Understanding Information Security

What is ISO 27005?

• ISO 27005 is a certification for data privacy compliance.

• ISO 27005 is a guideline for physical security measures.

• ISO 27005 is a standard for software development.

• ISO 27005 is a standard for information security risk management.

What does BCP stand for in information security?

• Backup Communication Plan

• Business Continuity Planning

• Business Control Protocol

• Business Compliance Policy

Name one common cyber attack method.

• Phishing

• Ransomware

• Malware

• DDoS

What is the purpose of risk management in information security?

• To increase the number of security breaches

• To ensure compliance with all regulations

• The purpose of risk management in information security is to protect information assets by identifying and mitigating risks.

• To eliminate all potential risks

How can organizations prepare for a cyber attack?

• Conduct regular employee surveys about cybersecurity.

• Ignore all security updates.

• Implement a comprehensive cybersecurity strategy.

• Rely solely on antivirus software.

What is the difference between a threat and a vulnerability?

• A threat is a software bug; a vulnerability is a user error.

• A threat is a potential danger; a vulnerability is a weakness that can be exploited.

• A threat is a weakness; a vulnerability is a potential danger.

• A threat is an actual attack; a vulnerability is a security measure.

What role does employee training play in BCP?

• Employee training is only necessary for new hires.

• Employee training has no impact on BCP effectiveness.

• Employee training is optional for BCP success.

• Employee training is crucial for effective implementation of Business Continuity Plans (BCP).

What is a risk assessment?

• A risk assessment is a financial analysis of investments.

• A risk assessment is a method to eliminate all risks.

• A risk assessment is a strategy to increase profits.

• A risk assessment is a process to identify and evaluate potential risks.

Can you name a type of malware?

• Virus

• Adware

• Spyware

• Trojan

Why is it important to have a business continuity plan?

• It is important to have a business continuity plan to ensure organizational resilience during disruptions.

• It helps in maximizing profits during a crisis.

• It ensures that all employees are always available.

• It is only necessary for large corporations.