Computer Knowledge ยท General Awareness
Information Security
4,634 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
-
WAF provides security for the web applications.
-
WAF can be network or host based.
-
WAF does not watch the all network traffic on networking system.
-
WAF can not analyse the application layer thoroughly.
-
Both (3) and (4)
D
Correct answer
Explanation
WAF analyses the application layer to monitor the traffic.
-
Information disclosure.
-
Remote command execution.
-
Loss of data availability.
-
All of the above
-
Both (1) and (2)
D
Correct answer
Explanation
All are the correct statements about SQL injection attack.
-
Configure the workstations and the servers to avoid them from auto-run.
-
Automated tools to monitor the workstations and servers.
-
Content filter should be use for web servers.
-
Minimum use of external devices.
-
All of the above
E
Correct answer
Explanation
All are the correct statements.
-
These attacks bypass the application's input or output filters to execute malicious scripts in the browser of the application's user.
-
The attackers use automated tools to guess passwords that use known dictionary words or that are otherwise predictable.
-
This attack bypass the application's input filters to gain unrestrained access to the underlying database.
-
Both (1) and (3)
-
None of the above
A
Correct answer
Explanation
This is called Cross-site scripting (XSS) attack.
-
Disable the unauthorised installed softwares.
-
Use of host based firewalls or filter ports to secure network services.
-
The services those are no longer needed should be turned off.
-
All of the above
-
Both (2) and (3)
D
Correct answer
Explanation
All are the tools to protect network services from the attackers.
-
Unauthorised Attacks
-
Virus Attacks
-
Data Driven Attacks
-
Fire Attacks
C
Correct answer
Explanation
Firewalls are network security systems that monitor and control incoming and outgoing network traffic based on predetermined security rules. They are specifically designed to block data driven attacks by filtering packets.
-
ECDiffieHellmanCngPublicKey
-
ECDiffieHellmanCng
-
ECDiffieHellmanPublicKey
-
ECDiffieHellman
-
ProtectedData
C
Correct answer
Explanation
This .NET cryptographic class provides an abstract super class from which all ECDiffieHellmanCngPublicKey implementations must inherit.
-
Stateful inspection firewall
-
Personal firewall
-
Transport layer security.
-
Message integrity check.
-
Sender authenticity.
B
Correct answer
Explanation
This security technique is configured to enforce some policy such as the user may decide that certain sites are trustworthy but most other sites are not.
-
The certificate scheme
-
Proc-Type
-
Secure multipurpose internet mail extension
-
Stateful inspection firewall
-
Transport layer security
C
Correct answer
Explanation
This security standard works with a variety of cryptographic algorithms such as RC2, AES etc... for symmetric encryption.
-
HMACMD5
-
HMACSHA1
-
KeyedHashAlgorithm
-
HMACRIPEMD160
-
ProtectedMemory
D
Correct answer
Explanation
This .NET cryptographic class computes a HMAC using the RIPEMD160 hash function.
-
HMACMD5
-
HMAC
-
HMACSHA1
-
ProtectedData
-
HashAlgorithm
B
Correct answer
Explanation
This .Net cryptographic class represents the abstract class from which all implementations of HMAC must derive.
-
ECDSA.
-
ECDSA CNG.
-
ECDiffieHellman.
-
DSA
-
Protected Memory.
A
Correct answer
Explanation
This .NET cryptographic class provides an abstract super class that encapsulates the ECDSA.
-
Transport layer security
-
Message authentication code
-
Sender authenticity
-
Stateful inspection firewall
-
Secure electronic transaction
E
Correct answer
Explanation
This security mechanism includes vital attributes such as confidentially of information, integrity of data etc.... required for secure over the internet credit-card transactions.
-
HMACSHA384
-
HMACSHA1
-
HMACMD5
-
ProtectedData
-
KeyedHashAlgorithm
A
Correct answer
Explanation
This .NET cryptographic class computes a HMAC using the secure hash algorithm 384 hash function.
-
HMACSHA512
-
HMACSHA1
-
HMACMD5
-
HashAlgorithm
-
ProtectedMemory
A
Correct answer
Explanation
This .NET cryptographic class computes a HMAC using the secure hash algorithm 512 hash function.