What is a common physical protection measure used to restrict access to server rooms?

• Security keypads.
• Firewall software.
• Data encryption.
• Multi-factor authentication.

Answer explanation

Security keypads restrict unauthorised physical access to server rooms.

Why should computers be placed above flood levels in an office?

• To prevent theft.
• To improve internet speed.
• To avoid water damage.
• To make access easier.

Answer explanation

Placing computers above flood levels helps prevent damage during floods.

Which policy helps control who can access specific company files?

• Staff access rights to information.
• Data backup policy.
• Security staff management.
• Physical security audit.

Answer explanation

Staff access rights define which employees can view or edit sensitive data.

What is the primary purpose of using biometric authentication in security?

• To make login faster.
• To enhance physical security.
• To eliminate the need for passwords.
• To increase employee satisfaction.

Answer explanation

Biometrics, such as fingerprint scanners, ensure only authorised users access systems.

Which policy ensures employees understand their role in information security?

• Information security risk assessment.
• Responsibilities of staff for security of information.
• Disaster recovery plan.
• Physical security implementation.

Answer explanation

Staff responsibilities policies outline security duties to prevent data breaches.

What physical security measure can prevent unauthorised access to a workplace?

• Strong password policies.
• Shredding old documents.
• Installing security staff at entrances.
• Using anti-virus software.

Answer explanation

Security personnel can monitor and prevent unauthorised physical entry.

Why is shredding old paper-based records an important security measure?

• It makes office cleaning easier.
• It prevents unauthorised access to sensitive data.
• It reduces printing costs.
• It improves data accuracy.

Answer explanation

Shredding protects confidential information from being retrieved by unauthorised individuals.

Which policy helps a company recover from a cyberattack?

• Disaster recovery plan.
• Staff access rights policy.
• Network firewall configuration.
• Employee training sessions.

Answer explanation

A disaster recovery plan ensures businesses can restore operations after an attack.

What is a primary benefit of using backup systems in other locations?

• Improved network speed.
• Data availability during disasters.
• Increased file encryption.
• Reduced power consumption.

Answer explanation

Off-site backups ensure data can be restored if primary systems fail.

How does training staff improve information security?

• It prevents all cyber threats.
• It increases productivity.
• It helps employees recognise security risks.
• It reduces the need for physical security.

Answer explanation

Security training helps employees identify and respond to threats.