Cyber Mock

Which of the following techniques is used to ensure confidentiality?

• Encryption

• Hashing

• Encapsulation

• Authentication

Answer explanation

Encryption is used as it converts plain text to cipher text and vice versa.

Which of the following can be defined as a threat?

• The likelihood of a cybercriminal getting caught

• The likelihood of a cybercriminal getting caught

• The probability that a cyber attack will be successful

• The probability that a cyber attack will be successful

Answer explanation

A threat is a communicated intent to inflict harm or loss on another person.

Which of the following is the function of specifying user access rights/privileges to computing resources? 

• Authentication

• Enabling

• Accounting

• Duplication

Answer explanation

Enabling is the authority or means to do something; make it possible for a user to access a computing resource.

Which concept describes the amount of confidence that an organisation has that its controls satisfy the necessary security requirements?

• Assurance

• Governance

• Non-repudiation

• Trust

Answer explanation

Assurance is defined as a positive declaration intended to give confidence; a promise.

Which information security principle requires that an organisation SHOULD implement overlapping security controls wherever feasibly possible?

• Separation of Duties

• Fail Safe Configuration

• Fail Safe Configuration

• Web of Trust

Answer explanation

Defence in depth is a concept used in Information security in which multiple layers of security controls are placed throughout an information technology system.

With the increasing global operation of many corporate organisations, which of the following is LIKELY to be the more important consideration with respect to information security?

• Understanding that different countries have differing legislation with respect to how information can be handled

• Ensuring that for all countries that an organisation has an office in, will all operate in the same time zone

• Ensuring that regional preferences for security related hardware and software are adhered to

• Storing all corporate data only in one country where an organisations central office is located

Answer explanation

As legislation is likely to vary between countries it must be the most important consideration.

Whilst drafting a company's information security policy, what would be an important consideration?

• The policy should be a standalone document

• The policy must be integral to all areas of an organisation

• The policy should only be visible to senior management

• The policy only applies to staff handling confidential information

Answer explanation

A company policy should apply to all areas of an organisation.

Why could an organisation's "clear desk" policy be seen as a good example of "security as an enabler"?

• Clear desks allow staff to "hot desk" making them less likely static "sitting" targets for cyber-attacks.

• Conformance to data protection laws will be enhanced by not using paper files

• Conformance to data protection laws will be enhanced by not using paper files

• The removal of confidential information from desks reduces the chances of opportunistic theft, and keeps it available to the business.

Answer explanation

Clear desk policy enables better security by ensuring all documents including confidential ones are not left out on desks.

Legislation in individual countries such as the Sarbanes-Oxley in the USA and the Companies Act (UK) have had the effect of strengthening corporate responsibility for risk management.

Who now has this ultimate responsibility?

• IT Manager

• IT Security Team

• All Supervisory Roles

• Corporate Board

Answer explanation

Corporate board has the ultimate responsibility for risks in the eyes of the law.

Within any organisation, from both an information assurance and "security culture" perspective, whose responsibility is information security? 

• All staff

• IT Department

• Chief Executive Officer

• Data Protection Officer

Answer explanation

Security is everyone’s responsibility.