Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 25
Q481:
What attribute is crucial for tracking hardware, software, and network assets?
A. Market value
B. Age of the asset
C. Specific attributes based on organizational needs
D. Brand name
Correct Answer:
C
Chapter: 25
Q482:
Which tool can help maintain an up-to-date inventory listing?
A. Manual record keeping
B. Automated asset inventory tools
C. Periodic reviews
D. External audits
Correct Answer:
B
Chapter: 25
Q483:
How often should information owners review information classifications?
A. Monthly
B. Quarterly
C. Annually
D. Every five years
Correct Answer:
C
Chapter: 25
Q484:
What does 'Management of Classified Data' include?
A. Only storage of classified data
B. Distribution, portability, and destruction of classified data
C. Monitoring of classified data
D. Only storage and distribution
Correct Answer:
B
Chapter: 25
Q485:
What is a key aspect of classifying and prioritizing information assets?
A. Subdividing categories as needed
B. Assigning random values
C. Ignoring sensitivity of data
D. Using only one classification category
Correct Answer:
A
Chapter: 25
Q486:
How can information asset value be assigned?
A. Through market research
B. Using a fixed value system
C. By answering questions and analyzing answers
D. Through external valuation services
Correct Answer:
C
Chapter: 25
Q487:
What process involves assigning scores to critical factors for each asset?
A. Weighted factor analysis
B. Threat assessment
C. Impact analysis
D. Control evaluation
Correct Answer:
A
Chapter: 25
Q488:
What should be done after identifying information assets and preliminary classifications?
A. Ignore the threats
B. Assess and identify the threats facing the organization
C. Focus solely on asset valuation
D. Develop a security policy
Correct Answer:
B
Chapter: 25
Q489:
Which threat assessment factor involves evaluating recovery costs?
A. Impact of threat
B. Probability of threat occurrence
C. Cost of recovery from attack
D. Cost of prevention measures
Correct Answer:
C
Chapter: 25
Q490:
What are vulnerabilities in the context of risk management?
A. Specific threats to an asset
B. Weaknesses that can be exploited by threats
C. Policies for asset protection
D. Steps for threat assessment
Correct Answer:
B
Chapter: 25
Q491:
How are vulnerabilities identified?
A. Through threat analysis
B. By examining information assets for weaknesses
C. By assessing market trends
D. Through policy reviews
Correct Answer:
B
Chapter: 25
Q492:
What should be done if threats present high danger to the organization?
A. Ignore them
B. Invest in minimal controls
C. Calculate recovery and prevention costs
D. Focus on low-risk threats
Correct Answer:
C
Chapter: 25
Q493:
What is the main goal of asset prioritization?
A. To ensure all assets are equally protected
B. To rank assets based on their importance and value
C. To avoid categorizing assets
D. To assign random values to assets
Correct Answer:
B
Chapter: 26
Q494:
What is the purpose of risk assessment?
A. To identify vulnerabilities
B. To evaluate relative risk for each vulnerability
C. To categorize assets
D. To create security policies
Correct Answer:
B
Chapter: 26
Q495:
How is likelihood typically rated in risk assessment?
A. Between 0 and 100
B. Between 0.1 and 1.0
C. From 1 to 10
D. From A to Z
Correct Answer:
B
Chapter: 26
Q496:
Which example corresponds to a high likelihood rating of 1.0?
A. Receiving a virus email within the next year
B. Being struck by a meteorite indoors
C. Experiencing a hardware failure
D. Running a software update
Correct Answer:
A
Chapter: 26
Q497:
What factor is used in the risk determination formula?
A. Likelihood of vulnerability occurrence
B. Number of assets
C. Current control measures
D. External threat sources
Correct Answer:
A
Chapter: 26
Q498:
What is residual risk?
A. The risk remaining after applying controls
B. The initial risk before any controls
C. The risk associated with outdated controls
D. The risk from uncontrolled threats
Correct Answer:
A
Chapter: 26
Q499:
Which general category of controls includes security policies?
A. Policies
B. Programs
C. Technologies
D. Procedures
Correct Answer:
A
Chapter: 26
Q500:
What does a general security policy outline?
A. Security technology specifics
B. Procedures for data classification
C. Overall approach to information security
D. Technical configurations
Correct Answer:
C