Information Systems Security Quiz

What is a common source of security threats within an organization?

• Employees

• External hackers

• Software bugs

• Network firewalls

What is a zero-day vulnerability?

• A flaw that is known and patched

• A vulnerability that is exploited before a patch is available

• A type of software bug

• A security feature

Which act requires financial institutions to ensure the security of customer data?

• PCI DSS

• Sarbanes-Oxley Act

• Gramm-Leach-Bliley Act

• HIPAA

What is the purpose of a security policy?

• To define acceptable uses of information resources

• To monitor employee behavior

• To eliminate all security risks

• To create software patches

What type of controls are unique to each computerized application?

• General controls

• Application controls

• Administrative controls

• Data security controls

What is the focus of disaster recovery planning?

• Training employees on security

• Identifying critical systems

• Restoring business operations after a disaster

• Conducting audits

What is the primary goal of risk assessment?

• To monitor employee performance

• To create software patches

• To eliminate all risks

• To determine the level of risk to a firm

What does the term 'social engineering' refer to in the context of security threats?

• Network security measures

• Software vulnerabilities

• Manipulating individuals to gain confidential information

• Technical hacking methods

What is the role of computer forensics?

• To develop security policies

• To analyze data for legal evidence

• To manage employee records

• To create software

Which of the following is NOT a component of information systems controls?

• Processing controls

• Input controls

• User training

• Output controls