Quick Revision

GK One-Line Question & Answer

15541+ short questions with short answers, covering every category and sub-category on the site — no long articles to scroll through. Good for a fast recap before an exam, or a few minutes of daily practice.

Looking for exam process/strategy questions instead? Try the Exam Preparation FAQ →

Computer Fundamentals → Introduction to Computer 37

What is a digital certificate used for?
Proving identity and enabling encrypted communication (contains public key + owner info)
click to copy
Symmetric encryption uses?
Same key for encryption and decryption
click to copy
Asymmetric encryption uses?
Key pair — public key encrypts, private key decrypts (or vice versa)
click to copy
Which of these is a symmetric algorithm?
AES
click to copy
DMZ (Demilitarized Zone) in network security is?
Network segment between internet and internal network for public-facing servers
click to copy
IDS vs IPS: main difference is?
IDS only detects and alerts; IPS actively blocks threats
click to copy
Which tool is used for network vulnerability scanning?
Nessus / OpenVAS
click to copy
Password complexity requirements typically include?
Uppercase, lowercase, numbers, special characters, and minimum length
click to copy
Which hashing algorithm is considered broken (collision vulnerability)?
MD5
click to copy
HTTPS protects against?
Man-in-the-middle attacks and eavesdropping by encrypting data in transit
click to copy
VPN provides?
Encrypted tunnel for secure remote access and privacy
click to copy
Social engineering target is?
Human psychology — manipulating people rather than systems
click to copy
Pretexting in social engineering?
Creating fabricated scenario to extract information from victims
click to copy
Baiting social engineering attack?
Offering something enticing (USB drive, free download) to lure victims
click to copy
Tailgating (piggybacking) physical security attack?
Unauthorized person following authorized person through secured door
click to copy
Shoulder surfing attack involves?
Physically observing someone's screen or keyboard to steal information
click to copy
Dumpster diving attack involves?
Searching discarded documents/hardware for sensitive information
click to copy
Defense in depth security strategy uses?
Multiple overlapping security layers — compromise of one doesn't expose all
click to copy
Principle of least privilege means?
Grant only minimum permissions necessary for the job function
click to copy
Need-to-know principle?
Access to information only for those who need it for their role
click to copy
Security audit is?
Systematic review of security controls, policies, and compliance
click to copy
Red team vs Blue team in security?
Red team attacks (offensive); Blue team defends (defensive)
click to copy
Incident Response phases include?
Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned
click to copy
Forensic imaging of a hard drive creates?
Bit-for-bit exact copy preserving all data including deleted files
click to copy
Chain of custody in digital forensics?
Documentation tracking who handled evidence when and where
click to copy
Write blocker in forensics?
Hardware/software preventing any writes to evidence drive during imaging
click to copy
Which encryption mode for AES is most secure for disk encryption?
AES-XTS
click to copy
ECB mode encryption weakness?
Same plaintext blocks produce same ciphertext blocks — reveals patterns
click to copy
IV (Initialization Vector) in encryption?
Random value ensuring same plaintext encrypts differently each time
click to copy
Key stretching algorithms (PBKDF2, bcrypt) are used to?
Make brute-force attacks slower by requiring intensive computation for each guess
click to copy
Security token (hardware token) generates?
Time-based One-Time Password (TOTP) changing every 30 seconds
click to copy
TOTP (Time-based One-Time Password) standard is?
RFC 6238
click to copy
FIDO2 / WebAuthn standard provides?
Phishing-resistant passwordless authentication using public-key cryptography
click to copy
Security Assertion Markup Language (SAML) is used for?
Enterprise Single Sign-On using XML-based authentication assertions
click to copy
Dark web is accessible via?
Tor browser (anonymizing network)
click to copy
Tor network provides anonymity by?
Routing traffic through multiple encrypted hops (onion routing)
click to copy
Cryptojacking involves?
Secretly using victim's computing resources to mine cryptocurrency
click to copy

Computer Fundamentals → Computer Security 2

Firewall rules are processed in?
Top-to-bottom order — first matching rule applies
click to copy
Stateful firewall tracks?
Connection state — allows return traffic for established connections automatically
click to copy

Computer Fundamentals → Memory Units 1

Penetration test differs from vulnerability scan in?
Pen test actively exploits vulnerabilities; vuln scan only identifies them
click to copy