Information Systems MCQs with Answers
Practice important Information Systems MCQs with answers and explanations.
Multiple Choice Questions
Q641: In threat identification, _______ vary from human threats to natural threats.
- A: threat sources
- B: system functions
- C: security measures
- D: vulnerability sources
View Answer
A
Q642: The likelihood that a threat will exploit a vulnerability is determined in which phase?
- A: Impact Analysis
- B: Control Analysis
- C: Likelihood Determination
- D: System Characterization
View Answer
C
Q643: _______ assessment identifies potential flaws that could be exploited by threat sources in a system.
- A: Risk
- B: Threat
- C: Vulnerability
- D: Control
View Answer
C
Q644: Which of the following steps is NOT part of the SDLC phases in risk management?
- A: System Characterization
- B: Threat Elimination
- C: Impact Analysis
- D: Control Recommendation
View Answer
B
Q645: The _______ step in threat identification focuses on understanding why someone might initiate a threat against a system.
- A: threat motivation
- B: system characterization
- C: vulnerability assessment
- D: likelihood determination
View Answer
A
Q646: During system characterization, additional information that may help in characterizing includes functional requirements and _______.
- A: system users
- B: attack history
- C: system location
- D: hardware specifications
View Answer
A
Q647: _______ is the phase where potential impacts of identified risks on the system are analyzed.
- A: System Characterization
- B: Impact Analysis
- C: Vulnerability Identification
- D: Control Analysis
View Answer
B
Q648: Information on prior risk assessments and security test results is typically used as input in which phase?
- A: Vulnerability Assessment
- B: Control Analysis
- C: Impact Analysis
- D: System Characterization
View Answer
A
Q649: The _______ phase in SDLC risk management involves assessing each phase of the life cycle for potential risks.
- A: system development
- B: monitoring
- C: implementation
- D: iterative
View Answer
D
Q650: Which is NOT typically a part of System Characterization?
- A: Documenting system interface
- B: Identifying system hardware
- C: Describing system mission
- D: Conducting system attack tests
View Answer
D