LSI 230 & SFI 1024- INFO SEC & PRIN OF INFO SEC

'X' is an integrated set of components for collecting, storing, and processing data and for providing information, knowledge and digital product.

What is 'X'?

• Information Security

• Information System

• Data

• Computer Software

Which of the following is the components of information system?

• Peony

• Software

• Dance

• Netflix

´Designed to protect the _____________, ________________ and _____________ of computer system data from those with malicious intentions'.

Which of the following is the INCORRECT answer?

• Confidentiality

• Integrity

• Confidently

• Availability

Which of the following is NOT threat to information security?

• IP scan and attack

• Compromises to intellectual property

• Forces of nature

• Sabotage or vandalism

All the followings are the methods of attack to the information system EXCEPT:

• Web browsing

• Acts of human error or failure

• Virus

• Unprotected shares

Which of the following is INCORRECT about Password Cracking?

• Process of recovering passwords from data that have been stored in or transmitted by a computer system

• Help a user to commit a crime

• Preventive measurement of password strength

• Gain unauthorized access to a system

-Rules that mandate or prohibit certain behavior

-Drawn from ethics

Statements above refers to:

• Policy

• Ethics

• Laws

• Procedures

All of the following are the keys for a policy to be enforceable, EXCEPT

• Dissemination

• Review

• Compression

• Compliance

The following is correct about ethics, law and policy in information security, EXCEPT

• Laws are rules that mandate or prohibit certain behavior

• Ignorance of law (policy) is acceptable

• Policies are guidelines that describe acceptable and unacceptable employee behaviors

• Ignorance is ethics is acceptable

What is Risk Management?

• an uncertain event, activity or situation that can have a positive or a negative effect on any objective

• is the process of coordinating people and other resources to achieve the goals of the organization

• is the process of identifying and migrating risk

• reflecting the influences on risk culture, beginning with the

  predisposition to risk of the individual