NEW
Font size
WorksheetsLSI 230 & SFI 1024- INFO SEC & PRIN OF INFO SEC
Total questions: 20
Worksheet time: 20mins
'X' is an integrated set of components for collecting, storing, and processing data and for providing information, knowledge and digital product.
What is 'X'?
Information Security
Information System
Data
Computer Software
Which of the following is the components of information system?
Peony
Software
Dance
Netflix
´Designed to protect the _____________, ________________ and _____________ of computer system data from those with malicious intentions'.
Which of the following is the INCORRECT answer?
Confidentiality
Integrity
Confidently
Availability
Which of the following is NOT threat to information security?
IP scan and attack
Compromises to intellectual property
Forces of nature
Sabotage or vandalism
All the followings are the methods of attack to the information system EXCEPT:
Web browsing
Acts of human error or failure
Virus
Unprotected shares
Which of the following is INCORRECT about Password Cracking?
Process of recovering passwords from data that have been stored in or transmitted by a computer system
Help a user to commit a crime
Preventive measurement of password strength
Gain unauthorized access to a system
-Rules that mandate or prohibit certain behavior
-Drawn from ethics
Statements above refers to:
Policy
Ethics
Laws
Procedures
All of the following are the keys for a policy to be enforceable, EXCEPT
Dissemination
Review
Compression
Compliance
The following is correct about ethics, law and policy in information security, EXCEPT
Laws are rules that mandate or prohibit certain behavior
Ignorance of law (policy) is acceptable
Policies are guidelines that describe acceptable and unacceptable employee behaviors
Ignorance is ethics is acceptable
What is Risk Management?
an uncertain event, activity or situation that can have a positive or a negative effect on any objective
is the process of coordinating people and other resources to achieve the goals of the organization
is the process of identifying and migrating risk
reflecting the influences on risk culture, beginning with the
predisposition to risk of the individual
All of the following are examples of Hardware devices, EXCEPT:
Computer
Smartphone
Tablets
Data files
Example of Application Software is:
Operating System
Microsoft Office Power Point
Printer Driver
Hard Disc Analyzer
Which of the following is INCORRECT for Information security functions:
Protect the organization's ability to function
Safeguard technology assets
Enable the safe operation of applications
Protect the boss
Which of the following is the CORRECT sequence for Software Development Life Cycle (SDLC)?
Analysis--> Design--> Implementation--> Testing--> Evaluation
Analysis--> Design--> Evaluation--> Testing--> Implementation
Design--> Implementation--> Testing--> Evaluation--> Analysis
Design--> Evaluation--> Testing--> Implementation--> Analysis
-Private Law
-Public Law
-International Law
All of the following are:
Level of Law
Types of Law
Cyber Law Acts in Malaysia
Major IT Professional Organizations and Ethics
All of the following are the categories of unethical and illegal behavior, EXCEPT:
Ignorance
Intent
Ego
Accident
'An uncertain event that may have a positive or negative impact on the project'.
Statement above is the definition of:
Manager
Disk
Hazard
Risk
Choose the CORRECT steps in Risk Management Plan.
Identify Risk--> Control Risk--> Assess Risk
Identify Risk--> Assess Risk--> Control Risk
Assess Risk--> Identify Risk--> Control Risk
Assess Risk--> Control Risk--> Identify Risk
All of the following are strategies in Risk Control, EXCEPT:
Acceptance
Termination
Litigation
Defense
'Shift risks to other areas or outside entities to handle'.
Statement above is the description for:
Transverse
Transformers
Translate
Transferal
