Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 16
Q321:
What should be done when someone observes another entering personal information?
A. Encourage them to enter the information quickly
B. Ignore it and continue working
C. Look away to maintain privacy and security
D. Report the incident to authorities
Correct Answer:
C
Chapter: 16
Q322:
What kind of control methods help protect against unauthorized access?
A. Basic firewalls
B. Authentication and authorization techniques
C. Physical locks
D. Employee background checks
Correct Answer:
B
Chapter: 16
Q323:
What is a key characteristic of expert hackers?
A. They use pre-made hacking tools
B. They have limited knowledge of programming languages
C. They master several programming languages and protocols
D. They focus on physical security measures
Correct Answer:
C
Chapter: 16
Q324:
What is the common result of information extortion?
A. Reduced system performance
B. Data encryption
C. Compensation demands for stolen information
D. Public disclosure of stolen data
Correct Answer:
D
Chapter: 16
Q325:
Which is an example of sabotage or vandalism?
A. Accidental deletion of files
B. Organized attacks to damage an organization’s image
C. Unauthorized access to confidential data
D. Internal data breaches
Correct Answer:
B
Chapter: 16
Q326:
What is the goal of hacktivist operations?
A. Financial gain
B. Protest against an organization or government agency
C. Personal enrichment
D. To steal confidential data
Correct Answer:
B
Chapter: 16
Q327:
What is the difference between cyber-terrorism and traditional hacking?
A. Cyber-terrorism involves financial gain, while hacking does not
B. Cyber-terrorism involves disrupting systems for terrorism activities, while hacking may not
C. Cyber-terrorism is legal, while hacking is illegal
D. Cyber-terrorism only affects physical systems, while hacking affects digital systems
Correct Answer:
B
Chapter: 16
Q328:
How can physical theft of information be controlled?
A. Implementing digital security protocols
B. Installing locked doors and alarm systems
C. Using encryption methods
D. Regular system backups
Correct Answer:
B
Chapter: 16
Q329:
What challenge does electronic theft pose compared to physical theft?
A. It is easily detected and managed
B. It is less complex to manage and control
C. It may not be immediately apparent and can be hard to detect
D. It usually involves a physical object
Correct Answer:
C
Chapter: 16
Q330:
What is the impact of vandalism on an organization’s image?
A. It improves customer confidence
B. It has no impact
C. It can diminish consumer confidence and affect sales
D. It reduces operational costs
Correct Answer:
C
Chapter: 16
Q331:
What should an organization use to protect valuable information and systems from unauthorized access?
A. Single-layer security systems
B. Multiple layers of security controls
C. Basic encryption techniques
D. Only physical security measures
Correct Answer:
B
Chapter: 16
Q332:
Which method involves illegally accessing and manipulating computer systems to solve a mystery?
A. Industrial espionage
B. Cyber-attack
C. Hacking
D. Competitive intelligence
Correct Answer:
C
Chapter: 16
Q333:
What type of hacker develops software scripts and exploits?
A. Novice hacker
B. Intermediate hacker
C. Expert hacker
D. Script kiddie
Correct Answer:
C
Chapter: 16
Q334:
What is a common consequence of sabotage or vandalism on a website?
A. Improved user engagement
B. Increased website traffic
C. Decreased consumer confidence and potential revenue
D. Enhanced website security
Correct Answer:
C
Chapter: 16
Q335:
What does a "shoulder surfing" technique involve?
A. Monitoring network traffic
B. Observing someone's actions from a distance
C. Using malware to access data
D. Intercepting electronic communications
Correct Answer:
B
Chapter: 17
Q336:
What is a key characteristic of an attack in the context of security?
A. It is a random error
B. It involves an intent to violate security
C. It is caused by system misconfiguration
D. It is a normal operational issue
Correct Answer:
B
Chapter: 17
Q337:
What term describes a technique used to compromise a system?
A. Exploit
B. Vulnerability
C. Security Policy
D. Security Control
Correct Answer:
A
Chapter: 17
Q338:
What is defined as an identified weakness of a controlled system?
A. Exploit
B. Vulnerability
C. Security Service
D. Security Mechanism
Correct Answer:
B
Chapter: 17
Q339:
What is the purpose of a security mechanism?
A. To increase system speed
B. To detect, prevent, or recover from a security attack
C. To manage user access rights
D. To configure network devices
Correct Answer:
B
Chapter: 17
Q340:
What does a security policy describe?
A. Network configuration settings
B. The capabilities of a security service
C. The allowed and disallowed actions
D. Encryption methods
Correct Answer:
C