PRELIM-ITON-S1

What is the primary focus of an Information Security Management System (ISMS)?

• Employee training

• Risk assessment and management

• Data storage solutions

• Cost reduction

Which of the following is a component of the CIA triad?

• Transparency

• Accessibility

• Integrity

• Simplicity

What does the 'Plan' phase in the Plan-Do-Check-Act (PDCA) model involve?

• Implementing security policies

• Monitoring effectiveness

• Identifying problems and collecting information

• Documenting results

Which ISO standard provides requirements for an ISMS?

• ISO 9001

• ISO 45001

• ISO 14001

• ISO/IEC 27001

What type of risk assessment uses monetary amounts to measure risk?

• Quantitative risk assessment

• Behavioral risk assessment

• Operational risk assessment

• Qualitative risk assessment

Which of the following is NOT a component of data and information protection?

• Confidentiality

• Integrity

• Availability

• Scalability

What is the purpose of a risk assessment matrix?

• To train employees on security measures

• To implement security policies

• To monitor network traffic

• To categorize risks based on their level of probability and severity

Which framework is known for its focus on service management and includes Information Security Management?

• ISO 27001

• NIST

• ITIL

• COBIT

What does the 'Act' phase in the PDCA model emphasize?

• Implementation of policies

• Continuous improvement

• Monitoring effectiveness

• Risk identification

Which of the following best describes 'availability' in the context of the CIA triad?

• Data is stored securely

• Data is accurate and unaltered

• Data is kept secret from unauthorized users

• Data is accessible to authorized users when needed