Computer Knowledge · General Awareness
Information Security
4,634 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
-
Data encryption
-
Data integrity
-
Data encapsulation
-
Data redundancy
-
Polymorphism
A
Correct answer
Explanation
This option is correct as data encryption is the most effective way to achieve data security. It is used to protect data by encrypting it with a secret key.
-
Spamtrap
-
Crimeware
-
Computer virus hoax
-
Botnet
-
Email spam
C
Correct answer
Explanation
A computer virus hoax is a message warning the recipient of a non-existent computer virus threat. The message is usually a chain e-mail that tells the recipient to forward it to everyone they know.
-
Voice phishing
-
Phishing
-
Pharming
-
Skimming
-
Key logging
B
Correct answer
Explanation
Phishing is the act of attempting to acquire information such as usernames, passwords, and credit card details (and sometimes, indirectly, money) by masquerading as a trustworthy entity in an electronic communication.
-
keylogging
-
phishing
-
skimming
-
duplicating
-
none of these
C
Correct answer
Explanation
‘Card skimming’ is the illegal copying of information from the magnetic strip of a credit or ATM card. It is a more direct version of a phishing scam.
-
to protect your password from malicious “Spyware” and “Trojan Programs”
-
keylogging
-
skimming
-
hassels of searching keys on the keyboard
-
slower inputs through physical keyboard
B
Correct answer
Explanation
Keystroke logging, often referred to as keylogging or Keyboard Capturing, is the action of recording the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that his actions are being monitored. A virtual keyboard is a software component that allows a user to enter characters. A virtual keyboard can usually be operated with multiple input devices, which may include a touchscreen, an actual computer keyboard and a computer mouse. Hence, Virtual Key Board are used.
-
This tool is used to execute the automated discovery of security vulnerabilities in web applications.
-
This tool provides automated customised attacks against web applications.
-
It is used to map the web applications functionality.
-
It is used to manually modifying and reissuing individual HTTP requests.
-
None of the above
A
Correct answer
Explanation
This is true as Burp Scanner provides the automated security mechanisms to test the web applications.
-
This tool provides automated customised attacks against web applications.
-
This tool is used to execute the automated discovery of security vulnerabilities in web applications.
-
It is used to map the web applications functionality.
-
It is used to manually modifying and reissuing individual HTTP requests.
-
Both (1) and (2).
A
Correct answer
Explanation
Intruder tool is used to provides such customised attacks against web applications to check their efficiency.
-
It provides user authentication.
-
It provides alert about Intruder attack.
-
It is used to test SQL injection bugs.
-
It is used to compare the site maps.
-
All of the above.
E
Correct answer
Explanation
All are the correct statements.
-
It is used in manually testing of applications.
-
This tool can be used to modify requests to the server and resend them and observing the results.
-
It controls the traffic on the server side.
-
It also checks cookies and the connections for the specific requests.
-
Both (3) and (4).
E
Correct answer
Explanation
These are incorrect statements.
-
This is a tool used for performing manual or intelligent decoding and encoding of application data.
-
This tool automatically manage the proxies for web applications.
-
This tool performs the enumeration of web application's functionality.
-
All of the above.
-
Both (1) and (2).
A
Correct answer
Explanation
Decoder provides the encryption like security to the web application data by performing the coding and decoding of data.
-
Proxy server
-
Intruder
-
Spider
-
Repeater
-
Both (2) and (4)
D
Correct answer
Explanation
It is used for manually testing the web applications.
-
It checks for the extent of randomness in the session tokens.
-
It is an advanced tool for performing automated discovery of security vulnerabilities in web applications.
-
It provides manual or intelligent decoding and encoding of application data.
-
It does not generate the session tokens.
-
Both (1) and (2).
A
Correct answer
Explanation
Burp sequencer tool checks for the extent of randomness in the session tokens generated by the Web application.
-
It modifies the HTTP requests.
-
It checks the vulnerabilities in the web pages.
-
These start their process automatically.
-
All of the above.
-
Both (1) and (2).
E
Correct answer
Explanation
These are correct statements about Repeaters.
-
SQL injections
-
Cross site scripting
-
Parameter manipulation
-
Brute force attacks
-
All of the above
E
Correct answer
Explanation
All are the correct statements.
-
Intruder
-
Proxy server
-
Spider
-
Repeater
-
None of the above
A
Correct answer
Explanation
Intruder use this algorithm to generate the malicious HTTP requests in order to detect the vulnerabilities and SQL injection attacks.