Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following statements is correct about Trojan horse programs?

  1. These programs capture data from information packets.

  2. These programs infect the computer with the intruders.

  3. These are used by intruders to gain remote access to the computer.

  4. These programs cause the computer to crash or make it busy in processing data.

  5. Using these programs, a malicious web developer may attach a script to something sent to a website.
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Trojan horse programs allow intruders easy access to the computer and change the system configurations.

Multiple choice

Which of the following is false about cross-site scripting attack in Ethical hacking?

  1. This attack is spread by using the web URL.

  2. By this attack, a malicious script is transferred to the browser.

  3. This type of attack is very harmful for e-mails or other forms.

  4. It can be used by intruders to gather information.

  5. Due to this attack, the generated pages are affected where users can post text containing HTML tags.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

This attack cannot be used by intruders for such information.

Multiple choice

Which of the following is correct about DNS spoofing attack in Ethical hacking?

  1. The forging packets can be modified in this attack.

  2. This attack is performed by a single forged packet.

  3. It causes the changes in the domain names for the respective IP addresses.

  4. No web traffic is analysed in this attack.

  5. It affects the IP configuration.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

In this attack, the DNS server is spoofed to alter entries of domain names to reflect the attackers’ IP address.

Multiple choice

Which of the following is false about denial-of-service (DDoS) attack?

  1. This attack can be spread in a multitude of systems.

  2. It denies service to the system to legitimate users.

  3. It can exploit a vulnerability in one computer system and makes it the DDoS master.

  4. A network-centric attack overloads a service by using up bandwidth and an application-layer attack, which overloads a service or database with application calls.

  5. It gains malicious access to resources, applications or databases.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

SQL injection attack gains malicious access to resources, applications or databases. DDoS attack does not exploit database.

Multiple choice

Which of the following statements is incorrect about Man-in-the-middle attack?

  1. In this attack, the attacker makes independent connections with the victims.

  2. It is an attack on mutual authentication.

  3. It includes some form of endpoint authentication.

  4. It does not affect the transaction processing.

  5. SSL can authenticate one or both parties using a mutually trusted certification authority.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A MITM attack exploits the real time processing of transactions.

Multiple choice

Which of the following is correct about Sidejacking in Session Hijacking?

  1. It involves sniffing data packets to steal session cookies.

  2. It has the cookies which can contain encrypted login information.

  3. The attacker can launch a man-in-the-middle attack, intercepting all data between you and the network.

  4. This involves a malicious actor using readily available software to intercept data being sent from or to the device.

  5. It involves data synchronisation.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Sidejacking attack involves sniffing data packets to steal session cookies and hijack a user’s session.

Multiple choice

Which of the following is false about zero-day vulnerability in Ethical security?

  1. It is a flaw in software, hardware or firmware that is exploited.

  2. It shows that there are zero days between the time the vulnerability is discovered and the first attack.

  3. It is caused due to invalid software codes.

  4. This attack can cause the website to slow down.

  5. It occurs at the same time as vulnerability.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

This attack does not slow the website or any server.

Multiple choice

Which of the following statements is false about zero-day exploit attack?

  1. In this attack, the vulnerability becomes generally known.

  2. There are zero days between the time the vulnerability is discovered and the first attack.

  3. Hackers can also discover the vulnerability.

  4. The vulnerability is not known in advance.

  5. It can obtain any unencrypted information.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

This is incorrect as this attack cannot obtain any unencrypted information.

Multiple choice

Which of the following is incorrect about the removal of zero-day vulnerability attack?

  1. Virtual LAN/IPsec can be used to reduce this attack

  2. Deploying an intrusion detection system (IDS) helps to reduce this attack.

  3. Locking down wireless access points helps to remove this attack.

  4. Maximising protection against wireless-based attacks helps prevent this attack.

  5. Applying cryptographic techniques can reduce this attack.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

Cryptographic techniques are not useful to reduce this attack.

Multiple choice

Which of the following options is called Sniffing in Ethical hacking?

  1. It has the malicious actor using readily available software to intercept data.

  2. The attacker can launch a man-in-the-middle attack, intercepting all data between the user and the network.

  3. It can decrypt login information.

  4. This attack is performed by repeatedly executing invalid data.

  5. This is a form of Session Hijacking attack.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This involves a malicious actor using readily available software to intercept data being sent from or to the device.

Multiple choice

Converting stored or transmitted data to a coded form in order to prevent its unauthorized use is called_____________

  1. Ergonomics

  2. Encapsulation

  3. Emulation

  4. Encryption
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Encryption is the process of converting plaintext data into coded form (ciphertext) to prevent unauthorized access during storage or transmission. Only authorized parties with the decryption key can recover the original data. Ergonomics (Option A) relates to user comfort, Encapsulation (Option B) is an OOP concept for bundling data and methods, and Emulation (Option C) mimics one system on another.