Information Systems MCQs with Answers
Practice important Information Systems MCQs with answers and explanations.
Chapter: 30
Q541:
Which step in risk mitigation evaluates the feasibility of control options?
A. Control analysis
B. Risk assessment
C. Risk transference
D. Control adjustment
Correct Answer:
D
Chapter: 31
Q542:
In the Control Adjustment phase, which factor is NOT considered for designing controls?
A. Cost effectiveness
B. Security framework
C. Expected potential benefit
D. Personal judgment
Correct Answer:
B
Chapter: 31
Q543:
The phase that documents findings and recommends safeguards is known as _______.
A. Control Adjustment
B. Report Preparation
C. Risk Assessment
D. Audit Review
Correct Answer:
B
Chapter: 31
Q544:
Which of the following is considered a physical threat to an information system?
A. Virus
B. Logical intrusion
C. Flood
D. Hacking
Correct Answer:
C
Chapter: 31
Q545:
IFAC suggests that security levels must align with _______.
A. Information sensitivity
B. Security protocols
C. Information value
D. Security costs
Correct Answer:
C
Chapter: 31
Q546:
What is the primary role of an Information Systems Security Professional?
A. Implementing and reviewing security policies
B. Defining data classification
C. Following security policies
D. Providing independent security audits
Correct Answer:
A
Chapter: 31
Q547:
Logical threats primarily affect which component of an information system?
A. Hardware
B. Software and data
C. Physical infrastructure
D. Power supply
Correct Answer:
B
Chapter: 31
Q548:
Which of the following power issues refers to a total loss of power?
A. Surge
B. Spike
C. Sag
D. Blackout
Correct Answer:
D
Chapter: 31
Q549:
Who is responsible for maintaining the integrity of data within an information system?
A. Executive Management
B. Data Owners
C. Technology Providers
D. Users
Correct Answer:
B
Chapter: 31
Q550:
An increase in power supply that could affect equipment is known as a _______.
A. Surge
B. Sag
C. Brownout
D. Blackout
Correct Answer:
A
Chapter: 31
Q551:
Which of the following is NOT a role of an Information Systems Auditor?
A. Reviewing security policy
B. Managing security policy
C. Providing independent assurance
D. Assessing security objectives
Correct Answer:
B
Chapter: 31
Q552:
Which type of control involves manual override in case of a power failure?
A. Data backup systems
B. Alarms and fire extinguishers
C. Security locks
D. Voltage regulators
Correct Answer:
B
Chapter: 31
Q553:
What does "threat" commonly refer to in information security?
A. A deliberate or accidental event causing harm
B. A planned security measure
C. A physical safeguard
D. A software application
Correct Answer:
A
Chapter: 31
Q554:
Which of the following security components must NOT fail during a total power loss?
A. Computer monitors
B. Fire extinguisher systems
C. Power doors
D. Office lighting
Correct Answer:
B
Chapter: 31
Q555:
Fill in the blank: _______ threats can come from within or outside the organization.
A. Physical
B. Logical
C. Accidental
D. Internal/External
Correct Answer:
D
Chapter: 31
Q556:
Information Systems Security Professionals are responsible for _______.
A. Data classification
B. Design, implementation, and review
C. Following policies
D. Power supply management
Correct Answer:
B
Chapter: 31
Q557:
The likelihood of physical damage from natural disasters can be mitigated by _______.
A. Uninterruptible Power Supply (UPS)
B. Role assignment
C. Report Preparation
D. Information classification
Correct Answer:
A
Chapter: 32
Q558:
Unauthorized intrusion can be classified as which two types?
A. Logical and physical
B. Virtual and logical
C. Physical and virtual
D. Unauthorized and authorized
Correct Answer:
A
Chapter: 32
Q559:
Physical intrusion involves which type of unauthorized activity?
A. Accessing data
B. Entering an organization
C. Tampering with software
D. Installing viruses
Correct Answer:
B
Chapter: 32
Q560:
In logical intrusion, the intruder might attempt to ________.
A. steal data physically
B. spy on communications
C. remove hard disks
D. break network cables
Correct Answer:
B