Information Systems MCQs with Answers
Practice important Information Systems MCQs with answers and explanations.
Multiple Choice Questions
Q631: _______ is a weakness that could be accidentally triggered or intentionally exploited, posing potential risks to the system.
- A: Threat
- B: Vulnerability
- C: Control
- D: Security Measure
View Answer
B
Q632: In the risk management process, what step comes after Vulnerability Identification?
- A: Likelihood Determination
- B: Control Analysis
- C: Impact Analysis
- D: Threat Identification
View Answer
B
Q633: Which method is NOT used to gather information on an IT system within its operational boundary?
- A: Filling out a questionnaire
- B: Conducting interviews
- C: Reviewing documents
- D: Hiring additional staff
View Answer
D
Q634: Which of the following terms refers to a facilitator within a company responsible for assessments related to information security?
- A: Corporate Leader
- B: Central Focal Point
- C: System Auditor
- D: Risk Controller
View Answer
B
Q635: The process of identifying potential weaknesses and flaws that could be exploited is called _______.
- A: System Characterization
- B: Threat Identification
- C: Control Analysis
- D: Vulnerability Assessment
View Answer
D
Q636: Which component of an IT system includes hardware, software, data, and people who support the IT system?
- A: Threat Identification
- B: System Characterization
- C: Vulnerability Analysis
- D: Risk Assessment
View Answer
B
Q637: The process of assessing risks for an IT system begins by defining the _______ of the effort.
- A: scope
- B: impact
- C: vulnerability
- D: solution
View Answer
A
Q638: Which step in threat identification involves understanding the motivation behind potential threats?
- A: System Characterization
- B: Threat Action
- C: Vulnerability Assessment
- D: Threat Motivation
View Answer
D
Q639: In risk management, which phase includes the step "Results Documentation"?
- A: System Characterization
- B: Control Recommendation
- C: Implementation
- D: Threat Identification
View Answer
C
Q640: A weakness in a system that could be exploited by a threat is called a _______.
- A: Threat
- B: Control
- C: Risk
- D: Vulnerability
View Answer
D