Security System Quiz

What is the main purpose of a security policy in an organization?

• Improve system speed

• Establish common expectations

• Create a new programming model

• Prevent hardware failures

Which role is ultimately legally responsible for an organization's security?

• IT Administrator

• Data Custodian

• Senior Manager

• Security Officer

In the CIA triad, 'Availability' ensures that:

• Data is encrypted

• Data is accurate

• Services are accessible in a timely manner

• Information is classified

Which of the following is NOT a part of the top-down approach to security?

• Initiation from top management

• Alignment with strategic goals

• Ad-hoc policy enforcement

• Clear direction

What is a 'vulnerability'?

• A potential future event

• A known exploit

• A weakness in a system

• A secure process

The Bell-LaPadula model primarily focuses on:

• Availability

• Confidentiality

• Integrity

• Redundancy

Which rule is part of the Bell-LaPadula model?

• No delete from same level

• No read down

• No write up

• No read up

The Biba model addresses:

• Availability

• Confidentiality

• Integrity

• Encryption

In the Biba model, the 'no write up' rule ensures:

• Data is deleted securely

• Low integrity data can't corrupt higher levels

• Only authorized users can read data

• Data is encrypted during transmission

The Clark-Wilson model introduces the concept of:

• Lattice levels

• Simple security rules

• Transformation Procedures (TPs)

• Open data access