Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Multiple Choice Questions
Q421: What is a key feature of Mandatory Access Control (MAC)?
- A: Access is controlled by system mechanisms, not by user identity
- B: Access is based on the identity of the subject and object
- C: Access permissions are set by the owner of the object
- D: Access is controlled by the creator of the information
View Answer
A
Q422: In the given examples, what does the rule-based control (MAC) refer to?
- A: The law allowing a court to access driving records without permission
- B: The owner's ability to control access based on identity
- C: The creator's control over the dissemination of information
- D: The user's discretion in granting or denying access to files
View Answer
A
Q423: Which type of policy would address a situation where a customer's account balance is exposed?
- A: Confidentiality policy
- B: Integrity policy
- C: Availability policy
- D: Commercial policy
View Answer
A
Q424: What might a security policy ensure regarding transactions?
- A: All transactions must be well-formed and consistent
- B: Transactions must be completed within a specific timeframe
- C: Transactions must be encrypted during transmission
- D: Transactions must be logged for auditing purposes
View Answer
A
Q425: What is an example of an access control mechanism that bases access on the creator of the information?
- A: Originator Controlled Access Control (ORCON)
- B: Discretionary Access Control (DAC)
- C: Mandatory Access Control (MAC)
- D: Role-Based Access Control (RBAC)
View Answer
A
Q426: How does a military security policy differ from a confidentiality policy?
- A: A military security policy may also address integrity, while a confidentiality policy focuses solely on confidentiality
- B: A military security policy deals with data tampering, while a confidentiality policy does not
- C: A military security policy is less concerned with confidentiality compared to a commercial policy
- D: A military security policy sets service parameters, while a confidentiality policy does not
View Answer
A
Q427: What does data confidentiality aim to protect against?
- A: Unintended or unauthorized access
- B: Unintended data modification
- C: Unintentional data deletion
- D: Unauthorized data transmission
View Answer
A
Q428: Which model is commonly used for confidentiality policies in military/government areas?
- A: Biba’s Integrity Policy
- B: Model
- C: Low Water Mark Policy
- D: Bell-LaPadula Model
View Answer
B
Q429: Which policy is designed to prevent unauthorized disclosure of information?
- A: Integrity policy
- B: Confidentiality policy
- C: Access Control policy
- D: Hybrid policy
View Answer
B
Q430: Which of the following is a known confidentiality policy model?
- A: Chinese Wall Model
- B: Role-Based Access Control (RBAC)
- C: Bell-LaPadula Model
- D: LOCUS Integrity Policy Model
View Answer
C