Competitive Exams : Computer Awareness - Security (Set 2)

Question 1

A user receives an email that appears to be from their bank, asking them to click a link to verify their account details due to "suspicious activity."

This is an example of what type of cyber attack?

Accepted Answer

B) Phishing

Answer

A) DDoS attack

Answer

C) Ransomware

Answer

D) Trojan horse

Question 2

Which of the following malware types is designed to replicate itself and spread to other computers without human interaction, often consuming system resources?

Accepted Answer

B) Worm

Answer

A) Virus

Answer

C) Spyware

Answer

D) Adware

Question 3

John wants to send a confidential document to his colleague.

To ensure that only his colleague can read it, even if intercepted, what security measure should John primarily use?

Accepted Answer

C) Encryption

Answer

A) Digital Signature

Answer

B) Firewall

Answer

D) Antivirus

Question 4

A website requires users to enter a username and password, and then also sends a one-time code to their mobile phone for login.

This additional step is known as:

Accepted Answer

B) Multi-Factor Authentication

Answer

A) Single Sign-On

Answer

C) Biometric Verification

Answer

D) Captcha

Question 5

A group of hackers overwhelms a server with a flood of traffic from multiple compromised computer systems, making the service unavailable to legitimate users.

This attack is specifically known as a:

Accepted Answer

C) Distributed Denial of Service (DDoS)

Answer

A) SQL Injection

Answer

B) Cross-Site Scripting

Answer

D) Man-in-the-Middle attack

Question 6

Which of the following practices is considered the MOST secure for creating a password?

Accepted Answer

B) Using a combination of uppercase, lowercase, numbers, and symbols

Answer

A) Using a common word like "password123"

Answer

C) Using a short, memorable phrase

Answer

D) Using personal information like birthdate

Question 7

A network device or software that monitors and filters incoming and outgoing network traffic based on an organization's previously established security policies is called a:

Accepted Answer

C) Firewall

Answer

A) Router

Answer

B) Switch

Answer

D) Modem

Question 8

Why is it crucial for an organization to regularly back up its data and have a disaster recovery plan?

Accepted Answer

C) To minimize data loss and ensure business continuity after a security incident or system failure

Answer

A) To comply with marketing regulations

Answer

B) To prevent unauthorized access

Answer

D) To increase network speed

Question 9

An attacker calls an employee, pretending to be from IT support, and asks for their login credentials to "fix a system issue."

This deceptive tactic is an example of:

Accepted Answer

C) Social Engineering

Answer

A) Brute-force attack

Answer

B) Buffer Overflow

Answer

D) Zero-day exploit

Question 10

What is the primary function of antivirus software on a computer system?

Accepted Answer

B) To detect and remove malicious software

Answer

A) To speed up internet browsing

Answer

C) To create backups of important files

Answer

D) To manage network connections

Question 11

When you see "https://" and a padlock icon in your web browser's address bar,

it indicates that the website is using a:

Accepted Answer

C) Digital Certificate for secure communication

Answer

A) VPN connection

Answer

B) Proxy server

Answer

D) Cookies to track your activity

Question 12

Which type of malicious software secretly gathers user information, such as browsing habits or keystrokes, and sends it to a third party without the user's knowledge?

Accepted Answer

C) Spyware

Answer

A) Ransomware

Answer

B) Adware

Answer

D) Rootkit

Question 13

A cyber attack encrypts a user's files and demands payment, usually in cryptocurrency, in exchange for the decryption key.

This type of attack is known as:

Accepted Answer

C) Ransomware

Answer

A) Phishing

Answer

B) Worm

Answer

D) Botnet

Question 14

A company uses a VPN to allow remote employees to securely access the company's internal network over the internet.

What is the main benefit provided by the VPN in this scenario?

Accepted Answer

C) Encrypted and secure connection

Answer

A) Faster internet speed

Answer

B) Anonymity on the public internet

Answer

D) Lower data costs

Question 15

Implementing strict rules that define who can access specific resources (like files, folders, or systems) and what actions they can perform is known as:

Accepted Answer

C) Access Control

Answer

A) Data Encryption

Answer

B) Intrusion Detection

Answer

D) Vulnerability Scanning

Question 16

Why is it important to regularly install software updates and security patches released by vendors?

Accepted Answer

B) To fix bugs and close security vulnerabilities

Answer

A) To change the user interface

Answer

C) To increase system storage

Answer

D) To install new applications

Question 17

A user downloads a free game online, but unbeknownst to them, the game contains hidden malicious code that gives an attacker remote access to their computer.

This is a classic example of a:

Accepted Answer

C) Trojan Horse

Answer

A) Virus

Answer

B) Worm

Answer

D) Rootkit

Question 18

Using fingerprints, facial recognition, or iris scans for authentication purposes falls under which category of security measures?

Accepted Answer

C) Biometric authentication

Answer

A) Token-based authentication

Answer

B) Knowledge-based authentication

Answer

D) Location-based authentication

Question 19

Ensuring that data has not been altered or destroyed in an unauthorized manner is referred to as maintaining:

Accepted Answer

C) Data Integrity

Answer

A) Data Confidentiality

Answer

B) Data Availability

Answer

D) Data Redundancy

Question 20

A software developer writes code that carefully validates all user inputs to prevent malicious data from being executed as commands.

This practice helps protect against which common vulnerability?

Accepted Answer

C) Injection attacks (e.g., SQL Injection)

Answer

A) Phishing

Answer

B) Brute-force attacks

Answer

D) DoS attacks