Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is an incorrect statement about zero day attack?

  1. It affects the application's vulnerability.

  2. It occurs during the vulnerability window.

  3. Malware can exploit zero day vulnerabilities.

  4. In this attack, a patch is not available.

  5. This attack is unknown to the vendor.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

A zero day attack refers to a hole in software that is unknown to the vendor.

Multiple choice

Which of the following statements is false about client authentication in Kerberos protocol?

  1. Client session key is encrypted using the secret key.

  2. 'Ticket-Granting-Ticket' is encrypted using the secret key of the TGS.

  3. AS (Authenticated Server) checks to see if the client is in its database.

  4. The secret is generated by AS.

  5. The client decrypts the confirmation using the client/server session key.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

The client does not decrypt the session key.

Multiple choice

Which of the following security measurements is not considered in wireless security on wireless ADSL router?

  1. These are open networks and easily accessible.

  2. SSID broadcast is disabled for such measurement.

  3. WPA is used to provide encryption techniques.

  4. Extensible Authentication Protocol (EAP) protection is used.

  5. The security is limited to some local areas.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

The wireless security is not limited and it exists remotely.

Multiple choice

Which of the following is an incorrect statement about MAC spoofing?

  1. It occurs when some network traffic is availabe for a hacker.

  2. It allows MAC filtering also.

  3. It combines various programs and specifies the MAC address.

  4. It is effective only for small residential (SOHO) networks.

  5. These attacks are enhanced by softwares such as LANjack.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

This is a false statement.

Multiple choice

Which of the following is an incorrect statement about DNS spoofing?

  1. It occurs due to false IP address accessibility.

  2. A cache holds an intentionally false IP address.

  3. It allows a sequence number to track the requests.

  4. DNSsec is based on private-key cryptography.

  5. DNS servers use random IDs in their queries.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

DNSsec is based on public-key cryptography.

Multiple choice

Which of the following statements is false about PGP (Pretty Good Privacy) in e-mail security?

  1. It provides authentication of the user's requests.

  2. It uses digital signatures.

  3. It supports multiple platforms.

  4. One cannot produce a number of versions of PGP easily.

  5. PGP encrypts data by using a block cipher called IDEA algorithm.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Since PGP is an open source, various people and groups have modified it and produced a number of versions.

Multiple choice

Which of the following is incorrect about X.509 Authentication Service?

  1. It is used to construct a public key certificate.

  2. It also defines authentication protocols.

  3. In this service, the algorithms are not standardised, but RSA recommended.

  4. It uses public-key crypto and digital signatures.

  5. It handles double encryption, non-standard mode of use, session keys, password attacks.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

X.509 does not handle the double encryption.

Multiple choice

Which of the following is the incorrect statement about the Authentication Server (AS) in Kerberos 4?

  1. It provides the authentication to the Ticket Granting Server(TGS).

  2. It verifies the user's access rights in the database.

  3. It creates the session key for the database.

  4. It encrypts the user's keys from user's password.

  5. It also decrypts ticket and verifies the request.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

This is false as AS does not decrypts the ticket, but the Ticket Granting Server (TGS) is responsible for that.

Multiple choice

Which of the following is incorrect about Block ciphers in cryptography?

  1. These ciphers process messages in blocks.

  2. These ciphers process messages a bit or byte at a time.

  3. Many current ciphers are block ciphers.

  4. These ciphers use bits, that have to be available before the block can be processed.

  5. These are used in broader range of applications.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This is incorrect as the stream ciphers process messages a bit or byte at a time when en/decrypting.