QUIZ #1: Fundamentals of Information Assurance and InfoSec

When the firm's purpose for its information infrastructure is to make its data and information available to those authorized to use it, the firm seeks the objective of?

• AVAILABILITY

• AUTHORIZATION

• CONFIDENTIALITY

• INTEGRITY

Who must be ultimately responsible for information security within organizations?

• Information Security Auditors

• Information Security Professionals

• Stockholders

• Top Management

What is the purpose of authentication?

• To allow use of different authorizations

• To establish accountability

• To obtain proof of claimed identity

• All of the Above

What is Information Assurance?

• It is a type of insurance against security violations

• It is about the trustworthiness of a system

• It is the written security policy

• None of the above

Which of the following represents the three goals of information security

• Confidentiality, Integrity, Availability

• Network Security, PC Security, Mainframe Security

• Prevention, Detection, and Response

• People Controls, Process Controls, and Technology Controls

Which of the following terms best describes the assurance that data has not been changed unintentionally due to an accident or malice?

• Authenticity

• Availability

• Confidentiality

• Integrity

Related to information security, confidentiality is the opposite of which of the following?

• closure

• disaster

• disclosure

• disposal

Which of the following statements is true?

• The weakest link in any security system is the human element.

• The weakest link in any security system is the process element.

• The weakest link in any security system is the technology element.

In this process, you need to select a certain strategy.

• Risk Identification

• Risk Assessment

• Risk Control

• Residual Risk

The likelihood that a particular threat will be realized against a specific vulnerability

• Vulnerability

• Threat

• Risk

• Response