Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 3
Q41:
What is an example of an asset in information security?
A. A hacker
B. A software exploit
C. A computer system or data
D. A system vulnerability
Correct Answer:
C
Chapter: 3
Q42:
What term describes an intentional or unintentional act that compromises information or systems?
A. Attack
B. Asset
C. Threat
D. Control
Correct Answer:
A
Chapter: 3
Q43:
Which type of attack involves someone casually reading sensitive information?
A. Active attack
B. Passive attack
C. Direct attack
D. Indirect attack
Correct Answer:
B
Chapter: 3
Q44:
What is the difference between a direct and an indirect attack?
A. A direct attack uses a computer to attack another system, while an indirect attack uses a compromised system.
B. A direct attack is physical, while an indirect attack is digital.
C. A direct attack involves software, while an indirect attack involves hardware.
D. There is no difference between direct and indirect attacks.
Correct Answer:
A
Chapter: 3
Q45:
Fill in the blank: Security mechanisms, policies, or procedures that counter attacks are known as ___________.
A. Exploits
B. Controls
C. Assets
D. Exposures
Correct Answer:
B
Chapter: 3
Q46:
What does the term "Exposure" refer to in information security?
A. A security mechanism
B. The act of exploiting a vulnerability
C. A condition where a vulnerability is known to an attacker
D. The protection of data
Correct Answer:
C
Chapter: 3
Q47:
Fill in the blank: The ___________ is the organizational resource being protected in information security.
A. Attack
B. Asset
C. Exposure
D. Vulnerability
Correct Answer:
B
Chapter: 3
Q48:
What is the purpose of Risk management in information security?
A. To minimize the risk to match the organization’s risk appetite
B. To eliminate all risks completely
C. To increase the amount of risk an organization can accept
D. To focus only on physical security
Correct Answer:
A
Chapter: 3
Q49:
What is a Vulnerability in the context of information security?
A. A security control
B. A weakness or fault in a system
C. A type of security attack
D. A security policy
Correct Answer:
B
Chapter: 3
Q50:
Which term describes a weakness or fault in a system that opens it to attack or damage?
A. Threat agent
B. Vulnerability
C. Exposure
D. Exploit
Correct Answer:
B
Chapter: 3
Q51:
Fill in the blank: The probability that something unwanted will happen is known as ___________.
A. Risk
B. Control
C. Threat
D. Exposure
Correct Answer:
A
Chapter: 3
Q52:
What is a Threat agent in information security?
A. A vulnerability
B. A specific instance of a threat
C. A general category of threats
D. A control measure
Correct Answer:
B
Chapter: 4
Q53:
Which of the following is NOT a component of an Information System (IS)?
A. Software
B. Hardware
C. Procedures
D. Communication media
Correct Answer:
D
Chapter: 4
Q54:
What is the primary role of the hardware component in an Information System?
A. To manage software applications
B. To store and transport data
C. To process information
D. To develop procedures
Correct Answer:
B
Chapter: 4
Q55:
Which component of an Information System is often the most difficult to secure?
A. Data
B. Hardware
C. Software
D. Networks
Correct Answer:
C
Chapter: 4
Q56:
Fill in the blank: The ___________ component includes applications, operating systems, and command utilities.
A. Hardware
B. Software
C. Data
D. Procedures
Correct Answer:
B
Chapter: 4
Q57:
What does the hardware component of an IS include?
A. Software applications
B. Data storage and transmission devices
C. User manuals
D. Security policies
Correct Answer:
B
Chapter: 4
Q58:
What is a common problem with software in information systems?
A. High cost of hardware
B. Frequent updates to data
C. Exploitation of errors and vulnerabilities
D. Lack of physical security
Correct Answer:
C
Chapter: 4
Q59:
Fill in the blank: Physical security policies deal with ___________ as a physical asset.
A. Data
B. Networks
C. Hardware
D. Procedures
Correct Answer:
C
Chapter: 4
Q60:
What role does the data component play in an Information System?
A. It provides physical protection
B. It manages user access
C. It must be protected as it is a valuable asset
D. It executes software programs
Correct Answer:
C