Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Multiple Choice Questions
Q111: Fill in the blank: Both information security technologists and _______ must recognize the shared overall goals.
- A: Management
- B: End users
- C: Developers
- D: Administrators
View Answer
B
Q112: Fill in the blank: An information system must protect against threats while ensuring _______.
- A: Minimal cost
- B: Maximum speed
- C: User satisfaction
- D: Data availability
View Answer
D
Q113: What is the purpose of the OSI Security Architecture?
- A: To define security attacks
- B: To provide a systematic way of defining security requirements
- C: To implement security protocols
- D: To ensure data confidentiality
View Answer
B
Q114: Which of the following is a key component of the OSI Security Architecture?
- A: Security attacks
- B: Security protocols
- C: Security layers
- D: Security services
View Answer
D
Q115: What does the authentication service ensure in communication?
- A: Data integrity
- B: Message authenticity
- C: Nonrepudiation
- D: Confidentiality
View Answer
B
Q116: In the context of security, what does access control prevent?
- A: Unauthorized disclosure
- B: Unauthorized modification
- C: Unauthorized use of a resource
- D: Unauthorized data access
View Answer
C
Q117: Which of the following is NOT a category of security services defined by X.800?
- A: Authentication
- B: Data integrity
- C: Encipherment
- D: Nonrepudiation
View Answer
C
Q118: What does the data confidentiality service protect against?
- A: Unauthorized access
- B: Unauthorized modification
- C: Unauthorized disclosure
- D: Unauthorized deletion
View Answer
C
Q119: What is the primary concern of the data integrity service?
- A: Confidentiality
- B: Ensuring data is received as sent
- C: Controlling access to data
- D: Protecting data from being deleted
View Answer
B
Q120: What does nonrepudiation in security provide?
- A: Proof of data origin
- B: Assurance of data confidentiality
- C: Protection against denial of participation
- D: Prevention of unauthorized data access
View Answer
C