Information Security MCQs with Answers
Practice important Information Security MCQs with answers and explanations.
Multiple Choice Questions
Q521: Which control strategy involves purchasing insurance or revising deployment models?
- A: Defend
- B: Transfer
- C: Mitigate
- D: Terminate
View Answer
B
Q522: What does the accept strategy rely on?
- A: High risk tolerance
- B: A detailed cost-benefit analysis
- C: Transferring risk to another organization
- D: Implementing security controls
View Answer
B
Q523: What is the focus of the quantitative risk control assessment?
- A: Using scales and evaluations
- B: Applying numerical measures and actual values
- C: Benchmarking against other organizations
- D: Qualitative risk evaluations
View Answer
B
Q524: How is operational feasibility assessed?
- A: Technical requirements and expertise
- B: User and management support
- C: Financial impact of controls
- D: Political implications
View Answer
B
Q525: What is the purpose of benchmarking in risk control?
- A: To find the best technology solutions
- B: To compare practices with peer organizations
- C: To evaluate financial feasibility
- D: To assess the effectiveness of current controls
View Answer
B
Q526: What is an example of a technical feasibility analysis?
- A: Evaluating user acceptance of a control
- B: Assessing the technology needed to implement a control
- C: Analyzing the cost-benefit of a control
- D: Determining political support for a control
View Answer
B
Q527: What does political feasibility determine?
- A: Availability of technology
- B: Impact on organization efficiency
- C: Consensus and relationships among communities of interest
- D: Technical expertise available
View Answer
C
Q528: What type of control strategy involves creating incident response and disaster recovery plans?
- A: Defend
- B: Transfer
- C: Mitigate
- D: Accept
View Answer
C
Q529: What is the focus of the feasibility study before choosing a control strategy?
- A: Economic and noneconomic consequences of the vulnerability
- B: Technical specifications of the control
- C: Political and organizational support for the control
- D: Operational and behavioral feasibility
View Answer
A
Q530: What type of analysis examines how well a control contributes to overall organizational efficiency?
- A: Technical Feasibility
- B: Operational Feasibility
- C: Organizational Feasibility
- D: Political Feasibility
View Answer
C