Computer Knowledge ยท General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

In which of the following security features of operating system, peripheral devices and users must be protected from unauthorised access by the operating system?

  1. Authentication of users

  2. Protection of memory

  3. I/O devices access control

  4. Output reconciliation control

  5. Input validation control
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

In this security feature of operating system, peripheral devices and users must be protected from unauthorised access by the operating system.

Multiple choice

In which of the following security features of operating system, one way for a malicious user to gain inappropriate access is to spoof users, making them think that they are communicating with a legitimate security enforcement system?

  1. Intrusion detection

  2. Object reuse protection

  3. Discretionary access control

  4. Authentication of users

  5. Trusted path
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

In this security feature of operating system, one way for a malicious user to gain inappropriate access is to spoof users, making them think that they are communicating with a legitimate security enforcement system.

Multiple choice

Which of the following security techniques is used when a company with multiple offices wants to encrypt the data portion of all email to addresses as its other offices?

  1. Application proxy

  2. Stateful inspection firewall

  3. The certificate scheme

  4. ProtectedData

  5. Transport layer security
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This security technique is used when a company with multiple offices wants to encrypt the data portion of all email to addresses at its other offices.

Multiple choice

Which of the following protocol is used when the client may, at any time ask for a change in the existing cryptographic parameters like the handshake key exchange?

  1. Hyper text transfer protocol

  2. File transfer protocol

  3. Change CipherSpec protocol

  4. Simple mail transfer protocol

  5. User datagram protocol
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

This protocol is used when the client may, at any time ask for a change in the existing cryptographic parameters like the handshake key exchange.

Multiple choice

Which of the following security standards is used to secure email attachment, handle all types of attachments, such as sound, presentation, graphics, etc?

  1. Secure multipurpose internet mail extension

  2. Stateful inspection firewall

  3. The certificate scheme

  4. Message confidentiality

  5. Transport layer security
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This security standard is used to secure email attachments, handles all types of attachments, such as sound, presentation, graphics, etc.

Multiple choice

Which of the following security mechanisms is a dynamic and automated scheme, which enables secure transaction between a vendor and a customer over the internet?

  1. Transport layer security

  2. Secure electronic transaction

  3. Message integrity check

  4. Non repudiation

  5. Stateful inspection firewall
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This security mechanism is a dynamic and automated scheme, which enables secure transaction between a vendor and a customer over the internet.

Multiple choice

To prevent introduction of viruses in files, a company will first pass all incoming files through a virus scanner. This activity is achieved by which of the following security techniques?

  1. Stateful inspection firewall

  2. Message integrity check

  3. ProtectedData

  4. Transport layer security

  5. Guard
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

To prevent introduction of viruses in files, a company will first pass all incoming files through a virus scanner. This activity is achieved by this security technique.

Multiple choice

Which of the following statements is incorrect about 'packet sniffing' method in Ethical hacking?

  1. It captures data from information packets.

  2. It can have user specific data or information.

  3. It does not require any administrator-level access to proceed.

  4. A packet sniffer can be installed on any cable modem user's computer.

  5. It causes the computer to crash and make it busy processing data that the user is unable to use.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

It does not make the system crash or busy in processing. Denial of Service attack makes the system crash.

Multiple choice

Which of the following statements is correct about 'Strobe Scan' in Port Scanning technique?

  1. This scanning technique is performed for limited ports.

  2. In this type of scan, the hackers try to connect to all the ports of the victim.

  3. It does not establish a complete connection with the host.

  4. It is a heavyweight scan.

  5. It is based on IP routing function.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In strobe scanning, the hackers try to scan only a selected number of port connections.