Information Systems Security: Threats, Measures, and Ethics

Question 1

Which of the following is a type of encryption algorithm that uses a public key and a private key?

Accepted Answer

Asymmetric encryption

Answer

Symmetric encryption

Answer

Hashing

Answer

Salt and pepper method

Question 2

What is the primary purpose of a firewall?

Accepted Answer

To block unauthorized access to a network

Answer

To detect and block malware

Answer

To encrypt data

Answer

To back up data

Question 3

Which of the following is an example of a social engineering technique?

Accepted Answer

Phishing

Answer

Buffer overflow

Answer

SQL injection

Answer

DDoS attack

Question 4

State a best practice for creating strong and secure passwords.

Accepted Answer

Use a combination of uppercase and lowercase letters, numbers, and symbols.

Answer

Make the password as short as possible.

Answer

Use common words that are easy to remember.

Answer

Store the password in a plain text file.

Question 5

Which of the following is NOT a type of malicious software?

Accepted Answer

Spam

Answer

Virus

Answer

Worm

Answer

Trojan horse

Question 6

Which of the following is NOT classified as malware?

Accepted Answer

Anti-Malware Software

Answer

Virus

Answer

Worm

Answer

Trojan horse

Question 7

Which security measure involves establishing and regularly updating strong passwords?

Accepted Answer

Password management

Answer

Access control

Answer

Biometrics

Answer

Encryption

Question 8

What is the ethical principle that emphasizes protecting individuals' privacy in the context of information systems?

Accepted Answer

Confidentiality

Answer

Integrity

Answer

Availability

Answer

Non-repudiation

Question 9

Which of the following is a critical difference between symmetric and asymmetric encryption algorithms?

Accepted Answer

Key exchange method

Answer

Key length

Answer

Encryption speed

Answer

Security level

Question 10

What is the primary purpose of a firewall in an information system?

Accepted Answer

Preventing unauthorized access

Answer

Detecting and eliminating malware

Answer

Encrypting data for secure storage

Answer

Creating backups of critical data

Question 11

What is the term for the systematic process of identifying, assessing, and managing risks associated with information systems?

Accepted Answer

Risk assessment

Answer

Vulnerability management

Answer

Security audit

Answer

Incident response

Question 12

What is the primary purpose of a firewall?

Accepted Answer

To prevent unauthorized access to a computer network

Answer

To detect and remove viruses and other malware

Answer

To encrypt data before it is transmitted over a network

Answer

To establish a secure connection between two computers

Question 13

What is the primary function of a security policy in an organization?

Accepted Answer

To establish rules and procedures for protecting information systems

Answer

To provide technical guidance on implementing security measures

Answer

To outline disaster recovery plans

Answer

To train employees on security awareness

Question 14

What is the distinction between authentication and authorization?

Accepted Answer

Authentication verifies a user's identity, while authorization determines their access rights.

Answer

Authorization verifies a user's identity, while authentication determines their access rights.

Answer

Authentication and authorization are interchangeable terms.

Answer

Authentication is more important than authorization.

Question 15

Which of these threats involves unauthorized access and theft of data from information systems?

Accepted Answer

Hacking

Answer

Power failure

Answer

Software updates

Answer

Phishing

Question 16

Which of the following is NOT a key characteristic of a secure information system?

Accepted Answer

Flexibility

Answer

Confidentiality

Answer

Integrity

Answer

Accessibility

Question 17

Which of the following is a common method used in social engineering attacks?

Accepted Answer

Phishing

Answer

Malware

Answer

Spam

Answer

Hacking

Question 18

Which of the following is NOT considered a threat to information systems?

Accepted Answer

Budget constraints

Answer

Malware

Answer

Hardware failure

Answer

Human error

Question 19

What is the primary purpose of a firewall in an information system?

Accepted Answer

To prevent unauthorized access to a network

Answer

To encrypt data within a network

Answer

To detect and block malware

Answer

To perform regular backups of sensitive data

Question 20

What is the primary purpose of data encryption in information systems security?

Accepted Answer

Ensuring the confidentiality of sensitive data

Answer

Improving the efficiency of data transmission

Answer

Preventing data loss in case of hardware failure

Answer

Detecting malicious activity within a network

Question 21

What is the role of a penetration tester in information systems security?

Accepted Answer

Identifying and exploiting vulnerabilities in a system to assess its security

Answer

Developing and implementing security policies and procedures

Answer

Monitoring and detecting security incidents and breaches

Answer

Training employees on security best practices and awareness

Question 22

What is the purpose of a disaster recovery plan for information systems?

Accepted Answer

Outlining procedures for restoring critical business operations and data in the event of a disaster or disruption

Answer

Identifying and mitigating risks to information systems

Answer

Providing guidance on preventing security breaches and incidents

Answer

Training employees on disaster preparedness and response

Question 23

Which of the following is NOT a type of malicious software (malware)?

Accepted Answer

Firewall

Answer

Virus

Answer

Trojan horse

Answer

Worms

Question 24

What is the main purpose of a security policy in information systems security?

Accepted Answer

To define guidelines and procedures for protecting information systems

Answer

To install and configure security software

Answer

To educate users on security best practices

Answer

To respond to security incidents

Question 25

What is the purpose of a digital certificate?

Accepted Answer

To verify the identity of a website or user

Answer

To encrypt data transmissions

Answer

To provide access to a secure server

Answer

To prevent unauthorized access to a network

Question 26

In wireless network security, what are the main roles of encryption and authentication protocols?

Accepted Answer

Encryption secures data during transmission, ensuring privacy.

Accepted Answer

Authentication verifies user identities before granting network access.

Answer

Encryption verifies user identities.

Answer

Authentication encrypts data during transmission.

Question 27

In cloud computing, which model outlines the shared security responsibilities between the customer and the cloud provider?

Accepted Answer

Both the customer and the cloud provider share security responsibilities, with the customer securing their data and applications, while the provider secures the underlying infrastructure.

Answer

Sole responsibility for security lies with the cloud provider.

Answer

The customer bears the sole responsibility for securing their cloud environment.

Answer

The shared responsibility model lacks clear definitions of security responsibilities.

Question 28

Which of the following is NOT a primary threat to information systems?

Accepted Answer

Software updates

Answer

Malware

Answer

Unauthorized access

Answer

Hardware failure

Question 29

What is the primary purpose of encryption in information security?

Accepted Answer

To prevent unauthorized access to data

Answer

To detect and identify malware

Answer

To recover lost or damaged data

Answer

To enhance system performance

Question 30

Which of the following is NOT a characteristic of a secure information system?

Accepted Answer

Responsiveness

Answer

Confidentiality

Answer

Availability

Answer

Integrity

Question 31

What is the role of firewalls in information system security?

Accepted Answer

To monitor and control incoming and outgoing network traffic

Answer

To detect and prevent malware attacks

Answer

To provide secure access to remote systems

Answer

To encrypt data transmissions

Question 32

Which of these is NOT typically considered a direct threat to information systems?

Accepted Answer

Outdated hardware

Answer

Malware

Answer

Phishing

Answer

Hacking

Question 33

Which security measure primarily focuses on controlling access to information systems?

Accepted Answer

Authentication

Answer

Firewalls

Answer

Backup

Answer

Encryption

Question 34

What ethical concern is often raised when using biometrics for authentication?

Accepted Answer

Privacy concerns

Answer

Accuracy

Answer

Cost

Question 35

What is a primary benefit of using encryption?

Accepted Answer

Protecting data from unauthorized access

Answer

Improved system performance

Answer

Enhanced user experience

Answer

Reduced data storage space

Question 36

What is the main function of a firewall in an information system?

Accepted Answer

Filtering network traffic based on security rules

Answer

Providing remote access to systems

Answer

Encrypting data transmissions

Question 37

What is a best practice for managing passwords securely?

Accepted Answer

Using strong, unique passwords for each account

Answer

Changing passwords infrequently

Answer

Storing passwords in plain text

Answer

Sharing passwords with colleagues

Question 38

What is the main purpose of a vulnerability assessment?

Accepted Answer

Identifying weaknesses in information systems

Answer

Training users on security awareness

Answer

Protecting systems from malware

Answer

Ensuring compliance with regulations

Question 39

Which type of social engineering attack relies heavily on deception?

Accepted Answer

Phishing

Answer

Malware injection

Answer

Denial-of-service

Answer

Brute force attack

Question 40

What is the key difference between symmetric and asymmetric encryption?

Accepted Answer

Symmetric uses the same key for encryption and decryption, while asymmetric uses separate keys for each.

Answer

Asymmetric is more secure than symmetric

Answer

Symmetric is faster than asymmetric

Question 41

Which UK law specifically focuses on data protection?

Accepted Answer

Data Protection Act 2018

Answer

Freedom of Information Act 2000

Answer

Cybersecurity Act 2018

Answer

Computer Misuse Act 1990

Question 42

Which ethical dilemma arises when implementing information systems security measures?

Accepted Answer

Balancing user privacy with system protection

Answer

Maintaining data accuracy

Answer

Guaranteeing intellectual property rights

Answer

None of the above

Question 43

What substantial benefit is derived from implementing strong information systems security measures?

Accepted Answer

Mitigating the risk of data breaches

Answer

Enhancing customer satisfaction

Answer

None of the above

Answer

Boosting sales revenue

Question 44

Identify the primary responsibility of an information security officer (ISO).

Accepted Answer

Developing and implementing security policies and procedures

Answer

Designing software systems

Answer

Performing network maintenance

Answer

Managing financial accounts

Question 45

Which practice is crucial for creating strong passwords?

Accepted Answer

Combining upper and lower case letters, numbers, and symbols

Answer

None of the above

Answer

Using only numbers

Answer

Using only letters

Question 46

Which type of malware encrypts a victim's files and demands payment to restore access?

Accepted Answer

Ransomware

Answer

Worm

Answer

Virus

Answer

Trojan horse

Question 47

Which authentication method relies on unique physical characteristics of a user?

Accepted Answer

Biometric authentication

Answer

Token-based authentication

Answer

Two-factor authentication

Answer

Knowledge-based authentication

Question 48

In the United Kingdom, which legal framework governs the protection of personal data?

Accepted Answer

Data Protection Act

Answer

Copyright, Designs and Patents Act

Answer

Freedom of Information Act

Answer

Computer Misuse Act

Question 49

Which of the following is NOT a common type of security threat to information systems?

Accepted Answer

Natural disasters

Answer

Phishing

Answer

Malware

Answer

Social engineering

Question 50

A company's security policy states that all employees must use strong passwords. Which of the following is NOT a characteristic of a strong password?

Accepted Answer

Using personal information like birthdays

Answer

Combining upper and lowercase letters, numbers, and symbols

Answer

Avoiding common words or phrases

Answer

At least 12 characters long

Question 51

A firewall is a security measure that primarily aims to:

Accepted Answer

Prevent unauthorized access to a network

Answer

Authenticate users

Answer

Detect and remove malware

Answer

Encrypt sensitive data

Question 52

Which of the following ethical dilemmas is MOST relevant to the use of information systems?

Accepted Answer

Privacy vs. security

Answer

Environmental impact vs. economic growth

Answer

Freedom of speech vs. national security

Question 53

A company has implemented a policy requiring all employees to undergo regular security awareness training. This is an example of:

Accepted Answer

Human element security

Answer

Physical security

Answer

Network security

Answer

Data security

Question 54

Which of the following is an example of a security threat that exploits vulnerabilities in software?

Accepted Answer

A zero-day exploit

Answer

A social engineering attack

Answer

A physical intrusion

Answer

A natural disaster

Question 55

A company's security policy states that all data must be encrypted when transmitted over the internet. This is an example of:

Accepted Answer

Data security

Answer

Human element security

Answer

Physical security

Answer

Network security

Question 56

Which of the following is a common technique used by attackers to gain access to a system by tricking users into providing their credentials?

Accepted Answer

Phishing

Answer

Password cracking

Answer

Denial-of-service attack

Answer

Malware

Question 57

A company is considering implementing a new security system. Which of the following factors should they prioritize when evaluating different options?

Accepted Answer

Cost-effectiveness and effectiveness

Answer

Integration with existing systems

Answer

Latest technology available

Answer

Ease of use for the IT department

Question 58

Which of the following best describes the ethical dilemma of using surveillance technology to improve security?

Accepted Answer

Balancing the need for security with individual privacy

Answer

Protecting intellectual property vs. promoting innovation

Answer

Ensuring equal access to information vs. preventing misinformation