Information Systems MCQs with Answers
Practice important Information Systems MCQs with answers and explanations.
Chapter: 37
Q661:
What is the final phase in the risk management process?
A. Likelihood Determination
B. Control Recommendations
C. Risk Determination
D. Results Documentation
Correct Answer:
D
Chapter: 37
Q662:
In risk assessment, what is the purpose of "Implementation"?
A. Creating controls
B. Evaluating current threats
C. Enforcing controls as part of the system
D. Re-assessing likelihood levels
Correct Answer:
C
Chapter: 37
Q663:
Which phase in risk management emphasizes continuous monitoring?
A. Likelihood Determination
B. Monitoring and Evaluation
C. Impact Analysis
D. Risk Determination
Correct Answer:
B
Chapter: 37
Q664:
During which phase does the security manager assess controls based on good practice guidance?
A. Implementation
B. Control Analysis
C. Risk Determination
D. Monitoring
Correct Answer:
B
Chapter: 37
Q665:
A highly motivated and capable threat with ineffective controls would be rated as which likelihood level?
A. Low
B. Medium
C. High
D. Minimal
Correct Answer:
C
Chapter: 37
Q666:
Which analysis helps define data criticality and sensitivity?
A. Impact Analysis
B. Control Analysis
C. Implementation
D. Risk Documentation
Correct Answer:
A
Chapter: 37
Q667:
In likelihood determination, if the threat source has low motivation and capability, the likelihood level would be:
A. High
B. Medium
C. Low
D. Uncertain
Correct Answer:
C
Chapter: 37
Q668:
What action is necessary after implementing risk controls?
A. Revising controls immediately
B. Documenting control details
C. Monitoring and evaluating control effectiveness
D. Releasing controls to users
Correct Answer:
C
Chapter: 37
Q669:
Which phase documents the results of risk management in a report or briefing?
A. Risk Determination
B. Results Documentation
C. Impact Analysis
D. Control Recommendations
Correct Answer:
B
Chapter: 37
Q670:
In a risk assessment, what might a risk scale labeled "high" indicate?
A. Loss is less than Rs. 1,000
B. Loss exceeds Rs. 5,000
C. Loss is limited to Rs. 1,000-5,000
D. Loss is negligible
Correct Answer:
B
Chapter: 37
Q671:
What is the primary objective of the Risk Determination phase?
A. To assess risk to the IT system
B. To eliminate all threats
C. To document control implementations
D. To prepare a financial report
Correct Answer:
A
Chapter: 38
Q672:
What is the primary goal of risk management in a business?
A. To avoid all risks
B. To ensure business growth
C. To prevent risk-related disruptions
D. To increase profits
Correct Answer:
C
Chapter: 38
Q673:
Which of the following is a core part of the risk management process?
A. Audit trails
B. Sales records
C. Financial reporting
D. Marketing strategies
Correct Answer:
A
Chapter: 38
Q674:
“The ultimate risk is _____.”
A. being unprepared
B. taking no risks
C. taking excessive risks
D. poorly managing risks
Correct Answer:
B
Chapter: 38
Q675:
Which component is essential in securing web-based transactions?
A. Password encryption
B. Environmental security
C. Audit trails
D. Network firewalls
Correct Answer:
A
Chapter: 38
Q676:
Fill in the blank: The primary objective of audit trails is to track transactions from ________ to ________.
A. entry, archive
B. creation, disposal
C. cradle, grave
D. report, storage
Correct Answer:
C
Chapter: 38
Q677:
A Business Continuity Plan is designed to do what in case of a major disruption?
A. Eliminate all risks
B. Resume critical functions
C. Conduct financial audits
D. Improve marketing strategies
Correct Answer:
B
Chapter: 38
Q678:
What term refers to backup sites that are partially configured but lack the main computer?
A. Cold Site
B. Warm Site
C. Hot Site
D. Reciprocal Agreement
Correct Answer:
B
Chapter: 38
Q679:
In the context of BCP, what is a primary role of senior management and board members?
A. Performing all IT functions
B. Identifying and managing risks
C. Supervising all staff
D. Handling sales directly
Correct Answer:
B
Chapter: 38
Q680:
Which document is created to resume operations after a disaster or disruption?
A. Financial Statement
B. Business Impact Analysis
C. Business Continuity Plan
D. Audit Report
Correct Answer:
C