Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 19
Q381:
How does a buffer overflow affect a system?
A. It causes more data to be sent than the buffer can handle, potentially leading to system execution errors
B. It encrypts data to protect it from unauthorized access
C. It monitors network traffic to detect unauthorized activities
D. It prevents unauthorized access by limiting buffer sizes
Correct Answer:
A
Chapter: 19
Q382:
What type of attack is a "Ping of Death"?
A. A Denial-of-Service (DoS) attack using oversized ICMP packets
B. A Man-in-the-Middle attack using forged IP addresses
C. A Distributed Denial-of-Service (DDoS) attack using multiple sources
D. A Buffer Overflow attack that causes system crashes
Correct Answer:
A
Chapter: 19
Q383:
What is the goal of a timing attack?
A. To explore browser cache and steal cookies
B. To intercept and modify network packets
C. To overload a system with data requests
D. To spoof IP addresses and gain unauthorized access
Correct Answer:
A
Chapter: 19
Q384:
Which attack involves creating an ICMP packet larger than 65,535 bytes?
A. Ping of Death
B. Timing Attack
C. Buffer Overflow
D. Man-in-the-Middle
Correct Answer:
A
Chapter: 19
Q385:
What is the primary purpose of a buffer overflow attack?
A. To exploit application errors that cause system execution issues
B. To intercept and modify encrypted communications
C. To overload a system with email requests
D. To monitor network traffic for sensitive data
Correct Answer:
A
Chapter: 19
Q386:
In a DDoS attack, what role do compromised machines play?
A. They are used to participate in the attack as zombies
B. They monitor network traffic for unauthorized access
C. They encrypt data transmissions to prevent interception
D. They filter email traffic to reduce spam
Correct Answer:
A
Chapter: 19
Q387:
How can newer routers and firewall arrangements protect against spoofing?
A. By preventing the use of forged source IP addresses
B. By intercepting and decrypting encrypted communications
C. By monitoring and modifying data transmissions
D. By overloading the network with requests
Correct Answer:
A
Chapter: 19
Q388:
What type of attack uses social engineering techniques to gather information?
A. Social Engineering Attack
B. Buffer Overflow Attack
C. Man-in-the-Middle Attack
D. Distributed Denial-of-Service Attack
Correct Answer:
A
Chapter: 19
Q389:
What is the result of a successful mail bombing attack?
A. The target email address is flooded with an excessive volume of unsolicited emails
B. The target system is unable to respond to legitimate requests
C. The system experiences a buffer overflow
D. The attacker gains unauthorized access to sensitive data
Correct Answer:
A
Chapter: 19
Q390:
What is the main effect of a sniffer on a network?
A. It monitors and captures all data traveling over the network
B. It sends large volumes of data to overwhelm the network
C. It alters data packets to disrupt communications
D. It prevents unauthorized access by monitoring traffic
Correct Answer:
A
Chapter: 20
Q391:
What does a security policy define?
A. The set of authorized and unauthorized states of a system
B. The hardware configuration of a system
C. The software requirements for a system
D. The physical layout of a network
Correct Answer:
A
Chapter: 20
Q392:
Which aspect of security is concerned with information leaks?
A. Integrity
B. Availability
C. Confidentiality
D. Authorization
Correct Answer:
C
Chapter: 20
Q393:
What is an example of a mechanism that enforces a security policy?
A. A security policy statement
B. An encryption algorithm
C. File access controls
D. An unauthorized system state
Correct Answer:
B
Chapter: 20
Q394:
Which of the following best describes a security policy?
A. A formal statement that partitions system states into secure and non-secure
B. A mechanism that performs security functions
C. A set of software tools for security
D. A detailed network architecture plan
Correct Answer:
A
Chapter: 20
Q395:
What type of policy describes the conditions under which data can be altered?
A. Confidentiality Policy
B. Integrity Policy
C. Availability Policy
D. Authorization Policy
Correct Answer:
B
Chapter: 20
Q396:
What does a high-level policy language focus on?
A. Representing policy constraints using abstractions
B. Setting inputs or arguments for system commands
C. Controlling access to a specific hardware component
D. Modifying system software directly
Correct Answer:
A
Chapter: 20
Q397:
What does a low-level policy language involve?
A. Commands and syntax for setting or checking system constraints
B. Abstract expressions of policy constraints
C. Defining general principles of security
D. Designing complex security models
Correct Answer:
A
Chapter: 20
Q398:
Which model focuses on "Separation of duty"?
A. Chinese Wall Model
B. Clark-Wilson Model
C. Multilevel Security Model
D. Access Control List Model
Correct Answer:
B
Chapter: 20
Q399:
In the provided example, which student breached security?
A. The second student
B. The first student
C. Neither student
D. Both students
Correct Answer:
B
Chapter: 20
Q400:
What is the primary mission of information security?
A. To ensure that systems and contents remain unchanged
B. To modify system behavior for efficiency
C. To increase system performance
D. To control network traffic
Correct Answer:
A