Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Multiple Choice Questions
Q481: What attribute is crucial for tracking hardware, software, and network assets?
- A: Market value
- B: Age of the asset
- C: Specific attributes based on organizational needs
- D: Brand name
View Answer
C
Q482: Which tool can help maintain an up-to-date inventory listing?
- A: Manual record keeping
- B: Automated asset inventory tools
- C: Periodic reviews
- D: External audits
View Answer
B
Q483: How often should information owners review information classifications?
- A: Monthly
- B: Quarterly
- C: Annually
- D: Every five years
View Answer
C
Q484: What does 'Management of Classified Data' include?
- A: Only storage of classified data
- B: Distribution, portability, and destruction of classified data
- C: Monitoring of classified data
- D: Only storage and distribution
View Answer
B
Q485: What is a key aspect of classifying and prioritizing information assets?
- A: Subdividing categories as needed
- B: Assigning random values
- C: Ignoring sensitivity of data
- D: Using only one classification category
View Answer
A
Q486: How can information asset value be assigned?
- A: Through market research
- B: Using a fixed value system
- C: By answering questions and analyzing answers
- D: Through external valuation services
View Answer
C
Q487: What process involves assigning scores to critical factors for each asset?
- A: Weighted factor analysis
- B: Threat assessment
- C: Impact analysis
- D: Control evaluation
View Answer
A
Q488: What should be done after identifying information assets and preliminary classifications?
- A: Ignore the threats
- B: Assess and identify the threats facing the organization
- C: Focus solely on asset valuation
- D: Develop a security policy
View Answer
B
Q489: Which threat assessment factor involves evaluating recovery costs?
- A: Impact of threat
- B: Probability of threat occurrence
- C: Cost of recovery from attack
- D: Cost of prevention measures
View Answer
C
Q490: What are vulnerabilities in the context of risk management?
- A: Specific threats to an asset
- B: Weaknesses that can be exploited by threats
- C: Policies for asset protection
- D: Steps for threat assessment
View Answer
B