Computer Knowledge · General Awareness

Information Security

4,634 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following statements is false about integrated DLP technique?

  1. It extends the existing security with single-click deployment of data loss prevention (DLP).

  2. It provides device security also.

  3. It does not provide central management for security and data protection.

  4. DLP policies can be enforced across multiple layers of security to prevent data loss.

  5. It also provides security for microsoft sharepoint.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Integrated DLP technique provides central management for security and data protection.

Multiple choice

Which of the following statements is false about email and web security?

  1. Email and the web can cause data loss.

  2. For email and web security, the detection of the data in the networking medium is needed.

  3. The users are not informed for the security policy violations while detecting the confidential data.

  4. Encryption gateways should be separated to secure the emails.

  5. Web security can be maintained by securing data from the HTTP protocol.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Network prevents  email detection of confidential data and notifies users of policy violations.

Multiple choice

Which of the following statements is false about the symantec data loss prevention for laptops and desktops?

  1. It is used to protect the data used within the network or in the network.

  2. This technique is used to scan and protect the confidential data.

  3. Endpoint agent monitors a wide range of user events on physical endpoints.

  4. It does not protect the shared data.

  5. It monitors the data transferred through the microsoft remote desktop protocol (RDP).
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Endpoint prevents confidential data from being copied or shared inappropriately over email, removable storage.

Multiple choice

Which of the following statements is false about IEEE 802.1X standard for endpoint security?

  1. It is part of the IEEE 802.1 group of networking protocols.

  2. It is used to secure the LAN or WLAN.

  3. It is based on extensible authentication protocol (EAP).

  4. It includes the server, authenticator and the supplier for the communication.

  5. It provides IDS/IPS security.
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

IEEE 802.1X standard does not provide IDS/IPS security.

Multiple choice

Which of the following statements is false about data loss prevention (DLP)?

  1. It is used to prevent leaks of sensitive information.

  2. The monitoring and blocking DLP components run either on the network or on endpoints.

  3. DLP is used for the organisations that have all internal knowledge about the stored information.

  4. It can not block access of previously bypass information to the third parties.

  5. DLP provides decisions about content at a point in time.
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

DLP is used where an organisation doesn't know where its sensitive information is being stored or sent.

Multiple choice

Which of the following statements is true about EAP?

  1. It uses an arbitrary authentication method, such as certificates, smart cards or credentials.

  2. It is used in certificate-based security environments.

  3. It uses a mutual authentication method that supports password-based user or computer authentication.

  4. It uses an authentication method that uses TLS to enhance the security of other authentication protocols.

  5. It provides security violations.
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is correct for EAP and it is used to secure the smart cards and other personnel credentials.

Multiple choice

Which of the following will not help your computer's security?

  1. Firewall

  2. VLAN

  3. Good Password

  4. Updated software
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

A Virtual LAN (VLAN) is a network segmentation technique used within organizations, not a personal computer security measure. While VLANs improve network security by isolating traffic, the question asks about 'your computer's' personal security - which is protected by firewalls, strong passwords, and updated software. The other options are direct personal security tools.

Multiple choice

Secure Electronic Transaction (SET) specification

  1. is a notice issued and verified by a certificate authority that guarantees whether a user or Web site is legitimate or not

  2. provides private-key encryption of all data that passes between a client and a server

  3. allows users to choose an encryption scheme for the data that passes between a client and a server

  4. uses a public-key encryption to secure credit-card transaction systems

  5. none of these
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

SET (Secure Electronic Transaction) is a protocol for securing credit card transactions over networks. It uses public-key encryption (digital certificates) to authenticate both merchants and cardholders, ensuring secure payment processing. Options A, B, and C describe other security concepts (digital certificates, SSL, and encryption choice respectively).

Multiple choice

Which of the following is NOT a good Web security strategy?

  1. Restrict access to the Web server; keep a minimum number of ports open

  2. Limit the users who can load software, edit or add files

  3. Add demo programs, so that users can test system without accessing production data

  4. Remove unnecessary compilers and interpreters

  5. None of these
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Adding demo programs or test files to a production web server creates unnecessary attack surfaces and security vulnerabilities that unauthorized actors can exploit. Good web security practices require keeping servers minimal and free of unneeded code or demo tools.

Multiple choice

RSA is a/an

  1. symmetric cryptosystem

  2. asymmetric cryptosystem

  3. block cypher

  4. digital signature

  5. none of these
Reveal answer Fill a bubble to check yourself
D Correct answer
Multiple choice

In network security, a logic bomb is

  1. an undocumented way of gaining access to a system that is built into the system

  2. a program or subsection of a program designed with malevolent intent

  3. a program or code fragment that hides inside a program and performs a disguised function

  4. a self contained and independent program that is usually designed to propagate or spawn itself on infected systems and to seek other systems via available networks

  5. anything that can disrupt the operation, functioning, integrity or availability of a network or system
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

A program or subsection of a program designed with malevolent intent is called logic bomb.

Multiple choice

In C,

  1. data is secure

  2. data is insecure

  3. data is abstract

  4. none of the above
Reveal answer Fill a bubble to check yourself
B Correct answer