Computer Knowledge ยท General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is/are true about Cipher Block Chaining(CBC) and Cipher Feedback Mode (CFB)?

  1. The cipher feedback mode technique is more efficient as compared to cipher block chaining.

  2. CFB decryption is almost identical to CBC encryption performed in reverse.

  3. In CFB, the changed in the plaintext propagate forever in the ciphertext and encryption cannot be parallelized.

  4. All of the above.

  5. Both (2) and (3).
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

Yes, both the statements are correct.

Multiple choice

Which of the following is/are the false statements about PGP (Pretty Good Privacy) algorithm in e-mail security?

  1. PGP provides all security to the emails like privacy, digital signatures and compression.

  2. PGP does not work on Mac OS and Linux platform.

  3. PGP uses IDEA (International Data Encryption Standard) to encrypt the data.

  4. RSA uses a limited amount of data to encrypt or decrypt the data in PGP.

  5. None of the above
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

PGP is easily available in all the platforms like Windows, Linux, Unix and Mac.

Multiple choice

Which of the following is/are true for web security scheme?

  1. A message sent using PGP (Pretty Good Privacy) is first converted into canonical form.

  2. In PGP and PEM, each message is encrypted with a one-time key.

  3. PGP provides non-repudiation.

  4. PGP does not support X.509 certificate.

  5. All of the above.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This is true statement as both uses same technique for that.

Multiple choice

Which of the following is a false statement in SSL (Secure Socket Layer) in web security?

  1. SSL provides mutual authentication between the client and the server.

  2. SSL is also responsible for encryption of the message.

  3. SSL is also responsible for message integrity.

  4. SSL is used in banking and online transactions.

  5. SSL uses TCP protocol for secure communication.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

This is false statement as SSL uses HTTP protocol for that.

Multiple choice

Which of the following is a false statement?

  1. Hash functions condenses arbitrary message to fixed size.

  2. A digital signature uses a hash function.

  3. There are quite a few similarities in the evolution of hash functions and block ciphers.

  4. Hash function is used to produce a fingerprint of a file, message, or other block of data.

  5. None of the above
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

All of the above statements are true.

Multiple choice

Which of the following statements is false about Message Authentication Code (MAC)?

  1. MAC uses an algorithm that creates a small fixed-sized block.

  2. It uses both secret key as well as public key to generate a small fixed-size block of data.

  3. It provides assurance that message is unaltered and comes from sender.

  4. MAC algorithm need not be reversible.

  5. MAC does not work like a digital signature.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This is false at it only uses a secret key for that and not any public key.

Multiple choice

Which of the following is not true about SHA (Secure Hash Algorithm) algorithm?

  1. SHA function processing message in 1024-bit blocks.

  2. It is widely used in SSL, PGP, SSH, S/MIME, and IPsec.

  3. SHA was designed for compatibility with increased security provided by the AES cipher.

  4. None of the above

  5. Both (3) and (4).
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Yes, this is correct answer. All of the above are the true statements.

Multiple choice

Which of the following is not true about digital signature?

  1. A digital signature verifies author, date and time of signature.

  2. Digital signature works on public-key cryptography.

  3. Digital signature protects two parties, who exchange messages from any third party.

  4. A digital signature made by sender signing entire message or hash with private-key.

  5. Both (3) and (4).
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

It does not protects two parties against each other.

Multiple choice

What is the use of Ticket-Granting Server (TGS) in Kerberos?

  1. It provides login validity of the user.

  2. It provides synchronization to the message.

  3. It provides message authentication.

  4. It provides proof of identity of users.

  5. None of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Yes, TGS provides proof of identity of tickets.

Multiple choice

What is the action of recording the keys struck on a keyboard referred to as?

  1. Crossposting

  2. Reality mining

  3. Keylogging

  4. Digital footprint

  5. Virtual keyboard
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Keystroke logging, often referred to as keylogging or keyboard capturing, is the action of recording (or logging) the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that their actions are being monitored.