Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

In which of the following security models, we would want to fabricate a model to embody variety of sensitivities and to portray the need to isolate subjects strictly from objects?

  1. Least privilege

  2. Security policy

  3. Bell-La padula confidentiality model

  4. Multilevel security model

  5. Lattice model of access security
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

In this model, we would want to fabricate a model to embody variety of sensitivities and to portray the need to isolate subjects strictly from objects.

Multiple choice

Which of the security standards performs some or all of the actions such as hash of the message, sign the hash by encrypting it with the sender's private key for the message integrity and authenticity etc?

  1. Pretty good privacy

  2. The certificate scheme

  3. DEK-Info

  4. Sender authenticity

  5. Stateful inspection firewall
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This security standard performs some or all of the following actions such as hash of the message, sign the hash by encrypting it with the sender's private key for message integrity and authenticity, etc.

Multiple choice

Directions: For this question, select the best of the answer choices given.

A computer equipped with signature-recognition software, which restricts access to a computer to those people whose signatures are on file, identifies a person's signature by analyzing not only the form of the signature but also such characteristics as pen pressure and signing speed. Even the most adept forgers cannot duplicate all of the characteristics the program analyzes. Which of the following can be logically concluded from the passage above?

  1. The time it takes to record and analyze a signature makes the software impractical for everyday use.

  2. Computers equipped with the software will soon be installed in most banks.

  3. Nobody can gain access to a computer equipped with the software solely by virtue of skill at forging signatures.

  4. Signature-recognition software has taken many years to develop and perfect.

  5. In many cases even authorized users are denied legitimate access to computers equipped with the software.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The software analyzes multiple signature characteristics including form, pen pressure, and speed. Since even skilled forgers cannot duplicate all these characteristics, skill alone cannot bypass the system. Option C logically follows - forgery skill is insufficient when the software checks characteristics beyond visual appearance.

Multiple choice

The most dangerous risk in leaking of information is

  1. ready access to online terminals

  2. online processing of data

  3. ignorance about the existence of risk

  4. all of these
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Unrecognized security risks present the greatest danger because organizations cannot implement defenses against threats they do not know exist. Visible risks like online terminals and processing can be addressed through proper controls, but ignorance leaves organizations completely vulnerable. Security awareness and risk assessment programs exist precisely to combat this hazard.

Multiple choice

In which of the following security policies, every data item under any level of categorisation will have varying levels of sensitivity such as public, proprietary or internal?

  1. Commercial security policy

  2. Security policy

  3. ProtectedData

  4. Military security policy

  5. Multilevel security
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In this security policy, every data item under any level of categorisation will have varying levels of sensitivity, such as public, proprietary or internal.

Multiple choice

Which of the following security techniques is used when a workstation could be vulnerable to malicious code, leakage of personal data stored on the workstation, and vulnerability scans to identify potential weakness?

  1. Stateful inspection firewall

  2. Transport layer security

  3. Personal firewall

  4. Message integrity check

  5. Sender authenticity
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

This security technique is used when a workstation could be vulnerable to malicious code, leakage of personal data stored on the workstation and vulnerability scans to identify potential weakness.

Multiple choice

Which of the following security features of a trusted operating system, occurs in military security policy where an individual data owner does not decide who has a top secret clearance?

  1. Discretionary access control

  2. Authentication of users

  3. Protection of memory

  4. Mandatory access control

  5. Object reuse protection

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

This security feature of trusted operating system occurs in military security where an individual data owner does not decide, who has a top secret clearance.