Infosys Certified Associate in Infrastructure Security Fundamentals
Practice with real exam-pattern questions for Infosys Certified Associate in Infrastructure Security Fundamentals. Each question includes a detailed explanation to help you understand the concept, not just memorise the answer. Try 10 questions free — no login required.
Full question bank for this exam + 1,357+ others. Cancel anytime.
Join Premium10 Infosys Certified Associate in Infrastructure Security Fundamentals practice questions with answers
Real Lex exam-pattern multiple-choice questions for the Infosys Certified Associate in Infrastructure Security Fundamentals certification. Each question includes the correct answer. The full question bank is available to Premium members.
- Question 1
Your company has a dedicated internal network used by employees for various tasks, including accessing sensitive corporate data and communicating with external clients. However, you are concerned about the potential for unauthorized access and malicious activity within the network. Which firewall would you recommend for your company's network?
- ✓
Packet Filtering firewall
Correct - B
Circuit-level gateway
- C
Application Firewall
- D
Packet Capturing Firewall
- ✓
- Question 2
Remembering password can be a hassle. Hence, password managers have become popular. Password managers store all the passwords of a user in a single place and is protected by master password with Multi-Factor Authentication (MFA). Many password managers are cloud-based. Which of the following are true with respect to cloud based password managers?
- ✓
Cloud based password manager is an example of SaaS.
Correct - B
Since the password of multiple users are stored in the cloud, a Cloud based password manager is an example of community cloud.
- C
Cloud based password managers eliminate the possibility of password theft.
- D
User passwords must be protected from unauthorized access from CSP using encryption and access control.
- E
Since a password manager can store passwords of different applications, it is an example of hybrid cloud.
- ✓
- Question 3
Which of the following is NOT a common example of a hashing algorithm?
- ✓
MD5 (Message Digest 5)
Correct - B
RSA (Rivest–Shamir–Adleman)
- C
SHA-1 (Secure Hash Algorithm 1)
- D
Whirlpool
- ✓
- Question 4
Acme Inc. is a multinational e-commerce company headquartered in Germany. They collect and process customer data from various sources, including website purchases, social media interactions, and loyalty program enrollment. Acme wants to leverage this data for targeted marketing campaigns and personalized product recommendations. However, they must comply with the General Data Protection Regulation (GDPR). Which of the following actions are NOT required by Acme Inc. to comply with GDPR when collecting and processing customer data? (Select Three correct options)
- ✓
Implement clear and concise privacy notices that explain how customer data is collected, used, and stored.
Correct - B
Implement technical and organizational measures to ensure data security.
- C
Obtain explicit consent from customers for each specific purpose of data processing (e.g., targeted marketing, product recommendations).
- D
Transfer customer data to third-party processors only under strict contractual agreements that ensure GDPR compliance.
- E
Delete all customer data after a specific retention period.
- ✓
- Question 5
A web application allows users to search for products using keywords. While performing security check you noticed that the search functionality can be used to get the list of all the products available, based on the keywords entered. What type of vulnerability is this?
- ✓
Cross-Site Request Forgery (CSRF)
Correct - B
Cross-Site scripting (XSS) attack
- C
SQL Injection Attack
- D
XML External Entity (XXE) attacks
- ✓
- Question 6
You work as a nurse at a hospital. A police officer requests access to a patient's medical records for a criminal investigation. Can you release the records without the patient's consent?
- ✓
Yes, you can release the records with a court order or subpoena.
Correct - B
No, you cannot release the records without the patient's written authorization.
- C
You can release the records if the information is relevant to the investigation, and you've notified the patient.
- D
Depends on the hospital policies and local regulations.
- ✓
- Question 7
A factory floor requires a network to connect machines and sensors for real-time data transmission. The network must be robust and resilient to potential cable breaks or device failures, as downtime could disrupt production. Which topology would be the best option?
- ✓
Ring
Correct - B
Start
- C
Bus
- D
Mesh
- ✓
- Question 8
Which device is most critical for connecting in a WAN?
- ✓
Hub
Correct - B
Switch
- C
Router
- D
Access point
- ✓
- Question 9
Which among the following statements, represent key differences between serverless services and platform as a service (PaaS)? (Select TWO correct options)
- ✓
PaaS is used for deploying applications that run 24/7, while serverless is for asynchronous events.
Correct - B
Serverless services can run longer than PaaS applications.
- C
Serverless services offer more control over the deployment environment.
- D
Serverless services can scale automatically based on incoming requests.
- ✓
- Question 10
What is the goal of implementing security controls?
- ✓
To eliminate all risk
Correct - B
To comply with regulations
- C
To mitigate risks to an acceptable level
- D
To deter hackers
- ✓
More in Security
Infosys Certified CyberArk Defender
Infosys Certified Offensive Security Professional
Infosys Certified Associate in Cyber Defense Center
Pay once. Clear every cert this year.
One subscription, full Telegram channel access, every PDF posted during your membership.
- Full access to all 1,357+ certifications
- Monthly updated question banks
- Telegram private channel access
- Cancel anytime
- Everything in Monthly
- Save ₹2,100 vs monthly billing
- Priority answer key requests
- Best for increasing DQ score fast
- Everything in Quarterly
- Lifetime channel access — no renewals
- All future certifications included
- Priority response from admin team
Common questions, straight answers.
A monthly-updated Telegram channel where we post real exam-pattern question banks and detailed answer keys for 1,357+ Infosys Lex certifications. You join once, you get every PDF posted during your membership.
Right after payment on our Graphy page, you'll receive a private invite link to the Telegram channel. Access is instant — usually under 30 seconds.
We compile question banks from the actual Lex test pattern, sourced and verified by 180K+ community members who've recently cleared these exams. Match rate is consistently 85–95%.
Every single month. When Infosys rolls out new versions of certifications, we post updated dumps within 7–10 days. You'll see channel activity weekly.
Clearing certifications is one of the highest-weighted DQ factors. Members typically clear 3–5 certifications in their first 3 months, which moves DQ scores up by a full band.