Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is called integrity as security requirements in application-to-application communication?

  1. To ensure that no one can read the message except the intended receiver

  2. To assure the receiver that the received message has not been altered in any way from the original

  3. A mechanism to prove that the sender really sent this message

  4. The process of proving one's identity

  5. None of the above
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This is called integrity requirement in application-to-application communication. Integrity checks the format of the message after received by the receiver.

Multiple choice

Which of the following is/are applicable for digital certificate in cryptography?

  1. It uses asymmetric encryption.

  2. A digital certificate can also provide information about the user's public key.

  3. The other party's public key can be extracted from the certificate.

  4. A digital certificate is issued by the client and server communication.

  5. All of the above
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

All options are correct about digital certificate in cryptography.

Multiple choice

Which of the following assumptions is/are false for asymmetric encryption in cryptography?

  1. It is slower than symmetric encryption.

  2. Both the sender and recipient can encrypt and decrypt all messages by the secret key.

  3. Any message that is encrypted by using the private key can only be decrypted by using the matching public key.

  4. The same message encrypted by the public key must be decrypted by the private key but with the same process.

  5. None of the above
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

This is false as in this encryption, the private key and public key are used simultaneously to encrypt and decrypt the message.

Multiple choice

Which of the following is/are applicable for Message Authentication Code (MAC) in cryptography?

  1. By using MAC, the authenticity assurances affirm the message's origin.

  2. MAC values are both generated and verified using the same secret key.

  3. MACs do not provide the property of non-repudiation.

  4. All of the above

  5. Both (1) and (2)
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

All are the correct statements about Message Authentication Code (MAC) in cryptography.

Multiple choice

Which of the following is/are correct about Electronic Codebook (ECB) in block ciphers?

  1. In ECB, the secret key is used to encrypt the plaintext block to form a ciphertext block.

  2. It is susceptible to a variety of brute-force attacks.

  3. It allows data to be encrypted in units smaller than the block size.

  4. It adds a feedback mechanism to the encryption scheme.

  5. Both (1) and (2)
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

These are the correct statements about ECB in block cipher.

Multiple choice

Which of the following is/are correct about brute force attack?

  1. These are the attacks by which the password database is attacked with all types of letters and combinations.

  2. It is one of the attacks that uses various methods to obtain the users' passwords.

  3. It checks the encrypted password database with words found in a dictionary.

  4. In this attack, the session is captured and replayed against the system.

  5. Both (1) and (3)
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is true as in brute force attack, the password database is hacked by the symmetric letter combination techniques.

Multiple choice

Which of the following is/are correct about replay attack?

  1. These are the attacks by which the password database is attacked with all types of letters and combinations.

  2. It is one of the attacks that uses various methods to obtain the users' passwords.

  3. It checks the encrypted password database with words found in a dictionary.

  4. In this attack, the session is captured and replayed against the system.

  5. None of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

This is known as replay attack. It works like authentication.

Multiple choice

Which of the following is/are incorrect about Kerberos protocol?

  1. It is used to provide mutual authentication.

  2. Kerberos is build on symmetric key cryptography.

  3. Kerberos does not use public-key cryptography.

  4. Kerberos protocol messages are protected against eavesdropping and replay attacks.

  5. None of the above
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

This is incorrect as Kerberos optionally may use public-key cryptography during certain phases of authentication.

Multiple choice

Which of the following is called 'Reverse proxy'?

  1. It is an internet facing proxy used to retrieve from a wide range of sources.

  2. It is usually an internet facing proxy used as a front end to control and protect access to a server on a private network.

  3. It performs tasks such as load balancing, authentication, decryption or caching.

  4. It is also known as Tunnelling proxy.

  5. Only (2) and (3).
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

These are the correct statements about Reverse proxy.

Multiple choice

Which of the following is/are correct statement (s) about effects of Hacking Attacks?

  1. Hacking attacks can have detrimental effects on the victim.

  2. The Malware infects desktop computers can reveal administrator credentials or FTP credentials.

  3. Vulnerabilities in the server operating system can provide a hacker access to the files that make up the web site.

  4. All of the above

  5. Only (1) and (3) are correct
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

These are the correct statements about the effects of hacking attacks.

Multiple choice

Which of the following is/are applicable for the 'Scanning phase' of hacking?

  1. It involves gathering information regarding a potential target without the targeted individual or company’s knowledge.

  2. It involves probing the network to discover individual hosts, IP addresses and services on the network.

  3. In this phase, once a hacker has gained access, they want to keep that access for future exploitation and attacks.

  4. It involves taking the information discovered during reconnaissance and using it to examine the network.

  5. Both (3) and (4)
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

This is called 'Scanning phase' of hacking. In this process, the information obtained after the reconnaissance process is used in the networking medium to provide better accessibility.

Multiple choice

Which of the following is/are applicable for the 'Reconnaissance phase' of hacking?

  1. It involves gathering information regarding a potential target without the targeted individual or company’s knowledge.

  2. It involves probing the network to discover individual hosts, IP addresses and services on the network.

  3. It involves taking the information discovered during reconnaissance and using it to examine the network.

  4. In this phase, once a hacker has gained access, they want to keep that access for future exploitation and attacks.

  5. Both (1) and (2)
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

These are the correct statements about 'Reconnaissance phase' of hacking.

Multiple choice

Which of the following is/are applicable for 'Enumeration' in Ethical Hacking?

  1. It is the process to gather the information about a target machine by actively connecting to it.

  2. This process is used to check and identify the user's specific details.

  3. This process is used to establish null sessions and connections.

  4. All of the above

  5. Only (1) and (2)
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

These are the correct statements about 'Enumeration' in Ethical Hacking.