IT System Security Quiz

What is the primary purpose of a risk matrix in IT system security assessment?

• To eliminate all potential risks

• To prioritise risks based on their impact and likelihood

• To document all security policies

• To ensure compliance with international standards

In a cyber security risk assessment, which of the following is considered a threat?

• A firewall

• A hacker attempting to breach a system

• An antivirus software

• A secure password

Which of the following is a key component of information security policies?

• Defining user roles and responsibilities

• Installing the latest software updates

• Conducting regular hardware maintenance

• Increasing internet bandwidth

What does the 'impact' in a risk matrix refer to?

• The cost of implementing a security measure

• The potential damage caused by a risk

• The number of users affected by a risk

• The time taken to recover from a risk

Which of the following is NOT typically included in a cyber security risk assessment?

• Identifying potential threats

• Evaluating the effectiveness of current controls

• Developing a marketing strategy

• Assessing the likelihood of risk occurrence

What is the main goal of information security policies and procedures?

• To increase the speed of internet connections

• To protect information assets from threats

• To reduce the cost of IT infrastructure

• To enhance user interface design

In a risk matrix, what does a high likelihood and high impact indicate?

• A risk that can be ignored

• A risk that requires immediate attention

• A risk that is unlikely to occur

• A risk that has minimal consequences

Which of the following best describes a vulnerability in a cyber security context?

• A strong password policy

• A weakness that can be exploited by a threat

• An updated antivirus software

• A secure network configuration

What is the role of procedures in information security?

• To provide a detailed step-by-step guide for implementing policies

• To replace outdated hardware

• To increase the number of users

• To enhance the visual design of software

Which of the following is an example of a control measure in a risk assessment?

• A risk matrix

• A firewall

• A threat analysis

• A risk evaluation report