Chapter Exam

Chapter-12 Security Aspects — Online MCQ Test

Q: Which of the following is NOT a type of malware?

Answer: C. Encryption — Encryption is a security technique, not a type of malware. Virus, Worm, and Trojan are all types of malware.

Q: Which layer of TCP/IP is responsible for routing?

Answer: C. Internet Layer — The Internet Layer, which includes IP (Internet Protocol), is responsible for routing data packets across networks.

COMPUTER SCIENCE · Grade 12 · CBSE(NCERT)

Practice Chapter-12 Security Aspects with a free chapter-wise online MCQ test for CBSE(NCERT) Grade 12 COMPUTER SCIENCE. This chapter covers: malware - phishing - spoofing - firewall - cookies - HTTP - FTP - TCP/IP. AI-generated questions from basic to board-exam level, with instant results and explanations.

Questions

20m

Time Limit

Attempts Left

10 random questions from this chapter (mixed difficulty)
Questions you've seen before won't repeat until the pool resets
You have 20 minutes — exam auto-submits when time is up
Maximum 3 attempts per chapter
Results and explanations shown immediately after submission

New here? Register free — includes 3 free chapter exams.

Chapter-12 Security Aspects — Important Questions & Answers (FAQ)

Frequently asked questions from CBSE(NCERT) Grade 12 COMPUTER SCIENCE — Chapter-12 Security Aspects, with answers and explanations. These are sample questions; the exam has its own separate question set.

What is malware?

A. Software designed to harm or exploit a computer system ✓
B. A type of firewall protection
C. A secure communication protocol
D. A web browser extension

Answer: A. Software designed to harm or exploit a computer system
Malware is malicious software designed to damage, disrupt, or gain unauthorized access to computer systems.

Which of the following is NOT a type of malware?

A. Virus
B. Worm
C. Encryption ✓
D. Trojan

Answer: C. Encryption
Encryption is a security technique, not a type of malware. Virus, Worm, and Trojan are all types of malware.

What is phishing?

A. A technique to catch computer bugs
B. An attempt to acquire sensitive information by deceiving users through fraudulent emails or websites ✓
C. A firewall security feature
D. A data compression method

Answer: B. An attempt to acquire sensitive information by deceiving users through fraudulent emails or websites
Phishing is a cyber attack where attackers trick users into revealing personal or financial information through deceptive communications.

What does spoofing mean in network security?

A. Creating backup copies of data
B. Impersonating another person or system to gain unauthorized access ✓
C. Compressing data files
D. Encrypting network traffic

Answer: B. Impersonating another person or system to gain unauthorized access
Spoofing involves forging or falsifying the source of information to deceive recipients and gain unauthorized access.

Which layer of TCP/IP is responsible for routing?

A. Application Layer
B. Transport Layer
C. Internet Layer ✓
D. Link Layer

Answer: C. Internet Layer
The Internet Layer, which includes IP (Internet Protocol), is responsible for routing data packets across networks.

What is the relationship between HTTP and HTTPS?

A. They are completely different protocols with no connection
B. HTTP is the secure version of HTTPS
C. HTTPS is HTTP with added SSL/TLS encryption for security ✓
D. They both transmit data without encryption

Answer: C. HTTPS is HTTP with added SSL/TLS encryption for security
HTTPS is an extension of HTTP that adds a layer of encryption using SSL/TLS protocols to protect data in transit.

Analyze: A company wants to protect its internal network from external threats. Which combination of security measures would be most effective?

A. Only using passwords
B. Firewall + encryption + access controls + regular security updates ✓
C. Disabling all network connections
D. Installing antivirus software only

Answer: B. Firewall + encryption + access controls + regular security updates
A multi-layered security approach combining firewalls, encryption, access controls, and regular updates provides comprehensive protection against various threats.

Compare packet filtering firewalls and stateful firewalls. Which statement is true?

A. Both perform identically with no differences
B. Stateful firewalls track connection states and are more sophisticated than simple packet filtering firewalls ✓
C. Packet filtering firewalls are more secure
D. Stateful firewalls cannot detect malware

Answer: B. Stateful firewalls track connection states and are more sophisticated than simple packet filtering firewalls
Stateful firewalls maintain connection state information and can make decisions based on the context of traffic flow, making them more intelligent than basic packet filtering.

Why might a sophisticated attacker use zero-day exploits rather than known vulnerabilities?

A. They are easier to detect
B. They avoid triggering security patches and defenses, allowing attacks to succeed against unprepared systems ✓
C. They are less effective
D. All systems are automatically protected

Answer: B. They avoid triggering security patches and defenses, allowing attacks to succeed against unprepared systems
Zero-day exploits target unknown vulnerabilities before vendors release patches, making them highly effective as no defense mechanisms exist yet.

An organization implements a WAF (Web Application Firewall) alongside a traditional network firewall. What additional security is provided?

A. No additional security is gained
B. WAF protects against application-level attacks like SQL injection and cross-site scripting while network firewall handles network-level threats ✓
C. WAF replaces the need for all other security
D. Network firewall becomes unnecessary

Answer: B. WAF protects against application-level attacks like SQL injection and cross-site scripting while network firewall handles network-level threats
WAF provides defense-in-depth by protecting against application-specific attacks (SQL injection, XSS) that network firewalls cannot detect, complementing network-level protection.

← Previous Chapter

Chapter 11: Data Communication

Next Chapter →

Chapter 13: Project based learning