T2 &U2 FT1_IS Quiz

Which of the following is a primary goal of the NSTISSC Security Model?

• Increase sales

• Ensure data confidentiality, integrity, and availability

• Promote open access to data

• Reduce software costs

What is "Confidentiality" in Information Security?

• Making sure data is accurate

• Protecting data from unauthorized access

• Ensuring data is available when needed

• Sharing information with everyone

Which of the following is considered part of the "People" component in an information system?

• Computers

• Software applications

• End users and administrators

• Network cables

Which SDLC phase focuses on converting design into actual code?

• Design

• Implementation

• Testing

• Maintenance

Which of the following best describes "Availability" in the context of Information Security?

• Ensuring data is only available to hackers

• Making sure data is accessible to authorized users when needed

• Encrypting all data

• Deleting unnecessary data

Which phase in the Security SDLC involves monitoring and maintaining security measures?

• Design

• Implementation

• Maintenance

• Testing

What is the role of "Policies" in securing an information system?

• They are optional guidelines

• They provide a framework for managing security practices

• They slow down system performance

• They replace hardware security measures

Which of the following is an example of securing software components?

• Using antivirus programs

• Installing physical locks on servers

• Training employees

• Adding more storage devices

Which phase of the SDLC deals with identifying user needs?

• Implementation

• Testing

• Requirements Analysis

• Maintenance

What does "balancing security and access" primarily involve?

• Giving everyone full access to systems

• Ensuring security does not overly restrict legitimate users

• Removing all security barriers for speed

• Locking down all systems at all times