

  1. symmetric cryptosystem

  2. asymmetric cryptosystem

  3. block cypher

  4. digital signature

  5. none of these
Reveal answer Fill a bubble to check yourself
D Correct answer
Multiple choice

In network security, a logic bomb is

  1. an undocumented way of gaining access to a system that is built into the system

  2. a program or subsection of a program designed with malevolent intent

  3. a program or code fragment that hides inside a program and performs a disguised function

  4. a self contained and independent program that is usually designed to propagate or spawn itself on infected systems and to seek other systems via available networks

  5. anything that can disrupt the operation, functioning, integrity or availability of a network or system
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

A program or subsection of a program designed with malevolent intent is called logic bomb.

Multiple choice

In C,

  1. data is secure

  2. data is insecure

  3. data is abstract

  4. none of the above
Reveal answer Fill a bubble to check yourself
B Correct answer
Multiple choice

The RSA algorithm uses a ____________ cryptography method.

  1. public key

  2. private key

  3. symmetric

  4. none of these
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

RSA (Rivest-Shamir-Adleman) is a public-key (asymmetric) cryptography algorithm. It uses a pair of keys: a public key for encryption and a private key for decryption. This is different from symmetric cryptography (like AES) which uses the same key for both operations.

Multiple choice

In which of following the security mechanisms, the hash used in the CertificateVerify message is the two-step hash of the hand-shake messages plus a pad and the master secret?

  1. Transport layer security

  2. Message authentication code

  3. Non repudiation

  4. Stateful inspection firewall

  5. Secure socket layer
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

In this security mechanism, the hash used in the Certificate Verify message is the two-step hash of the hand-shake messages plus a pad and the master secret.