Information Security Quiz

What is the expanded version of the CIA triangle?

• Confidentiality, Integrity, Accountability

• Availability, Integrity, Utility, Possession

• Confidentiality, Integrity, Availability + Critical Characteristics

• Authentication, Possession, Availability

Which of the following is not a critical characteristic of information?

• Availability

• Utility

• Encryption

• Possession

In which phase of the SDLC is feasibility analysis not typically conducted?

• Investigation

• Logical Design

• Implementation

• Maintenance

MULTICS is significant in the history of information security because:

• It was the first microprocessor-based system.

• It introduced UNIX.

• It was the first OS with integrated security in its core functions.

• It connected computers globally.

What is the primary focus of the NIST SDLC approach during the initiation phase?

• Conducting system certification

• Performing functional testing

• Business risk assessment and requirement gathering

• Secure software design

Which of the following is not a critical characteristic of information?

• Confidentiality

• Portability

• Authenticity

• Utility

The main goal of the investigation phase in the SDLC is to:

• Implement the final system

• Define the system problem and constraints

• Train the users

• Design network layout

MULTICS is notable because:

• It was the first to use mainframe microprocessors

• It was the first OS with integrated security features

• It led to the creation of Linux

• It was designed only for academic research

The C.I.A. triangle includes:

• Confidentiality, Internet access, Authorization

• Confidentiality, Integrity, Availability

• Compliance, Integrity, Access

• Control, Implementation, Authentication

The logical design phase of SDLC primarily focuses on:

• Writing code

• Choosing hardware

• Defining applications and data structures

• User training