Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 17
Q341:
What are security controls designed to do?
A. Minimize system performance issues
B. Enhance user experience
C. Avoid, detect, counteract, or minimize security risks
Correct Answer:
D
Chapter: 17
Q342:
What enhances the security of data processing systems and information transfers?
A. Security Policy
B. Security Controls
C. Security Service
D. Security Mechanism
Correct Answer:
C
Chapter: 17
Q343:
What is the technical definition of an attack?
A. A deliberate act that exploits vulnerability
B. A method to enhance system performance
C. A routine check of system integrity
D. A procedure to configure network settings
Correct Answer:
A
Chapter: 17
Q344:
What differentiates a threat from an attack?
A. A threat is an actual breach, while an attack is a potential danger
B. A threat is a potential danger that might exploit a vulnerability, while an attack is an intelligent act that attempts to violate security policy
Correct Answer:
B
Chapter: 17
Q345:
Which term refers to a potential for violation of security?
A. Security Mechanism
B. Exploit
C. Threat
D. Vulnerability
Correct Answer:
C
Chapter: 17
Q346:
What is a deliberate act that exploits vulnerability called?
A. A threat
B. An attack
C. A security mechanism
D. A security service
Correct Answer:
B
Chapter: 17
Q347:
Which of the following is not considered an attack?
A. A server crash
B. A deliberate attempt to violate security
C. A method to bypass security services
D. A targeted exploitation of a system weakness
Correct Answer:
A
Chapter: 17
Q348:
What does a security service utilize to provide its function?
A. Physical security controls
B. Administrative procedures
C. One or more security mechanisms
D. Firewall configurations
Correct Answer:
C
Chapter: 17
Q349:
What is the role of a security control?
A. To increase system speed
B. To provide user training
C. To safeguard against security risks
D. To manage network traffic
Correct Answer:
C
Chapter: 17
Q350:
In the context of security, what is a vulnerability?
A. A technique to compromise a system
B. A weakness of a controlled system
C. An action that compromises security
D. A safeguard or countermeasure
Correct Answer:
B
Chapter: 17
Q351:
What distinguishes an attack from a threat?
A. An attack is an actual event that compromises security, while a threat is a potential danger
B. A threat is a deliberate act, while an attack is a potential danger
C. A threat is a security mechanism, while an attack is a vulnerability
D. A threat and an attack are synonymous
Correct Answer:
A
Chapter: 18
Q352:
What is a characteristic of active attacks?
A. They involve modifying data or creating false data streams
B. They involve monitoring transmissions
C. They involve preventing access to data
D. They involve capturing data without altering it
Correct Answer:
A
Chapter: 18
Q353:
Which of the following is not a category of active attacks?
A. Replay
B. Modification of messages
C. Denial of service
D. Traffic analysis
Correct Answer:
D
Chapter: 18
Q354:
What does a masquerade attack involve?
A. Monitoring transmissions
B. Modifying legitimate messages
C. Pretending to be a different entity
D. Creating false data streams
Correct Answer:
C
Chapter: 18
Q355:
In a replay attack, what is the attacker’s goal?
A. To modify messages
B. To capture and retransmit data to produce an unauthorized effect
C. To prevent access to data
D. To eavesdrop on communications
Correct Answer:
B
Chapter: 18
Q356:
Which of the following best describes modification of messages?
A. Altering a legitimate message or delaying/reordering it
B. Preventing the use of communications facilities
C. Monitoring data transmissions
D. Attempting to bypass security controls
Correct Answer:
A
Chapter: 18
Q357:
What is the aim of a denial of service attack?
A. To monitor and capture data transmissions
B. To alter the content of messages
C. To prevent or inhibit the normal use of communications facilities
Correct Answer:
D
Chapter: 18
Q358:
What is a passive attack primarily concerned with?
A. Modifying data streams
B. Monitoring transmissions without altering them
C. Preventing access to data
D. Creating false data streams
Correct Answer:
B
Chapter: 18
Q359:
Which technique can be used to prevent passive attacks?
A. Encryption
B. Replay
C. Modification of messages
D. Denial of service
Correct Answer:
A
Chapter: 18
Q360:
What is a common prevention method against active attacks?
A. Encryption
B. Detection and recovery
C. Blocking data streams
D. Monitoring traffic
Correct Answer:
B