Information Security Basics: Definition and Scope

Question 1

What is the primary objective of information security measures?

Accepted Answer

To safeguard information assets from unauthorized access, use, disclosure, modification, disruption, or destruction

Answer

To guarantee uninterrupted operation of computer systems

Answer

To prevent data breaches

Answer

To ensure compliance with legal and regulatory requirements

Question 2

Which of the following is NOT considered a type of information security threat?

Accepted Answer

Natural disasters

Answer

Hacking

Answer

Malware

Answer

Physical theft

Question 3

What is encryption's role in information security?

Accepted Answer

To transform data into a form that is difficult for unauthorized parties to understand

Answer

To authenticate users

Answer

To detect and prevent malware

Answer

To back up data

Question 4

What is the significance of security awareness training in information security?

Accepted Answer

To educate employees on security risks and best practices

Answer

To monitor employee behavior for suspicious activity

Answer

To implement and enforce security policies

Answer

To perform penetration testing

Question 5

Which aspect of information security ensures that only authorized users can access sensitive information?

Accepted Answer

Authentication

Answer

Confidentiality

Answer

Integrity

Answer

Availability

Question 6

The primary objective of a security audit is to:

Accepted Answer

Identify and address security vulnerabilities

Answer

Train staff on security best practices

Answer

Implement new security technologies

Answer

Respond to security incidents

Question 7

A key responsibility of an information security manager is to:

Accepted Answer

Develop and implement security policies and procedures

Answer

Monitor security systems for suspicious activities

Answer

Conduct security awareness training

Answer

Install and maintain hardware and software

Question 8

The principle that governs the disclosure of information only to those who have a legitimate need to know is:

Accepted Answer

Need to know

Answer

Least privilege

Answer

Separation of duties

Answer

Defense in depth

Question 9

Information that is protected from unauthorized alteration or destruction has:

Accepted Answer

Integrity

Answer

Confidentiality

Answer

Availability

Answer

Authentication

Question 10

Encryption is primarily used to protect data from:

Accepted Answer

Eavesdropping

Answer

Unauthorized access

Answer

System failures

Answer

Data breaches

Question 11

The process of identifying and evaluating potential threats to information security is known as:

Accepted Answer

Risk assessment

Answer

Security audit

Answer

Vulnerability scanning

Answer

Penetration testing

Question 12

Which of the following is not a key area within information security?

Accepted Answer

Customer satisfaction

Answer

Data protection

Answer

Network security

Answer

Physical security

Question 13

Identify the objective of information security that does NOT belong:

Accepted Answer

Maximizing efficiency

Answer

Maintaining confidentiality

Answer

Ensuring integrity

Answer

Guaranteeing availability

Question 14

Which of the following threats aims to gain unauthorized access to information or systems?

Accepted Answer

Interception

Answer

Modification

Answer

Destruction

Answer

Disclosure

Question 15

Which of the following is a widely recognized standard for information security management systems?

Accepted Answer

ISO 27001

Answer

GDPR

Answer

PCI DSS

Answer

NIST 800-53

Question 16

Explain the concept of "least privilege" in information security:

Accepted Answer

Granting users only the minimum permissions necessary to perform their job functions

Answer

Restricting access to sensitive information to only authorized individuals

Answer

Implementing multi-factor authentication for all users

Answer

Using strong encryption to protect data at rest and in transit

Question 17

What does the term "social engineering" refer to in information security?

Accepted Answer

Tricking users into revealing sensitive information or taking actions that compromise security

Answer

Using technical vulnerabilities to gain access to systems or data

Answer

Exploiting physical weaknesses to bypass security measures

Answer

Deploying malware to infect systems and steal data

Question 18

Which of the following is a critical aspect of information security?

Accepted Answer

Confidentiality, integrity, and availability of information known as the CIA triad

Answer

Ensuring system compatibility

Answer

Maintaining network performance

Question 19

What is the most prevalent threat to information security globally?

Accepted Answer

Cyberattacks

Answer

Human error

Answer

Hardware failures

Answer

Natural disasters

Question 20

Which of the following is a typical type of security vulnerability?

Accepted Answer

Weak or default passwords

Answer

Operating system updates

Answer

Intrusion detection systems

Answer

Firewall configurations

Question 21

What is the primary purpose of an information security policy?

Accepted Answer

To define roles, responsibilities, and guidelines for information security

Answer

To specify technical security measures

Answer

To identify specific security risks

Question 22

Which of the following is a fundamental step in an information security risk assessment?

Accepted Answer

Identifying potential threats and vulnerabilities

Answer

Installing antivirus software

Answer

Applying software patches

Answer

Conducting security awareness training

Question 23

What is the primary objective of encryption in information security?

Accepted Answer

To ensure the confidentiality of data

Answer

To detect security breaches

Answer

To enhance network performance

Answer

To prevent unauthorized access

Question 24

What is the primary function of a firewall in information security?

Accepted Answer

To control and monitor incoming and outgoing network traffic

Answer

To detect malware

Answer

To encrypt data

Answer

To back up data

Question 25

Which of the following is a key benefit of implementing an information security incident response plan?

Accepted Answer

Minimizing the impact and consequences of a security breach

Answer

Eliminating the risk of security breaches

Answer

Detecting security breaches in real-time

Answer

Automatically recovering from security breaches

Question 26

What is the main objective of conducting regular security audits in information security?

Accepted Answer

To assess the effectiveness of security measures and identify areas for improvement

Answer

To replace outdated security software and hardware

Answer

To train employees on security best practices