Question 1

From the options below, which of them is not a threat to information security?
A)disaster
B)eavesdropping
C)information leakage
D)unchanged default password

Accepted Answer

Unchanged default password is a vulnerability, not a threat.

Question 2

Compromising confidential information comes under __________________________________________ 
A)bug
B)threat
C)vulnerability
D)attack

Accepted Answer

Compromising confidential information is considered a threat, as it represents a potential negative action or event that could harm the system or organization by exploiting vulnerabilities.

Question 3

Which of the following are not security policies?
A)regulatory
B)advisory
C)availability
D)user policies

Accepted Answer

Availability is not a security policy; it is a goal of security measures, often part of the CIA triad (Confidentiality, Integrity, Availability), rather than a policy type itself. Security policies are guidelines or rules set by an organization to protect its resources, and they typically include regulatory, advisory, and specific user policies.

Question 4

Examples of User Policies is/are:
A)password policies
B)internet usage
C)system use
D)all of the above

Accepted Answer

All of the options listed (password policies, internet usage, and system use) are examples of user policies. These policies guide how users interact with and access various IT resources, ensuring security and compliance.

Question 5

____________________________Policy ensures that the organization is maintaining standards set by specific industry regulation.
A)regulatory
B)advisory
C)availability
D)user policies

Accepted Answer

Regulatory policy ensures that an organization adheres to standards set by specific industry regulations, ensuring compliance with legal and industry standards.

Question 6

____________________________  Policy is like standards rules and regulations set by the management to advise their employees on their activity or behavior
A)regulatory
B)advisory
C)availability
D)user policies

Accepted Answer

Advisory policy is the correct term as it refers to guidelines set by management to advise employees on their behavior or activities, rather than enforcing strict rules or regulations.

Question 7

What defines the restrictions on employees such as usage?
A)regulatory
B)advisory
C)availability
D)user policies

Accepted Answer

User policies define the restrictions on employees such as usage, outlining acceptable and unacceptable behaviors and actions while using company resources.

Question 8

The full form of OSI is OSI model is ____________________________
A)open systems interconnection
B)open software interconnection
C)open systems internet
D)open software internet

Accepted Answer

The full form of OSI in OSI model is "Open Systems Interconnection." It is a conceptual framework used to understand and standardize the functions of a telecommunication or computing system without regard to its underlying internal structure and technology.

Question 9

In layer, vulnerabilities are directly associated with physical access to networks and hardware.
A)physical
B)data-link
C)network
D)application

Accepted Answer

Physical layer vulnerabilities are directly associated with the actual physical access to networks and hardware, such as the risk of someone gaining unauthorized physical access to routers, switches, and other networking equipment.

Question 10

Which of the following attack can actively modify communications or data?
A)both active and passive attacks
B)neither active and passive attacks
C)active attacks
D)passive attacks

Accepted Answer

Active attacks involve the attacker actively modifying the communications or data, unlike passive attacks where the attacker only monitors or intercepts data without altering it.

Question 11

Release of Message Content and Traffic analysis are type of :
A)both active and passive attacks
B)neither active and passive attacks
C)active attacks
D)passive attacks

Accepted Answer

Release of Message Content and Traffic Analysis are types of passive attacks. In passive attacks, the attacker intercepts data traveling through the network but does not alter the data itself.

Question 12

If communication between 2 people is overheard by a third person without manipulation of any data, it is called as:
A)release of message content-passive attack
B)traffic analysis -passive attacks
C)release of message content- active attacks
D)traffic analysis -active attacks

Accepted Answer

When a third person overhears communication without altering the data, it is considered a "release of message content," which is a type of passive attack. Passive attacks involve eavesdropping or monitoring transmissions without affecting the communication.

Question 13

If communication between 2 people is overheard by a third person without extraction of any data, it is called as:
A)release of message content-passive attack
B)traffic analysis -passive attacks
C)release of message content- active attacks
D)traffic analysis -active attacks

Accepted Answer

The answer of If communication between 2 people is overheard...

Question 14

____________________________  means when an attacker pretends to be authentic user
A)masquerade
B)replay
C)modification
D)traffic analysis

Accepted Answer

Masquerade refers to an attack where the attacker pretends to be an authentic user by stealing or faking their identity, often to gain unauthorized access to information or systems.

Question 15

______________ attack is when original data is modified and malicious data is inserted
A)masquerade
B)replay(rewrite)
C)modification
D)traffic analysis

Accepted Answer

The answer of ______________ attack is when original data is modified...

Question 16

When original data is changed to make it non-meaningful by attacker it is known as
A)masquerade
B)replay
C)modification of messages
D)traffic analysis

Accepted Answer

Modification of messages refers to the act of altering the original data by an attacker to make it non-meaningful or to serve a malicious purpose, without the authorization or knowledge of the data's owner.

Question 17

Which is the type of attack when Network is made unavailable for user
A)masquerade
B)replay
C)modification
D)denial of service

Accepted Answer

Denial of Service (DoS) attacks aim to make a network or service unavailable to its intended users, typically by overwhelming it with a flood of internet traffic.

Question 18

Modification of Data is done in:
A)both active and passive attacks
B)neither active and passive attacks
C)active attacks
D)passive attacks

Accepted Answer

The answer of Modification of Data is done in:
A)both active...

Question 19

The information that gets transformed in encryption is
A)plain text
B)parallel text
C)encrypted text
D)decrypted text

Accepted Answer

Encryption transforms plain text into encrypted text, making the original information unreadable to unauthorized users.

Question 20

A process of making the encrypted text readable again.
A)decryption
B)encryption
C)network security
D)information hiding

Accepted Answer

Decryption is the process of converting encrypted or coded text (ciphertext) back into its original form (plaintext), making it readable again.

Quiz 4: Information Security and Encryption

From the options below, which of them is not a threat to information security?

Compromising confidential information comes under __________________________________________

Which of the following are not security policies?

Examples of User Policies is/are:

____________________________Policy ensures that the organization is maintaining standards set by specific industry regulation.

____________________________ Policy is like standards rules and regulations set by the management to advise their employees on their activity or behavior

What defines the restrictions on employees such as usage?

The full form of OSI is OSI model is ____________________________

In layer, vulnerabilities are directly associated with physical access to networks and hardware.

Which of the following attack can actively modify communications or data?

Release of Message Content and Traffic analysis are type of :

If communication between 2 people is overheard by a third person without manipulation of any data, it is called as:

If communication between 2 people is overheard by a third person without extraction of any data, it is called as:

____________________________ means when an attacker pretends to be authentic user

______________ attack is when original data is modified and malicious data is inserted

When original data is changed to make it non-meaningful by attacker it is known as

Which is the type of attack when Network is made unavailable for user

Modification of Data is done in:

The information that gets transformed in encryption is

A process of making the encrypted text readable again.