Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 8
Q181:
What is the main focus during the analysis phase of SDLC?
A. Coding software modules
B. Assessing current systems and determining system requirements
C. Selecting specific technologies
D. Training system administrators
Correct Answer:
B
Chapter: 8
Q182:
Fill in the blank: The _______ phase uses information from the analysis phase to create a system solution blueprint.
A. Implementation
B. Logical Design
C. Maintenance and Change
D. Investigation
Correct Answer:
B
Chapter: 8
Q183:
Which phase follows the Logical Design phase in the traditional SDLC model?
A. Analysis
B. Physical Design
C. Investigation
D. Maintenance and Change
Correct Answer:
B
Chapter: 8
Q184:
What is evaluated during the feasibility analysis conducted at various SDLC phases?
A. The project's alignment with economic, technical, and behavioral factors
B. The color scheme of the user interface
C. The personal preferences of the development team
D. The marketing potential of the system
Correct Answer:
A
Chapter: 8
Q185:
Why are structured reviews or reality checks important at the end of each SDLC phase?
A. They help skip unnecessary phases
B. They ensure the project is on track and meets objectives
C. They allow developers to rest
D. They increase project costs
Correct Answer:
B
Chapter: 9
Q186:
What does SecSDLC stand for?
A. Secure Systems Development Life Cycle
B. Security Systems Development Life Cycle
C. Security Software Development Life Cycle
D. Secure Software Development Life Cycle
Correct Answer:
B
Chapter: 9
Q187:
What is the primary goal of the investigation phase in SecSDLC?
A. Defining project goals and budget
B. Selecting security technologies
C. Developing a security blueprint
D. Implementing security controls
Correct Answer:
A
Chapter: 9
Q188:
During which phase of SecSDLC is the enterprise information security policy (EISP) commonly developed?
A. Analysis
B. Logical Design
C. Investigation
D. Maintenance and Change
Correct Answer:
C
Chapter: 9
Q189:
In which phase of SecSDLC are existing security policies and programs analyzed?
A. Implementation
B. Investigation
C. Logical Design
D. Analysis
Correct Answer:
D
Chapter: 9
Q190:
What is a key activity performed during the Logical Design phase of SecSDLC?
A. Developing a security blueprint
B. Ordering components
C. Testing security solutions
D. Training users
Correct Answer:
A
Chapter: 9
Q191:
Which phase of SecSDLC involves selecting technologies to support the security blueprint?
A. Physical Design
B. Logical Design
C. Investigation
D. Analysis
Correct Answer:
A
Chapter: 9
Q192:
What is the final step before the implementation phase in SecSDLC?
A. Developing the security blueprint
B. Feasibility analysis
C. Reviewing and approving the project
D. Presenting system to users
Correct Answer:
C
Chapter: 9
Q193:
During the Maintenance and Change phase, what is a primary focus?
A. Developing new software
B. Selecting technologies
C. Constantly monitoring and updating security
D. Ordering components
Correct Answer:
C
Chapter: 9
Q194:
Which phase involves incident response and disaster recovery planning in SecSDLC?
A. Investigation
B. Analysis
C. Logical Design
D. Maintenance and Change
Correct Answer:
C
Chapter: 9
Q195:
What does risk management in SecSDLC primarily focus on?
A. Managing project budget
B. Identifying, assessing, and evaluating risks
C. Implementing security solutions
D. Training personnel
Correct Answer:
B
Chapter: 9
Q196:
What is evaluated during the physical design phase of SecSDLC?
A. Information security technology
B. Business continuity plans
C. Security blueprint
D. Legal issues
Correct Answer:
A
Chapter: 9
Q197:
Fill in the blank: The SecSDLC phase where existing security policies and programs are analyzed is called the ______ phase.
A. Logical Design
B. Implementation
C. Analysis
D. Physical Design
Correct Answer:
C
Chapter: 9
Q198:
Fill in the blank: During the ______ phase of SecSDLC, the security solutions are acquired, tested, implemented, and tested again.
A. Logical Design
B. Maintenance and Change
C. Implementation
D. Analysis
Correct Answer:
C
Chapter: 9
Q199:
Fill in the blank: ______ planning in SecSDLC addresses how business will continue in the event of a loss.
A. Risk management
B. Continuity
C. Disaster recovery
D. Incident response
Correct Answer:
B
Chapter: 9
Q200:
Fill in the blank: ______ analysis is performed in every phase of SecSDLC to determine the feasibility of the project.
A. Risk
B. Legal
C. Organizational
D. Feasibility
Correct Answer:
D