Information Systems MCQs with Answers
Practice important Information Systems MCQs with answers and explanations.
Chapter: 38
Q681:
What phase involves training employees on the BCP policies?
A. Development Phase
B. Testing Phase
C. Awareness Phase
D. Implementation Phase
Correct Answer:
C
Chapter: 38
Q682:
Which of these recovery strategies involves cooperation between organizations for backup support?
A. Warm Site
B. Reciprocal Agreement
C. Cold Site
D. Hot Site
Correct Answer:
B
Chapter: 38
Q683:
In risk assessment, the term "risk impact" refers to what?
A. Potential threat of a risk
B. Cost of risk management
C. Expected harm from risk
D. Total elimination of risk
Correct Answer:
C
Chapter: 38
Q684:
What type of site contains only the physical infrastructure needed for IS recovery but no equipment?
A. Warm Site
B. Hot Site
C. Reciprocal Agreement
D. Cold Site
Correct Answer:
D
Chapter: 38
Q685:
Fill in the blank: During the ______ phase, the organization determines which risks could have a significant impact.
A. Business Continuity
B. Risk Analysis
C. Recovery Planning
D. Business Impact Analysis
Correct Answer:
D
Chapter: 38
Q686:
Which of the following is NOT a common element in risk management?
A. Passwords
B. Marketing analysis
C. Audit trails
D. Physical Security
Correct Answer:
B
Chapter: 38
Q687:
Disaster recovery planning specifically focuses on which aspect?
A. Business growth
B. Recovering computer systems
C. Auditing financial risks
D. Enhancing marketing
Correct Answer:
B
Chapter: 38
Q688:
Which of these is considered a "hot site" feature in recovery planning?
A. Has basic infrastructure only
B. Contains all necessary hardware and software
C. Operates solely for testing
D. Provides limited support
Correct Answer:
B
Chapter: 38
Q689:
In Business Continuity Planning, what does BIA stand for?
A. Business Incident Analysis
B. Business Impact Analysis
C. Basic Infrastructure Allocation
D. Backup Infrastructure Assessment
Correct Answer:
B
Chapter: 38
Q690:
When should a disaster be declared according to the Business Continuity Plan?
A. After full system shutdown
B. At the first minor error
C. When risks escalate to impact operations
D. Only during physical threats
Correct Answer:
C
Chapter: 38
Q691:
In which phase are operations classified by their criticality level?
A. Risk Analysis Phase
B. Development Phase
C. BIA Phase
D. Recovery Phase
Correct Answer:
C
Chapter: 38
Q692:
Which component of the BCP is responsible for restoring operations back to normal?
A. Audit Logs
B. Incident Reports
C. Operations Plan
D. Restoration Plan
Correct Answer:
D
Chapter: 38
Q693:
During which phase of BCP is a policy for business continuity created?
A. Testing
B. Monitoring
C. Creation
D. Awareness
Correct Answer:
C
Chapter: 39
Q694:
What is one of the primary vulnerabilities of the internet according to the text?
A. Open information exchange
B. Easy data encryption
C. Limited connectivity
D. Low user access
Correct Answer:
A
Chapter: 39
Q695:
Which type of attack involves probing for network information?
A. Passive attack
B. Active attack
C. Spoofing
D. Trojan Horse
Correct Answer:
A
Chapter: 39
Q696:
Passive attacks include _______.
A. Network Analysis, Eavesdropping, and Traffic Analysis
B. Masquerading and Spoofing
C. Denial of Service
D. Backdoors and trapdoors
Correct Answer:
A
Chapter: 39
Q697:
Which attack type impacts integrity, availability, and authentication of network security?
A. Active attack
B. Passive attack
C. Traffic Analysis
D. Trojan Horse
Correct Answer:
A
Chapter: 39
Q698:
In a masquerading attack, what does the attacker do?
A. Impersonates a legitimate user
B. Gathers network information
C. Blocks access to a network
D. Encrypts network data
Correct Answer:
A
Chapter: 39
Q699:
What is a backdoor or trapdoor?
A. A feature that allows access to the OS without regular controls
B. An attack that targets mobile devices
C. A program that intercepts messages
D. A tool for monitoring traffic
Correct Answer:
A
Chapter: 39
Q700:
Which method helps prevent unauthorized access by configuring security standards?
A. Fixing configurations
B. Spoofing networks
C. Eavesdropping
D. Adding firewalls
Correct Answer:
A