Font size
WorksheetsInformation Security Quiz
Total questions: 100
Worksheet time: 3hrs 20mins
Information systems can be used to help individuals make decisions.
True
False
Information systems can be used to support a business's daily operations.
True
False
An information system is a set of interrelated components that work together to collect, process, store, and disseminate information.
True
False
Information systems are designed to support an organization's strategic objectives.
True
False
What is an information system?
(a)
What is an information system?
A set of interrelated components that work together to collect, process, store, and disseminate information.
A computer program.
A device for storing information.
None of the above.
What is an electronic commerce system?
A type of information system that enables the buying and selling of products or services over the internet.
A type of information system that helps organizations collect, store, and analyze data to support informed decision making.
A type of information system that helps organizations manage interactions with customers and clients.
A type of information system that uses artificial intelligence to simulate the problem-solving skills of a human expert.
What is a geographic information system?
A type of information system that helps organizations collect, store, manipulate, and visualize data about locations on the earth's surface.
A type of information system that enables the buying and selling of products or services over the internet.
A type of information system that helps organizations manage interactions with customers and clients.
A type of information system that uses artificial intelligence to simulate the problem-solving skills of a human expert.
What is a mobile information system?
A type of information system that enables the use of mobile devices to access information and perform transactions.
A type of information system that helps organizations collect, store, manipulate, and visualize data about locations on the earth's surface.
A type of information system that helps organizations manage interactions with customers and clients.
A type of information system that uses artificial intelligence to simulate the problem-solving skills of a human expert.
What are the three main components of an information system?
People, hardware, and software.
Data, software, and communication networks.
People, data, and processes.
Hardware, software, and communication networks.
What is the role of information systems in decision making?
To provide data and information that support decision making.
To automate the decision-making process.
To eliminate the need for human decision making.
To provide recommendations for decision making.
What is data mining?
The process of searching through large amounts of data to identify patterns and relationships.
A type of information system that enables the use of mobile devices to access information and perform transactions.
A type of information system that helps organizations collect, store, manipulate, and visualize data about locations on the earth's surface.
A type of information system that uses artificial intelligence to simulate the problem-solving skills of a human expert.
What is a data warehouse?
A database that is used to store large amounts of data from multiple sources.
A type of information system that enables the use of mobile devices to access information and perform transactions.
A type of information system that helps organizations collect, store, manipulate, and visualize data about locations on the earth's surface.
A type of information system that uses artificial intelligence to simulate the problem-solving skills of a human expert.
As the band width is the main concern of the Bank, we are developing many mobile applications for the use of customers. However, usage of mobile have many vulnerabilities. Which one of the following is not a drawback in securing the Mobile Devises?
ADS environment is not available
Screen lock can be enabled with 'pattern', 'PIN' or 'Password'
Proxy server or firewall facility is not available
Anti-virus set up is not available
Define Management Information System (MIS)
•Identifying the system that is needed for effective conclusion in organizations
•Identifying the management that is needed for efficient decision making in organizations
Identifying the information that is needed for effective decision making in organizations
•Identifying the information that is needed for user acceptance in organizations
Activity includes in IS
x : process
y : output
z : feedback
t : input
x : output
y : feedback
z : input
t : process
x : input
y : process
z : output
t : feedback
x : feedback
y : input
z : process
t : output
Define Cybersecurity
Cybersecurity refers to the protection of internet-connected systems such as software, hardware, electronic data, etc., from cyber attacks. In computing text, it is referred to as protection against unauthorized access.
the practice of protecting systems, networks, and programs from digital attacks.
Someone with the potential to cause harm by damaging or destroying the official data of a system or organization.
It refers to weaknesses in a system that makes threat outcomes more possible and even more dangerous.
It refers to a combination of threat probability and impact/loss. In simple terms, it is related to potential damage or loss when a threat exploits the vulnerability.
A strong password is a critical line of defense in preventing a cyberattack. Which are the criteria of new password policy:
Contains at least 14 characters
Reuse old passwords or add on to existing passwords
Contains at least 3 of the 4: Uppercase, Lowercase, Number, Symbol
Does not contain the words ‘PETRONAS’ in any form
Which of these actions can contribute to ensuring the security of your passwords?
Setting a password that is a combination of uppercase, lower case, special characters and numbers.
Changing your password regularly.
Not using personally identifiable information such as name, birthdates, and telephone numbers.
Using the same password for all accounts.
Criminals access someone’s computer and encrypt the user’s personal files and data. The user is unable to access this data unless they pay the criminals to decrypt the files. This is known as ...
Botnet
Ransomware
Spam
None of the above
_______________ is a tools which protects company data on mobile devices without infringing into personal data.
Mobile Data Management
Mobile Data Administration
Mobile Device Administration
Mobile Device Management
Is this a legitimate email?
True
False
Below are the common feature of MFA used in our daily transactions:
i. Using a credit/debit card at an ATM or at a checkout counter, and entering a PIN
ii. Using your password to login, and then entering an OTP sent to your phone or email address
iii. Scanning MySejahtera apps prior entering any premises
iv. Validation of your identity at a government office by inserting your Identity Card and scanning a fingerprint
i and ii
i, ii and iii
i, ii and iv
ii and iii
Which of the following is an example of a “phishing” attack?
Sending someone an email that contains a malicious link that is disguised to look like an email from someone the person knows.
Creating a fake website that looks nearly identical to a real website in order to trick users into entering their login information.
Sending someone a text message that contains a malicious link that is disguised to look like a notification that the person has won a contest.
All of the above
What is the term for computer programs that can wreak havoc on your device?
Dangerbots
Problemware
Malware
Hyperlinks
Below are the scenarios that can happen to an organization when there is poor identity access management, except:
A possibility of stolen identity of a former employee to access highly confidential information and sell it illegally
Company confidential data are securely safe and no exposure of data breach
An employee who no longer in service of an organisation can still access the network if his enterprise access is not terminated
A third party vendor can copy files from the organisation’s database, exposing confidential company data.
When entering personal data such as credit card information into a website, it is important to verify the url starts with 'https" to ensure the transaction is protected by SSL encryption.
True
False
Working at your desk, you've received an email from Paypal or Apple explaining that your password it out of date, and you must set a new one. The link within the email will guide you through it. Your next step is?
Follow the link and reset your password.
Ignore the email and delete it.
Reset your password manually.
How do you make a login secure? (Multiple choice)
A combination capital letter, number and symbols/special charatcters
Using a phrase like "iloveManU"
Enabling 2 factor authentication
using password as a password
Which of the following is a type of cyber security?
Cloud Security
All of these
Application Security
Network Security
Phishing means
Using a phishing pole in the water & catching phish
Someone should have been more careful with the spell check
Websites & emails created just to trick you so cybercriminals can steal your information
All of these options are correct
Identity theft only occurs to
adults
youth who share personal information
people with firewalls installed on their computers
all are correct
Which of the following is not an advantage of cyber security?
Minimizes computer freezing and crashes
Makes the system slower
Gives privacy to users
Protects system against viruses
Identify the oldest phone hacking technique used by hackers to make free calls.
Spamming
Phreaking
Cracking
Phishing
Sending personal information like a social security or credit card number by email is ok if...
it's to a well-known company
it's to Roscoe Middle School
It's to your family
none of the above
Is it safe to use your real personal information for an online character?
Yes. It doesn't matter
Yes, but only your real name, address, & age
Yes, but only once in a while
It's better not to reveal person information, even when creating an online character
Which of the following is defined as an attempt to steal, spy, damage or destroy computer systems, networks, or their associated information?
Computer security
Cyber attack
Digital hacking
Cryptography
According to a reliable source, which industry sector saw a rise in phishing attacks?
social networking
gaming
financial institutions
none of these
Chain emails are:
A way to ensure you have good luck
A way to stay in touch with your friends
A way for you to help cybercriminals to spread scams & tricks
none of these are correct
Cybersecurity also be referred to as ?
incident security
information technology security
internet security
threat security
You just placed an order with: Orbitz, Priceline.com, Buy.com, 1-800Flowers, Continental Airlines, and Fandango. Because you entered your email in the "free coupon" pop-up ad afterwards you get...
a $10 off coupon on your next order sent to your email
a $10 off coupon on your next order sent with your order
a repeating charge from a "web loyalty" company on your credit card
None of these are correct
Pop-up ads are:
funny jokes
just annoying advertisements, but generally safe
a way to win contests & get fun electronics
none of these are correct
Legitimate companies rarely send you emails that require you to enter your account name/username/password immediately or face really bad consequences. How do you check to be sure the email is really from a company you know?
Open your web browser & log-on to the site the way you normally would
click on the link in the email
What should you do if you think you have been hacked?
Report the problem to the company.
Change your password.
Tell your parents or a trusted adult.
All of the above.
Cyber-laws are incorporated for punishing all criminals only
True
False
You receive an email with the subject “Immediate Action Required needed on your credit card account.” Why is this suspicious?
Because it is illegal to send credit offers in email
Because your credit card company does not use email
This email is not suspicious
The subject line is demanding immediate action
How should you confirm the legitimacy of an email?
Contact the sender through a method not described in the email
Reply to the email
Send a letter to the address listed in the email
Call the phone number listed in the email
You receive an email from Human Resources Department. The email asks for your birthdate and home address to set up your retirement account. You should:
Forward the email to your financial advisor
Reply to the email with the required information
Ignore the email and directly contact your Human Resource representatives to see if the email is legitimate.
Reply to the email to confirm with your Human Resources department and then send the requested information
you receive an unexpected email from a co-worker, asking you to review an attached document. You should.
Open the attachment and review it immediately
Reply to the email to confirm the attachment came from your co-worker
Without replying to the email, confirm that your co-worker sent the attachment
Download the attachment and wait to open it until you can confirm with your co-worker
What is the goal behind phishing emails?
Gain private information
All of these
Lower your defenses
Help attack other targets
You receive an email explaining that you won a tablet. What should you do next?
Provide the required information and request overnight shipping
Ignore and delete the email
Follow the links in the email to investigate the offer further
Forward the email to your friend so they can receive a free tablet too
You are visiting your favourite website and it warns you that your Flash plugin is out of date. What should you do next?
Install the update from your favorite website
Install the update using a private browsing session
Only download the update from the official source
Ignore updates on your computer
You found a USB drive and want to return it to the owner. You wonder if information on the drive could help you find the owner. What should you do with it?
Ask a qualified IT person for help
Drop the flash drive into a mailbox
Look for the owner information by inserting the drive and looking through the files
Put the flash drive in a drawer until you have the chance to update your antivirus
What might phishing emails try to get you to do?
Click Links
Download files
All of these
Fill out forms
What are the three traids of cybersecurity?
Confidentially, Integrity, Availability
Confidentially, Intellectual, Availability
Combining, Intellectual, Accessibility
Combining, Integrity, Accessibility
Alice told her friend about her password of wechat. What traid does she violate?
Confidentially
Integrity
Availability
Alice told her friend Bob about her email password. And then she found Bob used her email sent emails to others. Who is responsible for this case?
Alice
Bob
Alice and Bob
Alice told her friend Bob about her email password. And then she found Bob changed some her emails and sent emails to others. What traids are involved into this case?
Confidentially and Integrity
Integrity and Availability
Confidentally and Availability
Confidentally, Integrity and Availability
Alice inserts a trojan program into Bob's laptop, and she found out Bob's password of his bank accounts. She did not take any money, so does she violate any laws?
Yes, she violated laws of Trade Secret, Business Secret
Yes, she violated laws of cybersecurity
No she did not
Yes, she violate the polity
Alice needs to withdraw some money from ATM machine. When she takes her money out she did not have the awareness of hiding her password when she input. So her money has been stolen. What this case can tell?
Alice violated confidentally traid.
Alice violated Integrity traid
Alice violated availability traid
The guy took her money violated availability traid
Can you give an example contains all CIA
In what year do passwords and multiple layers of security protection added to devices?
1960s
1970s
1980s
2010s
Which among the following is not considered as information security domain?
Career Development
Threat Intelligence
Security Operation
Denial-of-Service
•If developers had sufficient time, they could resolve and eliminate _.
faults
system calls
processes
firewalls
Implementation of information security often described as combination of _.
art and science
art and math
ethics and math
ethics and physics
Which refers to a well-informed sense of assurance that the information risks and controls are in balance?
Arts
Security Artisan
Information Security
Architecture
What kind of cyber security risks can be minimised by using a Virtual Private Network (VPN)?
Use of insecure Wi-Fi networks
Key-Logging
De-anonymization by network operators
Phishing attacks
An email that attempts to trick a reader into installing software that may contain a virus is:
Phishing Scam
Lobster trap
Fishing Scam
Phone Scam
Which is an example of PII? (Personally Identifiable Information)
Credit Card Number
Name
Home Address
All of the above
What is the best definition of Spear Phishing?
"A Phishing email aimed directly at you"
"A malicious virus that can encrypt or lock your computer"
"A method hackers can use to guess your password"
"A random Phishing email sent to a massive group"
What is a step that you can take to minimise the chance and impact of a ransomware attack?
"All of these answers"
"Keep your computer software up to date"
"Ensure that anti-virus tools are running and up to date"
"Ensure that you are backing up your critical files"
Who you are allowed to give your password to?
"Anybody you trust"
"Only supervisors and authorised IT staff if requested"
"Only IT staff"
"Nobody"
What does compliance mean?
providing secure access to user data
using honest means to bypass security measures
conducting tests to identify vulnerabilities in a system
following the rules or standards that have been established
Which of the following is not considered social engineering?
dumpster diving
convincing people to reveal information
encrypting data to prevent user access until a fee is paid
looking through social media sites for information
____ is a well-defined, formal process help desk staff follow to:
–Handle problem incidents
–Get information to users
–Solve user problems
–Maintain records about the incident
Call management
Incident management
ITIL
None of the above
What's included in a strong password?
A minimum of eight characters
At least one lowercase alphabetical letter (a-z)
At least one uppercase alphabetical letter (A-Z)
At least one digit (0-9) and/or one special character (i.e., @ ! % & $ ^ * ( ) + = )
All of the above
Which of the following is a weak password?
123456
P@ssw0rd
ILoveYou123
All of the above
