Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Multiple Choice Questions
Q391: What does a security policy define?
- A: The set of authorized and unauthorized states of a system
- B: The hardware configuration of a system
- C: The software requirements for a system
- D: The physical layout of a network
View Answer
A
Q392: Which aspect of security is concerned with information leaks?
- A: Integrity
- B: Availability
- C: Confidentiality
- D: Authorization
View Answer
C
Q393: What is an example of a mechanism that enforces a security policy?
- A: A security policy statement
- B: An encryption algorithm
- C: File access controls
- D: An unauthorized system state
View Answer
B
Q394: Which of the following best describes a security policy?
- A: A formal statement that partitions system states into secure and non-secure
- B: A mechanism that performs security functions
- C: A set of software tools for security
- D: A detailed network architecture plan
View Answer
A
Q395: What type of policy describes the conditions under which data can be altered?
- A: Confidentiality Policy
- B: Integrity Policy
- C: Availability Policy
- D: Authorization Policy
View Answer
B
Q396: What does a high-level policy language focus on?
- A: Representing policy constraints using abstractions
- B: Setting inputs or arguments for system commands
- C: Controlling access to a specific hardware component
- D: Modifying system software directly
View Answer
A
Q397: What does a low-level policy language involve?
- A: Commands and syntax for setting or checking system constraints
- B: Abstract expressions of policy constraints
- C: Defining general principles of security
- D: Designing complex security models
View Answer
A
Q398: Which model focuses on "Separation of duty"?
- A: Chinese Wall Model
- B: Clark-Wilson Model
- C: Multilevel Security Model
- D: Access Control List Model
View Answer
B
Q399: In the provided example, which student breached security?
- A: The second student
- B: The first student
- C: Neither student
- D: Both students
View Answer
B
Q400: What is the primary mission of information security?
- A: To ensure that systems and contents remain unchanged
- B: To modify system behavior for efficiency
- C: To increase system performance
- D: To control network traffic
View Answer
A