Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Multiple Choice Questions
Q411: What is the main concern of a commercial security policy?
- A: Confidentiality
- B: Integrity
- C: Availability
- D: Compliance with regulations
View Answer
B
Q412: Which type of security policy deals only with confidentiality?
- A: Military policy
- B: Commercial policy
- C: Integrity policy
- D: Confidentiality policy
View Answer
D
Q413: What is a key characteristic of a discretionary access control (DAC)?
- A: The owner can set access permissions based on identity
- B: The system enforces access rules based on attributes
- C: Access is controlled by an external authority
- D: Permissions are predefined and cannot be altered
View Answer
A
Q414: What type of access control is described as rule-based access control?
- A: Discretionary Access Control (DAC)
- B: Mandatory Access Control (MAC)
- C: Role-Based Access Control (RBAC)
- D: Originator Controlled Access Control (ORCON)
View Answer
B
Q415: What does an Originator Controlled Access Control (ORCON) mechanism focus on?
- A: The creator of the information controls access to it
- B: The system enforces access based on predefined rules
- C: The owner of the information controls access to it
- D: The access control is based on user roles
View Answer
A
Q416: What role does trust play in the context of applying security patches?
- A: It affects the effectiveness of the patch based on various assumptions
- B: It ensures that the patch will be automatically updated
- C: It guarantees that the patch will work with all systems
- D: It prevents any conflicts between different software patches
View Answer
A
Q417: Which access control allows users to set permissions based on their identity?
- A: Discretionary Access Control (DAC)
- B: Mandatory Access Control (MAC)
- C: Role-Based Access Control (RBAC)
- D: Originator Controlled Access Control (ORCON)
View Answer
A
Q418: Which policy type primarily aims to prevent data tampering?
- A: Commercial security policy
- B: Military security policy
- C: Confidentiality policy
- D: Integrity policy
View Answer
A
Q419: What assumption is NOT involved when installing a security patch?
- A: The patch is correctly installed without errors
- B: The patch came from a legitimate vendor
- C: The patch has been tested in all possible environments
- D: The patch is applied only in the vendor's environment
View Answer
C
Q420: What does a confidentiality policy typically handle?
- A: The protection of confidential information only
- B: Authorized ways to alter information
- C: Levels of service and accessibility
- D: Integrity of transactions
View Answer
A