Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Multiple Choice Questions
Q431: What does the Biba’s Integrity Policy Model focus on?
- A: Confidentiality of information
- B: Accuracy and unaltered data representation
- C: Access control rules
- D: Information flow restrictions
View Answer
B
Q432: What is the main focus of integrity policies?
- A: Accuracy and unchanged data representation
- B: Unauthorized access prevention
- C: Information flow control
- D: Confidentiality of sensitive information
View Answer
A
Q433: Which hybrid model combines both confidentiality and integrity?
- A: Chinese Wall Model
- B: Role-Based Access Control (RBAC)
- C: Originator Controlled Access Control (ORCON)
- D: LOCUS Integrity Policy Model
View Answer
A
Q434: What is the purpose of the "Publish" step in developing information systems security policies?
- A: To check whether the policy is followed
- B: To publish the policy document
- C: To design the policy
- D: To evaluate the policy’s effect
View Answer
B
Q435: What does the "Monitor compliance" step involve?
- A: Publishing the policy document
- B: Evaluating the policy’s effect
- C: Checking adherence to the policy
- D: Amending and updating the policy
View Answer
C
Q436: Which stakeholder sets security goals and provides resources?
- A: Security experts
- B: Users
- C: Management
- D: System/network administrators
View Answer
C
Q437: What is the role of auditors in relation to security policies?
- A: Designing and updating the policy
- B: Implementing security controls
- C: Setting security goals
- D: Monitoring and checking compliance
View Answer
D
Q438: What does the "Evaluate" step in policy development assess?
- A: The adherence to the policy
- B: The design and implementation of the policy
- C: The policy's effectiveness and impact
- D: The updates required for the policy
View Answer
C
Q439: In which step is the policy document actually created and shared?
- A: Design
- B: Implement
- C: Publish
- D: Review
View Answer
C
Q440: Which step involves checking if the policy is still relevant and up-to-date?
- A: Enforce
- B: Review
- C: Design
- D: Monitor compliance
View Answer
B