Information Security Quiz

What is the primary focus of information security?

• To enhance operational efficiency

• To ensure physical security

• To protect information and its critical elements

• To manage personnel security

Which of the following is NOT a component of the C.I.A. triangle?

• Authenticity

• Integrity

• Confidentiality

• Availability

What does the term 'availability' refer to in information security?

• The authenticity of the information source

• The ability to access information when needed

• The accuracy of information

• The protection of information from unauthorized access

What is a key disadvantage of the bottom-up approach to security?

• Lack of technical expertise

• Insufficient organizational support

• High costs of implementation

• Inadequate training programs

Which phase of the Systems Development Life Cycle (SDLC) involves assessing the current systems?

• Maintenance Phase

• Analysis Phase

• Investigation Phase

• Implementation Phase

What is the purpose of the feasibility analysis in the investigation phase?

• To assess the technical capabilities of the organization

• To evaluate the economic, technical, and behavioral feasibility

• To determine the security policies needed

• To identify potential threats

Who is primarily responsible for the strategic planning of information security?

• Security Project Team

• Chief Information Officer

• Data Custodian

• End Users

What does the term 'Data Owner' refer to?

• Responsible for the storage of information

• Responsible for the security and use of information

• Responsible for the daily use of information

• Responsible for the maintenance of information

Which of the following best describes the top-down approach to security?

• Focuses on grassroots efforts

• Lacks clear planning

• Requires strong upper management support

• Initiated by lower-level staff

What is the main goal of the Security Systems Development Life Cycle (SecSDLC)?

• To create a random series of actions

• To enhance user training programs

• To identify threats and controls to counter them

• To develop hardware solutions