PRELIM Review - ITON

What is the primary goal of an Information Security Management System (ISMS)?

• To align security controls with organizational risk tolerance

• To develop a comprehensive threat management system

• To establish effective controls for asset confidentiality

• To ensure asset availability

Which model is primarily focused on confidentiality in access control?

• Access Matrix Model

• Bell-LaPadula Model

• Clark & Wilson Model

• Biba Model

What does the 'CIA triad' stand for in information security?

• Control, Information, Availability

• Confidentiality, Information, Access

• Control, Integrity, Access

• Confidentiality, Integrity, Availability

Which of the following is NOT a component of the ISO/IEC 27001 framework?

• Plan-Do-Check-Act model

• Risk assessment

• Incident response

• Data encryption

What is the purpose of a risk assessment matrix?

• To evaluate the effectiveness of security policies

• To establish security roles and responsibilities

• To categorize risks based on probability and impact

• To monitor user behavior

Which policy regulates user behavior towards a system or network?

• Network Policy

• Acceptance User Policy

• User Account Policy

• Remote Access Policy

What is the main focus of the Biba Integrity Model?

• Controlling access to sensitive data

• Maintaining confidentiality

• Ensuring data availability

• Preventing unauthorized modifications

Which of the following is a key benefit of a consolidated cybersecurity architecture?

• Increased complexity of management

• Improved overall security

• Increased hardware costs

• Reduced visibility into threats

What does the term 'compartmentalization' refer to in cybersecurity?

• Creating multiple user accounts

• Storing sensitive data in isolated blocks

• Implementing strong passwords

• Monitoring network traffic

Which of the following is a characteristic of qualitative risk assessment?

• Relies on judgment to categorize risks

• Requires extensive historical data

• Uses monetary values to measure risk

• Focuses solely on financial impact