Computer Knowledge · General Awareness

Information Security

4,143 Questions

Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.

Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection

Information Security Questions

Multiple choice

Which of the following is/are applicable for the 'Maintaining Access phase' of hacking?

  1. It involves gathering information regarding a potential target without the targeted individual’s or company’s knowledge.

  2. It involves probing the network to discover individual hosts, IP addresses and services on the network.

  3. In this phase, once a hacker has gained access, they want to keep that access for future exploitation and attacks.

  4. It involves taking the information discovered during reconnaissance and using it to examine the network.

  5. Both (3) and (4)
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

This is correct about 'Maintaining Access phase' of hacking.

Multiple choice

Which of the following is/are applicable for the 'Gaining Access phase' of hacking?

  1. In this phase, once a hacker has gained access, they want to keep that access for future exploitation and attacks.

  2. It involves taking the information discovered during reconnaissance and using it to examine the network.

  3. It involves gathering information regarding a potential target without the targeted individual’s or company’s knowledge.

  4. In this phase, the vulnerabilities discovered during the reconnaissance and scanning phase are now exploited to gain access.

  5. None of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

This is true about 'Gaining Access'. This is a process in which access provides for the vulnerabilities and other exploits after filtration of the reconnaissance and scanning phase.

Multiple choice

Which of the following is/are applicable about the Port Scanning in Ethical Hacking?

  1. Port Scanning is used to find out the vulnerabilities in the services listing on a port.

  2. In this scanning, the associate resources find out the parts of the target organisation.

  3. This scanning involves connecting with TCP and UDP ports on a system.

  4. The most common and popular tool is Nmap in Port scanning.

  5. All of the above
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

All are the correct statements about Port Scanning in Ethical Hacking.

Multiple choice

Which of the following is/are incorrect about 'Covering Tracks' in hacking?

  1. In this process, the hackers cover their tracks to avoid detection by security personnel.

  2. In this process, the hackers remove all traces of the attack, such as log files or intrusion detection system (IDS) alarms.

  3. In this process, once the hacker owns the system, they can use it as a base to launch additional attacks.

  4. The steganography, the use of tunneling protocols and altering log files are the example of such processes.

  5. Both (2) and (3)
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

This is incorrect statement about 'Covering Tracks' process in hacking and this is known as 'Maintaining access'.

Multiple choice

Which of the following is/are the scenarios of Computer hacking?

  1. Hacking is a breach of computer security.

  2. Hackers may even delete sensitive information on gaining access to it.

  3. Identity theft is another important consequence of computer hacking.

  4. It can lead to theft of critical business information.

  5. All of the above
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

All are the scenarios of Computer hacking.

Multiple choice

Which of the following are the causes to apply Penetration test in Ethical Hacking?

  1. To determe the feasibility of a particular set of attack vectors.

  2. Penetration tester identifies all level vulnerabilities for a successful exploit.

  3. Assessing the magnitude of potential business and operational impacts of successful attacks.

  4. All of the above

  5. Both (1) and (2)
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

These are the causes to apply Penetration test in Ethical Hacking.

Multiple choice

Which of the following is/are correct about IP spoofing attack in hacking?

  1. The attack may be directed to a specific computer addressed as though it is from that same computer.

  2. In this attack, the hackers may be able to break through other friendly but less secure networks and get access to your network using this method.

  3. This attack may cause the IP address location ambiguity.

  4. All of the above

  5. Both (1) and (3)
Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

These are the correct statements about IP spoofing attack in hacking.

Multiple choice

Which of the following is called Password cracking attack in hacking?

  1. In this attack, the attacker uses the authentication to track the session information.

  2. In this attack, the attacker may fake their IP address so the receiver thinks it is sent from a location that it is not actually from.

  3. This is an attack where DNS information is falsified.

  4. This attack may cause unauthorized access in the system.

  5. Both (1) and (4)
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

By Password cracking attack, the attacker gets the password of a user or administrator on a network and gain unauthorized access.

Multiple choice

Which of the following is known as Server spoofing in hacking?

  1. In this attack, the attacker uses the LANMAN authentication to get information about the credentials of the network packets.

  2. By this attack, the attacker gets the password of a user or administrator on a network and gain unauthorized access.

  3. In this attack, the attacker may fake their IP address so the receiver thinks it is sent from a location that it is not actually from.

  4. Both (1) and (2)

  5. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is correct as If the client is tricked into sending LANMAN authentication, the attacker can read their username and password from the network packets sent.

Multiple choice

Which of the following is called Session hijacking attack?

  1. In this attack, the attacker uses the authentication to track the session information.

  2. In this attack, the attacker may fake their IP address so the receiver thinks it is sent from a location that it is not actually from.

  3. This is an attack where DNS information is falsified.

  4. By this attack, the attacker gets the password of a user or administrator on a network and gain unauthorized access.

  5. None of the above
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

This is correct as once authentication is complete, they may attack the client computer to disable it, and use IP spoofing to claim to be the client who was just authenticated and steal the session.