BSIT 3-2 - IAS - Midterm Examination - 2023

In the Security Systems Development Life Cycle, which phase focuses on identifying and assessing potential risks and vulnerabilities within the system.

• Analysis Phase

• Logical Design

• Physical Design

• Investigation

Which critical characteristic of information ensures that information is complete, accurate, and free from errors or omissions?

• Availability

• Integrity

• Confidentiality

• Authenticity

Which critical characteristic of information ensures that information is genuine, trustworthy, and comes from a reliable source?

• Availability

• Integrity

• Confidentiality

• Authenticity

What is the primary responsibility of the Chief Information Security Officer (CISO) in an organization?

• Managing daily IT operations

• Developing marketing strategies

• Overseeing the organization's information security program

• Conducting financial audits

What role does senior management play in the organization's information security?

• Hands-on management of security technologies

• Setting the organization's security vision and priorities

• Implementing security awareness training for employees

• Conducting regular vulnerability assessments

Who is responsible for making decisions regarding the classification, retention, and sharing of data within an organization?

• Data Owner

• Data Custodian

• Chief Information Security Officer (CISO)

• Data User

Who is accountable for the physical protection of data assets, such as servers and storage devices?

• Data Owner

• Data Custodian

• Chief Information Security Officer (CISO)

• Data User

What component of an information system refers to the guidelines and instructions followed by users and organizations?

• Software

• Hardware

• Data

• Procedures

Which function of information security focuses on ensuring that applications running on the organization's IT systems operate securely and without compromise?

• Protecting the organization's ability to function

• Enabling the safe operation of applications

• Protecting data that organization collects

• Safeguarding the organization's technology assets

In a scenario where a malicious attacker attempts to disrupt an organization's critical systems, which function of information security is primarily involved in mitigating the impact and ensuring the organization's ability to continue its operations?

• Protecting the organization's ability to function

• Enabling the safe operation of applications

• Protecting data that organization collects

• Safeguarding the organization's technology assets