Please keep at least one language enabled. || కనీసం ఒక భాషను ఎంచుకోండి.
Question 1
ప్రశ్న 1
Which statement most accurately describes a computer virus?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A computer virus is self-replicating malicious code that infects other executable content or files.
• Its execution normally depends on the infected host content being activated or run.
• A virus is therefore different from a hardware fault, security protocol or network-security appliance.
• Its execution normally depends on the infected host content being activated or run.
• A virus is therefore different from a hardware fault, security protocol or network-security appliance.
వివరణ:
Question 2
ప్రశ్న 2
Which statement correctly distinguishes a computer worm from a traditional computer virus?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A worm is generally a self-contained malicious program capable of propagating itself, often through network mechanisms.
• A traditional virus replicates by infecting or attaching itself to other executable content.
• Both can be harmful malware, but their replication mechanisms differ.
• A traditional virus replicates by infecting or attaching itself to other executable content.
• Both can be harmful malware, but their replication mechanisms differ.
వివరణ:
Question 3
ప్రశ్న 3
An antivirus product quarantines a legitimate administrative utility after incorrectly classifying it as malware. Later analysis confirms that the utility is harmless. What is this classification error called?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A false positive occurs when legitimate or harmless content is incorrectly classified as malicious.
• Quarantine may temporarily isolate such a file until an administrator or security product determines whether restoration is appropriate.
• A false negative is the opposite problem: genuinely malicious content is incorrectly treated as harmless or goes undetected.
• Quarantine may temporarily isolate such a file until an administrator or security product determines whether restoration is appropriate.
• A false negative is the opposite problem: genuinely malicious content is incorrectly treated as harmless or goes undetected.
వివరణ:
Question 4
ప్రశ్న 4
A firewall uses a default-deny inbound policy. A newly installed server application requires TCP port 9443, but no rule permitting that traffic has been created. What should the firewall normally do with incoming connection attempts to that port?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A default-deny policy blocks traffic that has not been explicitly authorized.
• Installing an application does not itself create permission through a correctly configured firewall.
• An appropriate rule must therefore be created before the new inbound service becomes reachable.
• Installing an application does not itself create permission through a correctly configured firewall.
• An appropriate rule must therefore be created before the new inbound service becomes reachable.
వివరణ:
Question 5
ప్రశ్న 5
Which statement correctly compares a host-based firewall with a network firewall?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A host-based firewall operates on an individual computer or endpoint and can apply policies to traffic entering or leaving that host.
• A network firewall is positioned to control traffic between networks or security zones.
• The two approaches can be used together as complementary layers of network protection.
• A network firewall is positioned to control traffic between networks or security zones.
• The two approaches can be used together as complementary layers of network protection.
వివరణ:
Question 6
ప్రశ్న 6
An Internet-facing web server has the address 10.10.5.20 and should accept ordinary HTTPS connections on TCP port 443. Which inbound packet-filter rule most precisely permits this traffic?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Ordinary HTTPS server traffic uses TCP destination port 443.
• The narrow rule should specify the intended destination server as well as the required protocol and destination port.
• Permitting every internal destination or unrelated protocols would grant broader access than the stated requirement.
• The narrow rule should specify the intended destination server as well as the required protocol and destination port.
• Permitting every internal destination or unrelated protocols would grant broader access than the stated requirement.
వివరణ:
Question 7
ప్రశ్న 7
Which limitation is most characteristic of a basic stateless packet filter?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Basic stateless packet filtering commonly evaluates fields such as addresses, protocols and port numbers independently for each packet.
• It does not maintain the richer per-connection context used by stateful inspection.
• Application-level interpretation and malware removal require additional security capabilities beyond basic packet filtering.
• It does not maintain the richer per-connection context used by stateful inspection.
• Application-level interpretation and malware removal require additional security capabilities beyond basic packet filtering.
వివరణ:
Question 8
ప్రశ్న 8
Which statement best describes an application-proxy gateway firewall?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• An application-proxy gateway places a proxy agent between communicating endpoints.
• A permitted communication can therefore consist of two connections: client-to-proxy and proxy-to-destination.
• Because it operates with application awareness, the gateway can apply controls based on application-level information.
• A permitted communication can therefore consist of two connections: client-to-proxy and proxy-to-destination.
• Because it operates with application awareness, the gateway can apply controls based on application-level information.
వివరణ:
Question 9
ప్రశ్న 9
Which is a potential disadvantage of an application-proxy gateway compared with simpler packet filtering?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Application-proxy gateways perform deeper processing than basic packet filters and may inspect application commands or content.
• This additional interpretation can increase processing overhead.
• Proxy support can also depend on the protocols and applications that the gateway is designed to understand.
• This additional interpretation can increase processing overhead.
• Proxy support can also depend on the protocols and applications that the gateway is designed to understand.
వివరణ:
Question 10
ప్రశ్న 10
A user signs in with a password and then inserts a cryptographic smart card that is independently verified. Which authentication description is correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A password belongs to the knowledge-factor category: something the user knows.
• A controlled physical or cryptographic card belongs to the possession-factor category: something the user has.
• Using independently verified factors from different categories can provide multi-factor authentication.
• A controlled physical or cryptographic card belongs to the possession-factor category: something the user has.
• Using independently verified factors from different categories can provide multi-factor authentication.
వివరణ:
Question 11
ప్రశ్న 11
An online account receives hundreds of incorrect password attempts in rapid succession. Which control most directly limits the speed or number of repeated authentication attempts?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Rate limiting restricts how rapidly repeated authentication attempts can be made.
• Temporary lockout or similar throttling mechanisms can further reduce the practicality of repeated password guessing.
• Storage and display configuration do not control authentication-attempt frequency.
• Temporary lockout or similar throttling mechanisms can further reduce the practicality of repeated password guessing.
• Storage and display configuration do not control authentication-attempt frequency.
వివరణ:
Question 12
ప్రశ్న 12
A confidential database backup is stored on a removable SSD. The organization wants the information to remain unreadable if the SSD is stolen. Which security control most directly addresses this requirement?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Encryption can transform stored plaintext data into ciphertext that is unintelligible without the required cryptographic key.
• Protecting the key is essential because an exposed decryption key can defeat the confidentiality provided by encryption.
• This scenario concerns data at rest rather than merely network traffic.
• Protecting the key is essential because an exposed decryption key can defeat the confidentiality provided by encryption.
• This scenario concerns data at rest rather than merely network traffic.
వివరణ:
Question 13
ప్రశ్న 13
Which statement correctly compares symmetric and asymmetric cryptography?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Symmetric cryptography uses secret-key material shared by the parties performing the corresponding cryptographic operations.
• Asymmetric cryptography uses two related keys: a public key and a private key.
• These technologies can be combined in practical security protocols rather than being mutually exclusive.
• Asymmetric cryptography uses two related keys: a public key and a private key.
• These technologies can be combined in practical security protocols rather than being mutually exclusive.
వివరణ:
Question 14
ప్రశ్న 14
In a standard public-key digital-signature system, which key relationship is correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• In public-key digital signatures, the private key is kept under the signer's control and is used to generate the signature.
• The corresponding public key can be distributed and used to verify that signature.
• Digital signatures primarily support integrity and authenticity rather than confidentiality by themselves.
• The corresponding public key can be distributed and used to verify that signature.
• Digital signatures primarily support integrity and authenticity rather than confidentiality by themselves.
వివరణ:
Question 15
ప్రశ్న 15
Which statement most accurately distinguishes cryptographic hashing from reversible encryption?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Cryptographic hash functions generate digest values and are designed as one-way transformations rather than reversible encryption.
• Encryption is intended to conceal plaintext while permitting authorized decryption with the required key.
• Hashing and encryption therefore serve different cryptographic purposes.
• Encryption is intended to conceal plaintext while permitting authorized decryption with the required key.
• Hashing and encryption therefore serve different cryptographic purposes.
వివరణ:
Question 16
ప్రశ్న 16
Two branch offices must securely exchange private organizational traffic over the public Internet, and each office has a VPN gateway protecting its local network. Which VPN arrangement best matches this requirement?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A site-to-site VPN connects networks through VPN gateways located at the participating sites.
• Traffic between the protected networks can traverse the public Internet through the VPN's protected virtual path.
• This differs from a remote-access VPN designed primarily for an individual remote endpoint.
• Traffic between the protected networks can traverse the public Internet through the VPN's protected virtual path.
• This differs from a remote-access VPN designed primarily for an individual remote endpoint.
వివరణ:
Question 17
ప్రశ్న 17
A remote laptop is already infected with malware before its user establishes a correctly encrypted VPN connection to headquarters. Which statement is correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A VPN protects communication between its defined endpoints but does not automatically disinfect those endpoints.
• Malware already running on a laptop can remain a security risk after the VPN tunnel is established.
• Endpoint security, patching, malware protection and access controls therefore remain necessary.
• Malware already running on a laptop can remain a security risk after the VPN tunnel is established.
• Endpoint security, patching, malware protection and access controls therefore remain necessary.
వివరణ:
Question 18
ప్రశ్న 18
During an HTTPS connection, a browser validates the server's certificate through an appropriate trusted certificate chain and then establishes encrypted communication. What security combination does this primarily provide?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Certificate validation helps the client authenticate the server to which it is establishing the protected connection.
• TLS then provides cryptographic protection for data transferred through the channel, including confidentiality when appropriately configured.
• These functions are separate from storage redundancy and malware removal.
• TLS then provides cryptographic protection for data transferred through the channel, including confidentiality when appropriately configured.
• These functions are separate from storage redundancy and malware removal.
వివరణ:
Question 19
ప్రశ్న 19
A firewall permits outbound HTTPS traffic but is not configured to decrypt the TLS session. Which statement is most accurate?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• TLS protects the application payload by encrypting it between the relevant TLS endpoints.
• A firewall that does not terminate or otherwise appropriately decrypt that traffic cannot inspect the protected payload as ordinary plaintext.
• It may still make decisions using network and transport information visible outside the encrypted application data.
• A firewall that does not terminate or otherwise appropriately decrypt that traffic cannot inspect the protected payload as ordinary plaintext.
• It may still make decisions using network and transport information visible outside the encrypted application data.
వివరణ:
Question 20
ప్రశ్న 20
A department is designing secure remote access to confidential systems. Which combination represents the strongest layered approach among the following?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Strong authentication reduces unauthorized account access, while encryption protects sensitive information in transit.
• Firewall rules restrict unnecessary network exposure, and endpoint protection addresses threats resident on user devices.
• These controls complement one another rather than any single mechanism replacing the others.
• Firewall rules restrict unnecessary network exposure, and endpoint protection addresses threats resident on user devices.
• These controls complement one another rather than any single mechanism replacing the others.
వివరణ:
Question 21
ప్రశ్న 21
Which statement correctly describes the primary function of an SMPS in a desktop computer?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• SMPS stands for Switched-Mode Power Supply and supplies the electrical power required by internal PC components.
• It converts the available input power into regulated DC output voltages used by the motherboard, storage devices and other hardware.
• Data storage, database design and routing are unrelated functions.
• It converts the available input power into regulated DC output voltages used by the motherboard, storage devices and other hardware.
• Data storage, database design and routing are unrelated functions.
వివరణ:
Question 22
ప్రశ్న 22
Which statement best defines a process in an operating-system context?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A program is passive executable code stored in some form, while a process is an executing instance of program code.
• A process has execution state and uses resources such as memory, processor time and operating-system objects.
• Multiple processes can even execute instances of the same program independently.
• A process has execution state and uses resources such as memory, processor time and operating-system objects.
• Multiple processes can even execute instances of the same program independently.
వివరణ:
Question 23
ప్రశ్న 23
In Excel, B2:B6 contain {East, West, East, East, West} and C2:C6 contain {40, 60, 70, 55, 90}. What value is returned by =COUNTIFS(B2:B6,"East",C2:C6,">=50")?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• COUNTIFS counts rows satisfying all supplied criteria simultaneously.
• The East rows contain values 40, 70 and 55; among these, 70 and 55 satisfy the >=50 requirement.
• Therefore two rows meet both criteria, so the result is 2.
• The East rows contain values 40, 70 and 55; among these, 70 and 55 satisfy the >=50 requirement.
• Therefore two rows meet both criteria, so the result is 2.
వివరణ:
Question 24
ప్రశ్న 24
A Microsoft Access database contains thousands of temporary records whose Status is "Expired". The administrator wants to permanently remove all records meeting that criterion. Which Access query type is designed for this task?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A Delete query removes records from a table when they satisfy specified criteria.
• Because the action can permanently remove many records, the criteria should be verified and an appropriate backup should be available before execution.
• Select queries retrieve records, while Append queries add new records.
• Because the action can permanently remove many records, the criteria should be verified and an appropriate backup should be available before execution.
• Select queries retrieve records, while Append queries add new records.
వివరణ:
Question 25
ప్రశ్న 25
A Word document should use one header on odd-numbered pages and a different header on even-numbered pages within the same section. Which Word header/footer option is specifically intended for this layout?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Different Odd & Even Pages enables separate odd-page and even-page headers or footers within the applicable section.
• This is useful for book-style and duplex document layouts.
• Different First Page instead separates only the first-page header or footer from subsequent pages.
• This is useful for book-style and duplex document layouts.
• Different First Page instead separates only the first-page header or footer from subsequent pages.
వివరణ:
Answer Key సమాధానాల పట్టిక
-
Question 1 ప్రశ్న 1Answer: C. It is malicious code that replicates by infecting or attaching itself to other programs, files or executable host content. సమాధానం: C.
-
Question 2 ప్రశ్న 2Answer: A. A worm can operate as a self-contained program and propagate across networks without attaching itself to a host program, whereas a virus typically infects other executable content. సమాధానం: A.
-
Question 3 ప్రశ్న 3Answer: D. False positive సమాధానం: D.
-
Question 4 ప్రశ్న 4Answer: B. Block them until an applicable policy rule explicitly permits the traffic. సమాధానం: B.
-
Question 5 ప్రశ్న 5Answer: B. A host-based firewall runs on an individual endpoint, whereas a network firewall controls traffic at a network boundary or between network segments. సమాధానం: B.
-
Question 6 ప్రశ్న 6Answer: C. Permit TCP traffic whose destination IP is 10.10.5.20 and destination port is 443. సమాధానం: C.
-
Question 7 ప్రశ్న 7Answer: A. It normally makes decisions from packet-header information without understanding the full application transaction or maintaining connection state. సమాధానం: A.
-
Question 8 ప్రశ్న 8Answer: D. It acts as an intermediary, commonly creating one connection with the client and another separate connection with the destination server. సమాధానం: D.
-
Question 9 ప్రశ్న 9Answer: A. Application-level processing can require more computation, and specific application protocols may require corresponding proxy support. సమాధానం: A.
-
Question 10 ప్రశ్న 10Answer: C. The password represents something the user knows and the smart card represents something the user has, so different authentication-factor categories are used. సమాధానం: C.
-
Question 11 ప్రశ్న 11Answer: B. Authentication rate limiting or an appropriately configured temporary lockout mechanism సమాధానం: B.
-
Question 12 ప్రశ్న 12Answer: D. Encrypt the stored backup and protect the corresponding decryption key. సమాధానం: D.
-
Question 13 ప్రశ్న 13Answer: C. Symmetric encryption uses a shared secret key, whereas asymmetric cryptography uses a mathematically related public-private key pair for complementary operations. సమాధానం: C.
-
Question 14 ప్రశ్న 14Answer: B. The signer uses the private key to generate the digital signature, and the corresponding public key is used to verify it. సమాధానం: B.
-
Question 15 ప్రశ్న 15Answer: A. A cryptographic hash produces a fixed-purpose digest and is not designed to be reversed with a decryption key, whereas encryption is designed to be reversible by an authorized party using the required key. సమాధానం: A.
-
Question 16 ప్రశ్న 16Answer: D. Gateway-to-gateway or site-to-site VPN సమాధానం: D.
-
Question 17 ప్రశ్న 17Answer: B. The VPN can protect communications but does not by itself make a compromised endpoint trustworthy or malware-free. సమాధానం: B.
-
Question 18 ప్రశ్న 18Answer: C. Server authentication together with protection of the communication channel such as confidentiality సమాధానం: C.
-
Question 19 ప్రశ్న 19Answer: A. The firewall may apply policy using visible connection information, but it cannot directly inspect the encrypted application payload as plaintext without an appropriate decryption mechanism. సమాధానం: A.
-
Question 20 ప్రశ్న 20Answer: D. Use strong authentication, encrypted communication, appropriate firewall policy and maintained endpoint protection. సమాధానం: D.
-
Question 21 ప్రశ్న 21Answer: C. It converts incoming electrical power into regulated DC voltages required by internal computer components. సమాధానం: C.
-
Question 22 ప్రశ్న 22Answer: B. A program in execution together with its associated execution state and resources సమాధానం: B.
-
Question 23 ప్రశ్న 23Answer: D. 2 సమాధానం: D.
-
Question 24 ప్రశ్న 24Answer: A. Delete query సమాధానం: A.
-
Question 25 ప్రశ్న 25Answer: B. Different Odd & Even Pages సమాధానం: B.