Skip to main content

Information Security MCQs with Answers

Practice important Information Security MCQs with answers and explanations.

Chapter: 9
Q201:
Which phase is the longest and most expensive in the SecSDLC process?
A. Investigation
B. Maintenance and Change
C. Physical Design
D. Implementation
Correct Answer: B
Chapter: 9
Q202:
Fill in the blank: During the ______ phase, the organization selects technologies needed to support the security blueprint.
A. Logical Design
B. Physical Design
C. Maintenance and Change
D. Investigation
Correct Answer: B
Chapter: 9
Q203:
Which phase involves studying documents from the investigation phase?
A. Logical Design
B. Implementation
C. Analysis
D. Maintenance and Change
Correct Answer: C
Chapter: 9
Q204:
Fill in the blank: The SecSDLC is a methodology for the design and implementation of a(n) ______ project.
A. business
B. information security
C. network security
D. software
Correct Answer: B
Chapter: 10
Q205:
What are the rules called that balance individual rights against the needs of society?
A. Laws
B. Ethics
C. Policies
D. Mores
Correct Answer: A
Chapter: 10
Q206:
What is the key difference between laws and ethics?
A. Ethics carry the authority of a governing body
B. Laws carry the authority of a governing body
C. Ethics are more important than laws
D. Laws are based on personal opinion
Correct Answer: B
Chapter: 10
Q207:
Which of the following is a universal ethical standard?
A. Bribery
B. Theft
C. Insider trading
D. Tax evasion
Correct Answer: B
Chapter: 10
Q208:
What is liability in the context of organizational behavior?
A. Legal obligation of an entity
B. Ethical obligation of an entity
C. Organizational policy requirement
D. Employee personal responsibility
Correct Answer: A
Chapter: 10
Q209:
What increases an organization's liability?
A. High profits
B. Refusal to take due care measures
C. Offering employee benefits
D. Implementing strict policies
Correct Answer: B
Chapter: 10
Q210:
What is due care?
A. Making sure employees know acceptable behavior
B. Protecting the organization from lawsuits
C. Establishing employee benefits
D. Monitoring employee productivity
Correct Answer: A
Chapter: 10
Q211:
What does due diligence require an organization to do?
A. Implement fair employee policies
B. Make a valid effort to protect others
C. Continuously increase profits
D. Enforce strict attendance policies
Correct Answer: B
Chapter: 10
Q212:
Which of the following describes the relationship between policies and laws within an organization?
A. Policies are always more important than laws
B. Laws are external and enforceable by the state
C. Policies function as organizational laws
D. Ignorance of laws is an acceptable defense
Correct Answer: C
Chapter: 10
Q213:
What is an acceptable defense in the context of organizational policies?
A. Ignorance of the policy
B. Lack of training
C. Following orders
D. Financial difficulties
Correct Answer: A
Chapter: 10
Q214:
What does civil law govern?
A. Harmful activities against society
B. Relationships and conflicts between entities
C. Conduct harmful to the government
D. Legal issues related to military actions
Correct Answer: B
Chapter: 10
Q215:
What does criminal law address?
A. Family disputes
B. Commercial conflicts
C. Activities harmful to society
D. Constitutional amendments
Correct Answer: C
Chapter: 10
Q216:
What type of law regulates the relationship between individuals and organizations?
A. Public law
B. Private law
C. Criminal law
D. Civil law
Correct Answer: B
Chapter: 10
Q217:
What does public law regulate?
A. Relationships between organizations
B. Family matters
C. Government agencies' relationships
D. Commercial transactions
Correct Answer: C
Chapter: 10
Q218:
Fill in the blank: ______ is the legal obligation to make restitution for wrongs committed by an organization.
A. Due care
B. Liability
C. Responsibility
D. Accountability
Correct Answer: B
Chapter: 10
Q219:
Fill in the blank: ______ law addresses activities and conduct harmful to society.
A. Civil
B. Criminal
C. Private
D. Public
Correct Answer: B
Chapter: 10
Q220:
Fill in the blank: ______ law includes criminal, administrative, and constitutional law.
A. Civil
B. Commercial
C. Private
D. Public
Correct Answer: D

Test Your Knowledge

Take a timed quiz on Information Security

🚀 Start Quiz Now