🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Information Security Quiz 5 (8 MCQs)

This set of multiple-choice questions evaluates the ability to assess information reliability, evaluate sources, and understand IT security concepts such as IT General Controls, information persistence, and confidentiality measures. It covers critical thinking skills, data protection, and security awareness, including password management and device security practices.

Quiz Instructions

Select an option to see the correct answer instantly.

1. In a corporate environment, customer financial data would most likely be classified as:

Correct Answer: Correct answer is: (C) Confidential.

Exam Relevance: CISSP, CISM, CompTIA Security+

Difficulty: Moderate

Concept notes: In information security, customer financial data is typically classified as confidential because it contains sensitive information that should be protected from unauthorized access.

Common Mistakes: A common misunderstanding is that customer financial data might be considered public or internal, but it is actually confidential due to its sensitive nature.

Explanations: Customer financial data includes personal and financial information such as bank account details, credit card numbers, and transaction histories. This type of data is highly sensitive and must be protected to prevent identity theft, fraud, and other security breaches. Therefore, it is classified as confidential to ensure that only authorized personnel have access to it.

Option Analysis:

Option A: Public data is information that is freely available to anyone and does not require protection. Customer financial data is not public.
Option B: Internal data is information that is used within an organization but may not necessarily be sensitive. Customer financial data is more sensitive and thus classified as confidential.
Option C: Confidential data is information that is sensitive and must be protected from unauthorized access. This classification is appropriate for customer financial data.
Option D: Unclassified data is information that does not require any specific level of protection. Customer financial data requires a high level of protection and is therefore not unclassified.

2. ALL information on the internet is true information.

Correct Answer: Correct answer is: (B) False.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Not all information on the internet is true. Information security involves verifying the authenticity and reliability of information.

Common Mistakes: A common misunderstanding is assuming that all information found online is accurate and reliable.

Explanations: The internet contains a vast amount of information, but not all of it is accurate or trustworthy. Information security professionals emphasize the importance of verifying the credibility of sources and cross-referencing information to ensure its accuracy.

Option Analysis:

Option A: This option is incorrect because it assumes all information on the internet is true, which is not the case.
Option B: This option is correct because it acknowledges that not all information on the internet is true, which aligns with principles of information security.

3. How can you protect your personal information online?

Correct Answer: Correct answer is: (A) Follow best practices for online security such as using strong passwords.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Protecting personal information online involves adhering to best practices in information security, such as using strong passwords.

Common Mistakes: A common misunderstanding is that sharing personal information freely or using the same password for all accounts can be safe.

Explanations: Following best practices for online security, such as using strong passwords, helps protect personal information from unauthorized access. Strong passwords are difficult to guess and include a mix of characters, numbers, and symbols. This reduces the risk of password-related breaches and enhances overall online security.

Option Analysis:

Option A: Correct. Following best practices for online security, such as using strong passwords, is essential for protecting personal information.
Option B: Incorrect. Clicking on every link received in emails can expose you to phishing attacks and malware.
Option C: Incorrect. Sharing personal information freely on all websites increases the risk of identity theft and data breaches.
Option D: Incorrect. Using the same password for all accounts makes it easier for attackers to gain access to multiple accounts if one password is compromised.

4. What should students look for on a website to help them decide if the information is reliable?

Correct Answer: Correct answer is: (D) All of the above.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: To evaluate the reliability of information on a website, students should consider multiple factors including the author's name, publication date, and the author's qualifications.

Common Mistakes: A common mistake is to rely solely on one factor, such as the author's name, without considering other important aspects like the publication date and the author's qualifications.

Explanations: The reliability of information on a website can be assessed by examining the author's name to determine if the author is credible. The publication date is important to ensure the information is current and relevant. The author's qualifications help to establish the author's expertise and authority on the subject. Therefore, all of these factors are crucial in determining the reliability of the information.

Option Analysis:

Option A: The author's name is important to identify the source of the information and assess the credibility of the author.
Option B: The publication date is crucial to ensure the information is up-to-date and relevant.
Option C: The author's qualifications help to establish the author's expertise and authority on the subject.
Option D: All of the above factors are important in assessing the reliability of the information on a website.

5. Replace the handset after the call or, in the case of Skype and other video services, click End call to ensure that what a person says or does subsequently remains confidential.

Correct Answer: Correct answer is: (A) True.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: In information security, ensuring confidentiality is crucial. This involves taking steps to prevent unauthorized access to sensitive information.

Common Mistakes: A common mistake is assuming that a device is secure after a call ends without taking additional steps to ensure privacy.

Explanations: Replacing the handset or clicking "End call" ensures that the device is no longer active and cannot inadvertently capture subsequent conversations or actions. This is a basic but important step in maintaining confidentiality.

Option Analysis:

Option A: This option is correct because it emphasizes the importance of ensuring the device is no longer active to maintain confidentiality.
Option B: This option is incorrect because it would imply that no further action is needed to maintain confidentiality, which is not true.

6. Controls apply to a wide range of exposures that systematically threaten the integrity of all applications processed within the CBIS environment.

Correct Answer: Correct answer is: (A) IT General Controls.

Exam Relevance: CISSP, CISA, CompTIA Security+

Difficulty: Moderate

Concept notes: IT General Controls are designed to ensure the overall integrity, security, and reliability of the IT environment. They apply to a wide range of exposures that can systematically threaten the integrity of all applications processed within the environment.

Common Mistakes: A common misunderstanding is that IT Application Controls are the primary means of ensuring the integrity of all applications, when in fact, IT General Controls provide a broader, more foundational level of protection.

Explanations: IT General Controls apply to a wide range of exposures that can systematically threaten the integrity of all applications processed within the CBIS environment. These controls are essential for maintaining the overall security and reliability of the IT infrastructure, ensuring that all applications operate within a secure and controlled environment.

Option Analysis:

Option A: IT General Controls are the correct answer as they apply to the entire IT environment and protect against a wide range of exposures.
Option B: IT Application Controls are specific to individual applications and do not cover the entire IT environment.
Option C: Organizational Controls are broader and relate to the overall governance and management of the organization, not specifically the IT environment.
Option D: Process Controls are specific to particular business processes and do not cover the entire IT environment.

7. Which one is a "Don't" of information security?

Correct Answer: Correct answer is: (B) Disclose password to anyone.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: In information security, one of the fundamental principles is to keep passwords confidential and not disclose them to anyone.

Common Mistakes: A common misunderstanding is that sharing passwords with trusted individuals is acceptable, but this can lead to security breaches.

Explanations: Disclosing passwords to anyone is a significant security risk. Passwords are meant to be kept secret to prevent unauthorized access to systems and data. Sharing passwords can lead to unauthorized access, data breaches, and other security vulnerabilities.

Option Analysis:

Option A: Using hard-to-guess passwords is a recommended security practice.
Option B: Disclosing passwords to anyone is a security risk and should be avoided.
Option C: Taking backup data of your PC periodically is a good security practice to prevent data loss.
Option D: Encrypting laptop hard drives and mobile devices is a recommended security measure to protect data.

8. True or False: Things that you write on the Internet can be easily deleted and no one will ever see them.

Correct Answer: Correct answer is: (B) False.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Information posted on the Internet can persist even after deletion.

Common Mistakes: A common misunderstanding is that once something is deleted from the Internet, it is completely gone and cannot be accessed by anyone.

Explanations: Information posted on the Internet can be cached, copied, or stored in various locations, making it difficult to ensure complete deletion. Even if a post is removed from a website, it may still be accessible through cached versions, screenshots, or backups. Therefore, it is not accurate to say that things written on the Internet can be easily deleted and no one will ever see them.

Option Analysis:

Option A: This option is incorrect because information on the Internet can persist even after deletion.
Option B: This option is correct because information posted on the Internet can be difficult to completely remove and may still be accessible to others.

Frequently Asked Questions

What is information security?

Information security involves protecting information from unauthorized access, use, disclosure, disruption, modification, or destruction to ensure confidentiality, integrity, and availability.

Why is it important to verify the publication date of online sources?

Verifying the publication date helps ensure that the information is current and relevant, reducing the risk of relying on outdated or inaccurate data.

How can strong passwords contribute to online security?

Strong passwords make it more difficult for unauthorized users to gain access to accounts, thereby enhancing the security of personal and confidential data.

What is the significance of device security in the CBIS environment?

Device security is crucial in the CBIS environment as it helps prevent unauthorized access to sensitive data and ensures the integrity and reliability of the information stored on devices.

How does information persistence affect digital footprint?

Information persistence means that data remains accessible indefinitely, which can lead to a larger digital footprint and potential privacy concerns if not managed properly.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books