Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Multiple Choice Questions
Q501: Which type of policy addresses specific implementations like email usage?
- A: General security policy
- B: Program security policy
- C: Issue-specific policy
- D: Systems-specific policy
View Answer
C
Q502: What is an example of a systems-specific policy?
- A: Email use policy
- B: Firewall configuration policy
- C: Internet access policy
- D: General security guidelines
View Answer
B
Q503: What does documenting the results of risk assessment involve?
- A: Ranking vulnerabilities by their likelihood
- B: Identifying threats only
- C: Recording information asset values only
- D: Preparing a ranked vulnerability risk worksheet
View Answer
D
Q504: What should be included in the ranked vulnerability risk worksheet?
- A: Asset, Asset Impact, Vulnerability, Vulnerability Likelihood, Risk-Rating Factor
- B: Asset Impact only
- C: Controls and safeguards only
- D: Vulnerability categories only
View Answer
A
Q505: Which worksheet provides details on asset impact and vulnerability likelihood?
- A: Risk assessment worksheet
- B: Ranked vulnerability risk worksheet
- C: Control measures worksheet
- D: Threat analysis worksheet
View Answer
B
Q506: How should a risk assessment document be used after completion?
- A: For initial risk identification
- B: For creating security policies
- C: As a basis for risk management and control
- D: For asset inventory only
View Answer
C
Q507: What does a risk-rating factor represent?
- A: The calculated figure from asset impact multiplied by likelihood
- B: The number of vulnerabilities assessed
- C: The overall asset value
- D: The total number of controls implemented
View Answer
A
Q508: Which type of control involves security education and training programs?
- A: Policies
- B: Programs
- C: Technologies
- D: Procedures
View Answer
B
Q509: What is the recommended likelihood rating for very high-risk scenarios?
- A: 0.1
- B: 0.5
- C: 0.8
- D: 1
View Answer
D
Q510: How should likelihood values be selected for risk assessment?
- A: Based on historical data and external references
- B: Using arbitrary numbers
- C: From standard risk tables
- D: By guessing based on experience
View Answer
A