Skip to main content

Information Systems MCQs with Answers

Practice important Information Systems MCQs with answers and explanations.

Multiple Choice Questions

Q651: What document would help identify the scope, resources, and functions of an IT system as part of risk management?
  • A: System Security Policy
  • B: System Characterization Report
  • C: System Configuration
  • D: Threat Source Report
View Answer
B

Q652: What is the purpose of Control Analysis in risk management?
  • A: To create new controls
  • B: To assess current or planned controls
  • C: To remove all risks
  • D: To increase risk impact
View Answer
B

Q653: Which type of controls includes management controls?
  • A: Non-technical controls
  • B: Technical controls
  • C: Hardware controls
  • D: Financial controls
View Answer
A

Q654: Likelihood Determination assesses the potential of what happening?
  • A: Threat elimination
  • B: Threat execution on a vulnerability
  • C: System upgrade
  • D: Security audit completion
View Answer
B

Q655: What is an example of a high likelihood scenario?
  • A: Controls are in place to prevent threats
  • B: The threat lacks motivation
  • C: Controls are ineffective, and the threat source is motivated
  • D: Threat source is neutralized
View Answer
C

Q656: In Impact Analysis, which of the following is NOT a factor?
  • A: System mission
  • B: Data criticality
  • C: User preferences
  • D: Data sensitivity
View Answer
C

Q657: The output of the Impact Analysis phase is a/an:
  • A: Impact rating
  • B: Risk report
  • C: Control list
  • D: Security audit
View Answer
A

Q658: Which phase determines the likelihood of a threat source exploiting a vulnerability?
  • A: Control Analysis
  • B: Risk Determination
  • C: Likelihood Determination
  • D: Impact Analysis
View Answer
C

Q659: Which output is expected from the Risk Determination phase?
  • A: Impact rating
  • B: Likelihood rating
  • C: Risk level
  • D: Control recommendations
View Answer
C

Q660: What factor contributes to the determination of a risk level?
  • A: Likelihood of threat
  • B: System downtime
  • C: Cost of controls
  • D: Employee training
View Answer
A

Test Your Knowledge

Take a timed quiz on Information Systems

🚀 Start Quiz Now