Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Multiple Choice Questions
Q401: What aspect of security policy addresses the level of service provided?
- A: Availability
- B: Integrity
- C: Confidentiality
- D: Authorization
View Answer
A
Q402: What is the distinction between a security policy and a security mechanism?
- A: A policy defines secure states; a mechanism enforces the policy
- B: A policy is a technical specification; a mechanism is a conceptual framework
- C: A policy is an application; a mechanism is a network protocol
- D: A policy is a system hardware feature; a mechanism is a software tool
View Answer
A
Q403: Which policy deals with the protection of sensitive information during transactions?
- A: Confidentiality Policy
- B: Integrity Policy
- C: Availability Policy
- D: Authorization Policy
View Answer
A
Q404: What is the role of a policy model?
- A: To represent a particular policy or set of policies
- B: To enforce the security policy
- C: To analyze security breaches
- D: To design network hardware
View Answer
A
Q405: What does a buffer overflow typically cause in a system?
- A: Execution of unintended instructions
- B: System performance enhancement
- C: Improved security features
- D: Prevention of unauthorized access
View Answer
A
Q406: In the example provided, what is an implicit policy?
- A: A policy that is not clearly defined but assumed to be understood
- B: A mechanism that explicitly enforces security rules
- C: A language for writing security constraints
- D: A formal statement of security requirements
View Answer
A
Q407: How does a security policy relate to a formal proof?
- A: A formal statement of the policy allows proving desired properties
- B: A formal proof is used to implement security mechanisms
- C: A formal proof verifies system hardware components
- D: A formal statement describes system vulnerabilities
View Answer
A
Q408: What type of policy is exemplified by restricting actions of Java programs downloaded via a web browser?
- A: High-Level Policy Language
- B: Low-Level Policy Language
- C: Confidentiality Policy
- D: Integrity Policy
View Answer
A
Q409: What is the purpose of the UNIX-based xhost command in the X11 windowing system?
- A: To control access based on host name or IP address
- B: To encrypt communications between users
- C: To manage system software installations
- D: To monitor network traffic
View Answer
A
Q410: What is the primary focus of a military (governmental) security policy?
- A: Confidentiality
- B: Integrity
- C: Availability
- D: Availability and Integrity
View Answer
A