Information Systems MCQs with Answers
Practice important Information Systems MCQs with answers and explanations.
Multiple Choice Questions
Q521: Fill in the blank: The primary step in determining what needs to be protected is _______.
- A: Threat analysis
- B: Identifying assets
- C: Policy development
- D: Risk assessment
View Answer
B
Q522: Which of the following defines a threat?
- A: An unauthorized access attempt
- B: A potential loss
- C: A security breach
- D: A virus
View Answer
B
Q523: The ranking of assets helps to determine what?
- A: Their usability
- B: Their importance
- C: Their cost
- D: Their age
View Answer
B
Q524: What is the purpose of threat identification in information security?
- A: Minimize hardware cost
- B: Identify potential threats
- C: Install new software
- D: Increase database speed
View Answer
B
Q525: Physical threats to information systems can include which of the following?
- A: Fire
- B: Viruses
- C: Logical intrusion
- D: Unauthorized access
View Answer
A
Q526: Which type of threat refers to damage caused to software and data without physical presence?
- A: Physical threat
- B: Logical threat
- C: Environmental threat
- D: Structural threat
View Answer
B
Q527: Which of the following is a preventive control in information security?
- A: Audit trails
- B: Encryption
- C: Intrusion detection
- D: All of the above
View Answer
B
Q528: What does a risk assumption entail in risk mitigation?
- A: Avoiding risk
- B: Accepting risk
- C: Transferring risk
- D: Increasing controls
View Answer
B
Q529: ________ controls inhibit attempts to violate security policy and include access control enforcement and encryption.
- A: Detective
- B: Preventive
- C: Corrective
- D: Reactive
View Answer
B
Q530: Which step involves analyzing controls that have been implemented to minimize or eliminate threat likelihood?
- A: Threat Identification
- B: Control Analysis
- C: Risk Exposure Analysis
- D: Control Adjustment
View Answer
B