Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 27
Q521:
Which control strategy involves purchasing insurance or revising deployment models?
A. Defend
B. Transfer
C. Mitigate
D. Terminate
Correct Answer:
B
Chapter: 27
Q522:
What does the accept strategy rely on?
A. High risk tolerance
B. A detailed cost-benefit analysis
C. Transferring risk to another organization
D. Implementing security controls
Correct Answer:
B
Chapter: 27
Q523:
What is the focus of the quantitative risk control assessment?
A. Using scales and evaluations
B. Applying numerical measures and actual values
C. Benchmarking against other organizations
D. Qualitative risk evaluations
Correct Answer:
B
Chapter: 27
Q524:
How is operational feasibility assessed?
A. Technical requirements and expertise
B. User and management support
C. Financial impact of controls
D. Political implications
Correct Answer:
B
Chapter: 27
Q525:
What is the purpose of benchmarking in risk control?
A. To find the best technology solutions
B. To compare practices with peer organizations
C. To evaluate financial feasibility
D. To assess the effectiveness of current controls
Correct Answer:
B
Chapter: 27
Q526:
What is an example of a technical feasibility analysis?
A. Evaluating user acceptance of a control
B. Assessing the technology needed to implement a control
C. Analyzing the cost-benefit of a control
D. Determining political support for a control
Correct Answer:
B
Chapter: 27
Q527:
What does political feasibility determine?
A. Availability of technology
B. Impact on organization efficiency
C. Consensus and relationships among communities of interest
D. Technical expertise available
Correct Answer:
C
Chapter: 27
Q528:
What type of control strategy involves creating incident response and disaster recovery plans?
A. Defend
B. Transfer
C. Mitigate
D. Accept
Correct Answer:
C
Chapter: 27
Q529:
What is the focus of the feasibility study before choosing a control strategy?
A. Economic and noneconomic consequences of the vulnerability
B. Technical specifications of the control
C. Political and organizational support for the control
D. Operational and behavioral feasibility
Correct Answer:
A
Chapter: 27
Q530:
What type of analysis examines how well a control contributes to overall organizational efficiency?
A. Technical Feasibility
B. Operational Feasibility
C. Organizational Feasibility
D. Political Feasibility
Correct Answer:
C
Chapter: 27
Q531:
What is an advantage of using qualitative risk control practices?
A. It avoids the need for precise numerical estimates
B. It provides exact financial measures
C. It ensures benchmarking with other organizations
D. It focuses on technical solutions
Correct Answer:
A