Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Chapter: 7
Q121:
What is an example of a nonrepudiation service?
A. Ensuring data is confidential
B. Protecting against unauthorized use
C. Ensuring message cannot be denied later
D. Transforming data into an unintelligible form
Correct Answer:
C
Chapter: 7
Q122:
Which service ensures that a system or resource is accessible and usable upon demand?
A. Data confidentiality
B. Authentication
C. Availability
D. Data integrity
Correct Answer:
C
Chapter: 7
Q123:
What is the primary function of encipherment in security mechanisms?
A. To assure data integrity
B. To prevent unauthorized access
C. To transform data into an unintelligible form
D. To ensure authentication
Correct Answer:
C
Chapter: 7
Q124:
Which of the following security mechanisms allows the recipient to prove the source and integrity of a data unit?
A. Encipherment
B. Authentication exchange
C. Digital signature
D. Traffic padding
Correct Answer:
C
Chapter: 7
Q125:
What does traffic padding do in the context of security?
A. Ensures data integrity
B. Inserts bits to frustrate traffic analysis
C. Encrypts data for confidentiality
D. Controls access to resources
Correct Answer:
B
Chapter: 7
Q126:
Fill in the blank: The OSI Security Architecture defines security _______ to characterize security requirements.
A. attacks
B. services
C. layers
D. protocols
Correct Answer:
B
Chapter: 7
Q127:
Fill in the blank: _______ ensures that data received is exactly as sent, without modification, insertion, or deletion.
A. Access control
B. Authentication
C. Data integrity
D. Confidentiality
Correct Answer:
C
Chapter: 7
Q128:
Fill in the blank: In security, _______ is the prevention of unauthorized use of a resource.
A. Data integrity
B. Authentication
C. Access control
D. Nonrepudiation
Correct Answer:
C
Chapter: 7
Q129:
Fill in the blank: A digital signature is used to prove the _______ and integrity of a data unit.
A. confidentiality
B. origin
C. availability
D. authenticity
Correct Answer:
B
Chapter: 7
Q130:
Fill in the blank: _______ is used to select secure routes for data transmission and allows routing changes when necessary.
A. Access control
B. Routing control
C. Traffic padding
D. Encipherment
Correct Answer:
B
Chapter: 7
Q131:
Fill in the blank: Notarization involves using a trusted third party to assure certain properties of a _______.
A. data exchange
B. routing control
C. security service
D. data transmission
Correct Answer:
A
Chapter: 8
Q132:
What does SDLC stand for in the context of information systems?
A. Software Development Life Cycle
B. Systems Design Logical Cycle
C. Systems Development Life Cycle
D. Software Design Limited Cycle
Correct Answer:
C
Chapter: 8
Q133:
What is a methodology in the context of system development?
A. A random approach to solving problems
B. An informal set of guidelines
C. A formal approach using structured procedures
D. A trial-and-error method
Correct Answer:
C
Chapter: 8
Q134:
Why is using a methodology important in system development?
A. It speeds up the process
B. It ensures a rigorous process with clearly defined goals
C. It eliminates the need for a development team
D. It reduces the cost significantly
Correct Answer:
B
Chapter: 8
Q135:
How many general phases are there in the traditional SDLC model?
A. Four
B. Five
C. Six
D. Seven
Correct Answer:
C
Chapter: 8
Q136:
Which SDLC model is illustrated by phases flowing sequentially from one to the next?
A. Spiral model
B. Waterfall model
C. Agile model
D. Prototype model
Correct Answer:
B
Chapter: 8
Q137:
What happens at the end of each SDLC phase according to the waterfall model?
A. Immediate deployment
B. Code compilation
C. Structured review or reality check
D. User acceptance testing
Correct Answer:
C
Chapter: 8
Q138:
During which SDLC phase are objectives, constraints, and scope of the project specified?
A. Analysis
B. Investigation
C. Implementation
D. Maintenance and Change
Correct Answer:
B
Chapter: 8
Q139:
What is the main purpose of the feasibility analysis conducted during SDLC phases?
A. To design the user interface
B. To assess economic, technical, and behavioral feasibilities
C. To write the system code
D. To train the users
Correct Answer:
B
Chapter: 8
Q140:
In which SDLC phase do analysts assess the organization's current systems and capabilities?
A. Logical Design
B. Physical Design
C. Analysis
D. Implementation
Correct Answer:
C