Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 6
Q101:
In an information system, what might be compromised if there is too much focus on security?
A. System performance
B. End user needs
C. Budget efficiency
D. Administrative convenience
Correct Answer:
B
Chapter: 6
Q102:
What should the security level in an information system allow?
A. Maximum protection
B. No access
C. Reasonable access
D. Unlimited data flow
Correct Answer:
C
Chapter: 6
Q103:
What is the overall goal shared by both information security technologists and end users?
A. Protect against all threats
B. Minimize costs
C. Ensure data is available when needed
D. Implement the latest technology
Correct Answer:
C
Chapter: 6
Q104:
Which of the following would indicate an imbalance in an information system?
A. High user satisfaction
B. Over-protection of information
C. Lack of security measures
D. Excessive data access
Correct Answer:
B
Chapter: 6
Q105:
What does an ideal information system provide?
A. No delays or obstacles
B. Maximum security
C. High speed processing
D. Availability with security measures
Correct Answer:
D
Chapter: 6
Q106:
Which group needs to be considered when balancing security and access in an information system?
A. End users
B. Security professionals
C. Both end users and security professionals
D. System developers
Correct Answer:
C
Chapter: 6
Q107:
What does the figure related to balancing information security and access illustrate?
A. Data flow
B. Competing voices in security
C. User access levels
D. Threat management strategies
Correct Answer:
B
Chapter: 6
Q108:
Fill in the blank: _________ cannot be absolute; it is a process, not a goal.
A. Data protection
B. Information security
C. System access
D. Security implementation
Correct Answer:
B
Chapter: 6
Q109:
Fill in the blank: To achieve balance in an information system, the security level must allow _______ access.
A. Maximum
B. Limited
C. Reasonable
D. Minimal
Correct Answer:
C
Chapter: 6
Q110:
Fill in the blank: A completely secure information system would not allow anyone _______.
A. Modification
B. Destruction
C. Access
D. Surveillance
Correct Answer:
C
Chapter: 6
Q111:
Fill in the blank: Both information security technologists and _______ must recognize the shared overall goals.
A. Management
B. End users
C. Developers
D. Administrators
Correct Answer:
B
Chapter: 6
Q112:
Fill in the blank: An information system must protect against threats while ensuring _______.
A. Minimal cost
B. Maximum speed
C. User satisfaction
D. Data availability
Correct Answer:
D
Chapter: 7
Q113:
What is the purpose of the OSI Security Architecture?
A. To define security attacks
B. To provide a systematic way of defining security requirements
C. To implement security protocols
D. To ensure data confidentiality
Correct Answer:
B
Chapter: 7
Q114:
Which of the following is a key component of the OSI Security Architecture?
A. Security attacks
B. Security protocols
C. Security layers
D. Security services
Correct Answer:
D
Chapter: 7
Q115:
What does the authentication service ensure in communication?
A. Data integrity
B. Message authenticity
C. Nonrepudiation
D. Confidentiality
Correct Answer:
B
Chapter: 7
Q116:
In the context of security, what does access control prevent?
A. Unauthorized disclosure
B. Unauthorized modification
C. Unauthorized use of a resource
D. Unauthorized data access
Correct Answer:
C
Chapter: 7
Q117:
Which of the following is NOT a category of security services defined by X.800?
A. Authentication
B. Data integrity
C. Encipherment
D. Nonrepudiation
Correct Answer:
C
Chapter: 7
Q118:
What does the data confidentiality service protect against?
A. Unauthorized access
B. Unauthorized modification
C. Unauthorized disclosure
D. Unauthorized deletion
Correct Answer:
C
Chapter: 7
Q119:
What is the primary concern of the data integrity service?
A. Confidentiality
B. Ensuring data is received as sent
C. Controlling access to data
D. Protecting data from being deleted
Correct Answer:
B
Chapter: 7
Q120:
What does nonrepudiation in security provide?
A. Proof of data origin
B. Assurance of data confidentiality
C. Protection against denial of participation
D. Prevention of unauthorized data access
Correct Answer:
C