Information Systems Security Quiz

What are the three components of Information Security Services (ISS)?

• Confidentiality, Integrity, Accountability

• Confidentiality, Integrity, Accessibility

• Confidentiality, Integrity, Availability

• Confidentiality, Integrity, Reliability

What is the primary hardware component in the LAN Domain?

• Routers

• Switches

• Firewalls

• Hubs

Which domain includes servers that have direct access to the Internet?

• LAN Domain

• WAN Domain

• Remote Access Domain

• System / Application Domain

What is the primary purpose of Remote Access technologies?

• To host server applications

• To connect LAN to WAN

• To provide access to internal network via an external location

• To protect information from unauthorized disclosure

What is the essential foundation of an effective information security program?

• Workstation Domain

• User Domain

• Policy

• Risk Management

What is the primary objective of making a policy in information security?

• To ignore laws and regulations

• To compromise operational continuity

• To reduce risk

• To increase risk

Which type of Information Security Policy is specific to a particular issue?

• Enterprise Information Security Program

• Issue-specific Information Security

• System-specific Information Security

• None of the above

What is the primary goal of the policy development project?

• To increase project cost

• To delay the project

• To ensure completion on time and within budget

• To ignore the goals of the policy project

What is the primary objective of the Investigation Phase in policy development?

• To gain participation of correct individuals affected by the recommended policies

• To involve legal human resources and end-users

• To develop a detailed outline of project cost

• To obtain support from senior management

What is the primary purpose of the Analysis Phase in policy development?

• To gain participation of correct individuals affected by the recommended policies

• To develop a detailed outline of project cost

• To produce new or recent risk assessment or IT audit documenting the current information security needs of the organization

• To involve legal human resources and end-users