Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

“Virtual Keyboard” is used to prevent

  1. to protect your password from malicious “Spyware” and “Trojan Programs”

  2. keylogging

  3. skimming

  4. hassels of searching keys on the keyboard

  5. slower inputs through physical keyboard
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Keystroke logging, often referred to as keylogging or Keyboard Capturing, is the action of recording the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that his actions are being monitored. A virtual keyboard is a software component that allows a user to enter characters. A virtual keyboard can usually be operated with multiple input devices, which may include a touchscreen, an actual computer keyboard and a computer mouse. Hence, Virtual Key Board are used.

Multiple choice

Which of the following statements is true about 'Scanner' in Burp Suite?

  1. This tool is used to execute the automated discovery of security vulnerabilities in web applications.

  2. This tool provides automated customised attacks against web applications.

  3. It is used to map the web applications functionality.

  4. It is used to manually modifying and reissuing individual HTTP requests.

  5. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is true as Burp Scanner provides the automated security mechanisms to test the web applications.

Multiple choice

Which of the following statements represents 'Intruder' in Burp Suite?

  1. This tool provides automated customised attacks against web applications.

  2. This tool is used to execute the automated discovery of security vulnerabilities in web applications.

  3. It is used to map the web applications functionality.

  4. It is used to manually modifying and reissuing individual HTTP requests.

  5. Both (1) and (2).
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Intruder tool is used to provides such customised attacks against web applications to check their efficiency.

Multiple choice

Which of the following statements is/are correct about Burp sequencer?

  1. It checks for the extent of randomness in the session tokens.

  2. It is an advanced tool for performing automated discovery of security vulnerabilities in web applications.

  3. It provides manual or intelligent decoding and encoding of application data.

  4. It does not generate the session tokens.

  5. Both (1) and (2).
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Burp sequencer tool checks for the extent of randomness in the session tokens generated by the Web application.

Multiple choice

Which of the following makes a network insecure?

  1. Encryption

  2. Network interface card

  3. Static key

  4. None of these
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Static encryption keys make networks insecure because they never change, giving attackers unlimited time to crack them through cryptanalysis. Encryption (option A) actually makes networks MORE secure by protecting data in transit. Network interface cards (option B) are simply hardware components for network connectivity, not security features.

Multiple choice

Firewall is used in PC for

  1. Security

  2. Authentication

  3. Data transmission

  4. None of these
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Firewalls are security devices that monitor and control network traffic based on predetermined rules, acting as barriers between trusted internal networks and untrusted external networks. They protect against unauthorized access and threats. Authentication (option B) is handled by separate authentication servers, and data transmission (option C) is what firewalls protect, not their purpose.

Multiple choice

Processing control procedures have

  1. Authorization and authentication of users

  2. Access control for online data

  3. Reporting of before and after images

  4. None of these
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Processing controls refer to validation checks, edit routines, and reconciliations performed during data processing (e.g., range checks, format validation, batch totals). Authorization (option A), access control (option B), and before/after image reporting (option C) are examples of access controls or audit controls, not processing controls per se.

Multiple choice

Which of the following security standards performs some action such as transmit the message to the recipient depending on whether confidentiality, authenticity, etc?

  1. Pretty good privacy

  2. Message integrity check

  3. Proc-Type

  4. Stateful inspection firewall

  5. Transport layer security
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This security standards performs some action such as transmit the message to the recipient depending on whether confidentiality, authenticity, etc.