Computer Knowledge · General Awareness
Information Security
4,143 Questions
Information security involves protecting computer systems and data from unauthorized access, cyber threats, and damage. It is a core part of the computer knowledge section in various banking and government exams. Practicing these concepts helps in understanding digital signatures, network security, and access control effectively.
Cybersecurity threatsAccess controlCryptography basicsSecurity risk managementDatabase protection
Information Security Questions
-
Ease of use
-
Complete mediation
-
Object reuse protection
-
File and I/O device access control
-
Discretionary access control
B
Correct answer
Explanation
This security feature of a trusted operating system represents that all accesses are checked.
-
Biba integrity model
-
Lattice model of access security
-
Multilevel security model
-
Military security policy
-
Protection of memory
A
Correct answer
Explanation
This security model is constructed for preventing inappropriate modification of data.
-
Mandatory access control
-
Discretionary access control
-
Object reuse protection
-
Protection of memory
-
Lattice model of access security
A
Correct answer
Explanation
In this access control, a central authority determines what information is to be accessible by whom.
-
hackers
-
spam
-
viruses
-
identify theft
-
None of these
B
Correct answer
Explanation
Hackers, viruses, and identity theft are direct security threats that compromise data integrity or confidentiality. Spam is primarily a nuisance or a marketing annoyance, rather than a direct security or privacy risk in the same technical sense.
-
configuration
-
accessibility
-
authentication
-
logging in
-
None of these
C
Correct answer
Explanation
Authentication is the process of verifying the identity of a user, device, or system, typically through credentials like a username and password. Configuration refers to settings, and accessibility relates to usability for people with disabilities.
-
There have been instances of telephone subscribers vanishing into thin air without paying their bills.
-
The mobile phones have occasionally been used to carry out immoral acts.
-
Often it is necessary to establish the identity of the caller.
-
The verification of address has come in handy to establish the identity of perpetrators of crime.
-
The government proposes to defer the approval till a single national identity number system is introduced.
D
Correct answer
Explanation
The government ought to have a strong reason to insist on verification despite the inconvenience. (4) should definitely be more valid and immediate concern of the government.
-
hackers
-
spam
-
viruses
-
identify theft
-
none of these
B
Correct answer
Explanation
Hackers, viruses, and identity theft are direct security threats that compromise data or systems. Spam is primarily an annoyance or a nuisance communication rather than a direct security or privacy risk in the same category.
-
configuration
-
accessibility
-
authentication
-
logging in
-
None of these
C
Correct answer
Explanation
Authentication is the process of verifying the identity of a user, device, or system. Checking a login name and password is the most common form of user authentication.
-
Security networking in computers
-
Study of astrology through crystals
-
Cartooning
-
Study of ciphers (secret writings)
D
Correct answer
Explanation
Cryptography is the practice and study of techniques for secure communication in the presence of third parties, primarily involving ciphers.
-
Authencity
-
Integrity
-
Non-repudiability of origin
-
Regularity in dealings
D
Correct answer
Explanation
Regularity in dealings is not an essential element of security of e-commerce transactions. It is not essential that there must be dealings on a regular or continous basis between buyer and seller for its security. There may be only one transaction between buyer and seller and it may be secured if it is authentic, confidential ( privacy of transaction ), integrated.
-
Trojan
-
Firewall
-
Spyware
-
Ransomware
-
Adware
B
Correct answer
Explanation
A firewall is a software or hardware-based network security system that controls the incoming and outgoing network traffic based on applied rule set. A firewall establishes a barrier between a trusted, secure internal network and another network (e.g., the Internet) that is not assumed to be secure and trusted.
-
Using password to access
-
Using retention periods for all files
-
Allowing only EDP personnel to access any file
-
None of these
D
Correct answer
Explanation
The options A, B, and C are all standard data security practices. Since all listed options are valid security measures, 'None of these' is the correct choice as it implies none of the options are 'not' a security measure.
-
Stream ciphers
-
Block ciphers
-
Vernam ciphers
-
Crypto algorithms
-
Secret key algorithms
B
Correct answer
Explanation
This type of ciphers in cryptography are designed to take data blocks of a particular size, encrypt them with a key of particular size and yield a block of cipher text of a particular size.
-
Cipher block chaining
-
Electronic code book mode
-
Cipher feedback
-
Output feedback
-
Public key encryption
A
Correct answer
Explanation
This is the way of combining and feeding back the inputs and outputs of a cipher which hides the pattern in the plain text by systematically combining each block with a cipher text before actually encrypting it.
C
Correct answer
Explanation
This is a public key cryptosystem that offers both encryption and digital signatures for authentication.