Computer Knowledge ยท General Awareness
Information Security
4,143 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
-
Physical security
-
Data flow analysis
-
Permission analysis
-
Risk analysis
-
Authorization
B
Correct answer
Explanation
This analysis traces data from the points of the input to the points of the output.
-
Encryption
-
Server architecture
-
Protocols
-
Firewall
-
Input validation control
A
Correct answer
Explanation
This security technique provides adequate protection to sensitive data.
-
Permission analysis
-
Output reconciliation control
-
Change management control
-
Access control list
-
Access control
E
Correct answer
Explanation
By using this security technique, sensitive data must also be protected in storage and transfer.
-
Risk analysis
-
Transport level encryption
-
Output reconciliation control
-
Change management control
-
Backup and recovery control
E
Correct answer
Explanation
This security technique is used to maintain physical and logical controls over data backup.
-
SQL injection
-
Input validation
-
HMAC verification
-
SetCookies()
-
New MySQLi
A
Correct answer
Explanation
This method is a method in which an attacker inserts malicious code into queries that run on your database.
-
It uses multiple payload sets.
-
The total number of requests generated by the attack is the product of the number of payloads.
-
This attack iterates through all payload sets simultaneously.
-
Both (1) and (3)
-
Both (1) and (2)
E
Correct answer
Explanation
These are the correct statements about cluster bomb attack.
-
It is used to maintain the security of the database in a shared medium.
-
It provides a baseline for the security tools related to the organisation.
-
It is a list or dictionary that provides common names for publicly known information security vulnerabilities and exposures.
-
The MITRE Corporation maintains CVE and manages the CVE Editorial Board.
-
All of the above
E
Correct answer
Explanation
All are correct statements.
-
It has the information that includes the related CVE name(s).
-
It acts like the repository owner and is used to provide a mapping relative to a specific version of CVE.
-
A user can search using a CVE name to find related information.
-
Both (1) and (2)
-
Both (1) and (3)
A
Correct answer
Explanation
This is correct about 'CVE OUTPUT'.
-
It is based on the CVE list to identify the vulnerabilities in the database.
-
CVE has some numbers, IDs and unique identifier to detect vulnerability from the database.
-
Security of the database is officially compatible.
-
The CVE names, which are used as references in the CVE-ID field in all Alerts Vulnerability definitions stored in the Definitions Repository.
-
All of the above
E
Correct answer
Explanation
These are correct statements about Security of Database using CVE.
-
It is used to identify and store the information related to vulnerabilities in the system.
-
It collects the information and executes the files for the database specific to the vulnerability monitor.
-
It checks the version of a started program for vulnerabilities against a special database.
-
The vulnerability check is performed in the background mode and does not delay the program start.
-
Both (1) and (2)
E
Correct answer
Explanation
Both are the correct statements.
-
In this approach, all the admin functionality should be remapped onto internal IPs.
-
It allows SQL tables to be dropped, commands run on SQL servers or the Web server to have privilege escalation vulnerabilities.
-
This approach is used to identify the common coding errors might allow shell code to be uploaded to attack the server, or malicious files uploaded for other users.
-
Both (1) and (2)
-
Both (1) and (3)
A
Correct answer
Explanation
A certain IPs over a VPN functions include content management systems (CMS), server status scripts (server-status) and info scripts or SQL admin programs.
-
It is a program to attack the code of the target system.
-
It includes the buffer flow attacks to target the arbitrary software on the malicious web server.
-
It is a weakness or flaw in a computer application or operating system that can be exploited to cause the application to operate in a manner unintended by its designers.
-
All of the above
-
Both (1) and (2)
E
Correct answer
Explanation
These are correct statements about 'Exploit'.
-
It attacks the target organisation by spreading various malicious codes.
-
It includes the various spyware, malware and other malicious codes.
-
It is some flaw in our environment that a malicious attacker could use to cause damage in your organisation.
-
It is a tool by which an attacker uses a vulnerability to cause damage to the target system.
-
Both (1) and (2)
E
Correct answer
Explanation
These are the correct statements.
-
It is used to provide a network security from the targeted vulnerabilities.
-
It has a server component with a set of plugins to test various vulnerabilities in remote systems and applications.
-
It is a multi-threaded, multi-platform web server audit tool.
-
Both (1) and (2)
-
All of the above
D
Correct answer
Explanation
Both of these are correct about OpenVAS tool.
-
To ensure that no one can read the message except the intended receiver
-
To assure the receiver that the received message has not been altered in any way from the original
-
A mechanism to prove that the sender really sent this message
-
The process of proving one's identity
-
Both (2) and (4)
C
Correct answer
Explanation
This is correct about non-repudiation and it is used to check the status of the message, sent by the sender.