Information Systems MCQs with Answers
Practice important Information Systems MCQs with answers and explanations.
Multiple Choice Questions
Q621: Fill in the blank: An IS audit approach helps organizations assess _________ in their information systems.
- A: Data redundancy
- B: Security policies
- C: Risk factors
- D: Confidentiality
View Answer
C
Q622: Which question would an IT auditor ask when evaluating "Integrity" in IS audit parameters?
- A: Is the information available?
- B: Is the information accurate?
- C: Is the information kept confidential?
- D: Is the information unique?
View Answer
B
Q623: What is the first step in a Risk-Based Audit Approach?
- A: Risk categorization
- B: Understanding control structure
- C: Risk assessment
- D: Understanding business process
View Answer
D
Q624: During risk assessment, IS audit primarily identifies which of the following?
- A: System bugs
- B: Control structure
- C: Security vulnerabilities
- D: User activity logs
View Answer
C
Q625: Which of the following is a core objective in risk management during an IS audit?
- A: Implementing network protocols
- B: Implementing security policy
- C: Organizing data logs
- D: Increasing bandwidth
View Answer
B
Q626: What does "authenticity" ensure in an information system audit?
- A: Information is useful
- B: Information is available
- C: Information is genuine without alteration
- D: Information is recoverable
View Answer
C
Q627: Which of the following is NOT a parameter for IS audit according to information assets protection?
- A: Integrity
- B: Ownership
- C: Utility
- D: Confidentiality
View Answer
B
Q628: What is the primary purpose of Risk Management?
- A: Managing financial investments
- B: Measuring and managing risks
- C: Improving productivity
- D: Implementing new technology
View Answer
B
Q629: Risk management strategies do NOT include which of the following?
- A: Avoiding the risk
- B: Transferring the risk
- C: Reducing the risk
- D: Ignoring the risk
View Answer
D
Q630: Which phase in the SDLC is associated with identifying the system's resources and information?
- A: System Characterization
- B: Threat Identification
- C: Vulnerability Identification
- D: Control Analysis
View Answer
A