IT308 IAS Quiz No 1 IT3GG1

What is the U.S. Government's definition of INFOSEC?

• Development of information systems for educational purposes.

• Regulation of information systems for commercial use.

• Enhancement of information systems for public access.

• Protection of information systems against unauthorized access or modification.

When did the origins of information security emerge?

• Post Cold War

• Post World War II

• Post World War I

• Post Vietnam War

What are the critical characteristics of information according to the C.I.A. Triangle?

• Availability, Accuracy, Authenticity

• Confidentiality, Integrity, and Availability

• Integrity, Availability, Possession

• Accuracy, Authenticity, Confidentiality

What are the components of an Information System according to the CNSS Security Model?

• Software, Hardware, Networks, Protocols, Personnel

• Software, Hardware, Networks, Applications, Users

• Software, Hardware, Networks, Procedures, People

• Software, Hardware, Networks, Databases, Administrators

What are the phases of the Security Systems Development Life Cycle (SecSDLC)?

• Planning, Execution, Monitoring, Closure

• Design, Develop, Test, Deploy

• Investigation, Analysis, Logical Design, Physical Design, Implementation, Maintenance, and Change

• Initiation, Planning, Execution, Closure

What are the roles of Security Professionals & Organization?

• Senior Management (COO, CTO), Information Security Project Team

• Senior Management (CMO, CHRO), Information Security Project Team

• Senior Management (CIO, CISO), Information Security Project Team

• Senior Management (CEO, CFO), Information Security Project Team

What is the definition of Risk in the context of information security?

• Probability of unwanted events

• Certainty of unwanted events

• Certainty of wanted events

• Possibility of wanted events

What are Subjects and Objects in the context of information security?

• Computer as the subject or object of a process

• Computer as the subject or object of an attack

• Computer as the subject or object of a defense

• Computer as the subject or object of a transaction

What is the approach to Security Implementation for achieving balance between protection and availability?

• Front-back approach

• Left-right approach

• Bottom-up approach

• Top-down approach

What does "Access" refer to in information security?

• The ability to hack into a system

• The ability to use, manipulate, modify, or affect another subject or object

• The process of encrypting information to protect it

• The probability of a cyber attack happening