Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 22
Q441:
What does the "Amend and update" step involve in policy development?
A. Enforcing the policy
B. Publishing the policy document
C. Updating the policy based on new needs
D. Designing the initial policy
Correct Answer:
C
Chapter: 23
Q442:
What is the primary characteristic of risk?
A. Certain outcome
B. Uncertainty and potential loss
C. Guaranteed success
D. Fixed consequence
Correct Answer:
B
Chapter: 23
Q443:
Which type of risk threatens the project schedule and costs?
A. Business risk
B. Technical risk
C. Project risk
D. Known risk
Correct Answer:
C
Chapter: 23
Q444:
Which risk category involves threats to the quality and timeliness of software?
A. Business risk
B. Technical risk
C. Project risk
D. Predictable risk
Correct Answer:
B
Chapter: 23
Q445:
What is the main focus of business risks?
A. Project schedule impacts
B. Software quality and timeliness
C. Project viability
D. Known project issues
Correct Answer:
C
Chapter: 23
Q446:
Which risk type is revealed through careful evaluation of project plans and environments?
A. Predictable risk
B. Known risk
C. Unpredictable risk
D. Technical risk
Correct Answer:
B
Chapter: 23
Q447:
What defines predictable risks?
A. Risks that are completely unknown
B. Extrapolated from past project experience
C. Known only after they occur
D. Completely avoidable
Correct Answer:
B
Chapter: 23
Q448:
Which type of risk is difficult to identify in advance?
A. Known risk
B. Predictable risk
C. Unpredictable risk
D. Technical risk
Correct Answer:
C
Chapter: 23
Q449:
What do reactive risk strategies primarily rely on?
A. Contingency planning
B. Proactive measures
C. Crisis management
D. Project evaluation
Correct Answer:
C
Chapter: 23
Q450:
Which risk strategy involves having a contingency plan in place?
A. Reactive risk strategy
B. Proactive risk strategy
C. Predictable risk strategy
D. Technical risk strategy
Correct Answer:
B
Chapter: 23
Q451:
What is the main approach of proactive risk strategies?
A. Crisis management
B. Contingency planning
C. Reacting to issues as they arise
D. Avoiding and managing risks in a controlled manner
Correct Answer:
D
Chapter: 23
Q452:
Which of the following is an example of an unpredictable risk?
A. Unrealistic delivery date
B. Developer leaving the project
C. Past turnover
D. Project cost overrun
Correct Answer:
B
Chapter: 23
Q453:
What happens when a risk becomes a reality?
A. It causes no impact
B. Positive outcome occurs
C. Unwanted consequences or losses occur
D. Project success is guaranteed
Correct Answer:
C
Chapter: 23
Q454:
What is the focus of technical risks?
A. Viability of the software
B. Threats to project plan quality and schedule
C. Business viability
D. Contingency planning
Correct Answer:
B
Chapter: 23
Q455:
Which risk strategy involves no action until a problem arises?
A. Proactive strategy
B. Reactive strategy
C. Predictive strategy
D. Preventive strategy
Correct Answer:
B
Chapter: 23
Q456:
What kind of risk can be extrapolated from past experiences?
A. Unpredictable risk
B. Known risk
C. Predictable risk
D. Technical risk
Correct Answer:
C
Chapter: 23
Q457:
What type of risk threatens the viability of the software being built?
A. Technical risk
B. Project risk
C. Business risk
D. Unpredictable risk
Correct Answer:
C
Chapter: 23
Q458:
In which risk strategy is crisis management a common approach?
A. Proactive risk strategy
B. Reactive risk strategy
C. Predictable risk strategy
D. Technical risk strategy
Correct Answer:
B
Chapter: 24
Q459:
What is the main goal of risk management?
A. Increase costs
B. Identify and reduce risk
C. Ignore vulnerabilities
D. Expand operations
Correct Answer:
B
Chapter: 24
Q460:
Which element is NOT a major undertaking in risk management?
A. Risk identification
B. Risk assessment
C. Risk control
D. Risk elimination
Correct Answer:
D