WorksheetsIAS2 CH10 QUIZ
Total questions: 60
Worksheet time: 20mins
Name
Class
Date
1.
Which of the following is a tangible asset?
a)
Server hardware
b)
Company image
c)
Employee Position and Responsibility
d)
Brand reputation
2.
Which is an intangible asset?
a)
Laptop
b)
Database server with anti-collision system
c)
Reputation
d)
USB device
3.
Which asset type includes manuals and proposals?
a)
Hardware/Services
b)
Data/Information
c)
Software/License Agreement
d)
People and Staff
4.
Which of the following is a service asset?
a)
Database Administrator and Phishing Services
b)
Telecommunication service
c)
Printer
d)
Laptop
5.
Which asset type includes staff expertise?
a)
Software
b)
People
c)
Hardware and Firmware
d)
Service
6.
Why must assets be assigned responsibilities?
a)
To reduce storage and data allocation properly
b)
To assure adequate protection
c)
To add more IT staff that prevent burnout to existing staff
d)
To simplify hardware and software acquisition setup
7.
Who is primarily accountable for an asset?
a)
Asset owner
b)
Custodian
c)
Regular user
d)
Intern
8.
Which best describes asset ownership?
a)
Owner handles everything physically
b)
Owner ensures proper protection and classification
c)
Owner configures systems
d)
Owner monitors networks daily
9.
Which control includes recording location and license information?
a)
Access control
b)
Inventory of assets
c)
Incident management
d)
Physical security
10.
Which is NOT typically part of an asset inventory?
a)
Security classification
b)
Location
c)
License information
d)
Employee birthday
11.
An asset owner can delegate implementation but remains ______.
a)
uninvolved
b)
accountable
c)
unaware
d)
Extemporize
12.
Acceptable use policies must be approved by ______.
a)
Congressman and DPWH
b)
Senior management
c)
User, clients and Shareholders
d)
Contractors
13.
Acceptable use policies define ______.
a)
network cable colors
b)
rules for using assets
c)
desk layout
d)
internet speed
14.
Nondisclosure agreements are associated with ______.
a)
acceptable use
b)
software updates
c)
printer maintenance
d)
system uptime
15.
Information classification organizes information based on ______.
a)
filename
b)
sensitivity and criticality
c)
file size
d)
number of users
16.
Classification determines required ______ controls.
a)
confidentiality, integrity, and availability
b)
profit and cost
c)
user training
d)
power supply
17.
Which is the FIRST step in the information classification process?
a)
Identify protection controls
b)
Determine classification level
c)
Create asset inventory
d)
Dispose of the asset
18.
Which step occurs after determining classification level?
a)
Implementation of access control
b)
Employee training
c)
Hiring staff
d)
System installation
19.
Fill in the blank: The originator of the information is responsible for ______.
a)
classifying it
b)
editing it
c)
printing it
d)
exporting it
20.
Why should classification be reviewed regularly?
a)
To follow employee preference
b)
Information value changes over time
c)
To change labels randomly
d)
To update office layout
21.
Which classification level requires the highest protection?
a)
Public
b)
Restricted
c)
Secret
d)
Internal
22.
Which classification level has the lowest confidentiality requirement?
a)
Restricted
b)
Confidential
c)
Secret
d)
Public
23.
Labeling ensures ______.
a)
documents are printed faster
b)
proper handling according to classification
c)
faster downloads
d)
longer storage life
24.
Which is part of information handling procedures?
a)
How to store classified documents
b)
How to paint office walls
c)
How to design logos
d)
How to buy furniture
25.
Which does NOT belong to confidentiality labels?
a)
Secret
b)
Confidential
c)
Restricted
d)
Available
26.
Which information format must follow handling procedures?
a)
Electronic data only
b)
Paper documents only
c)
Both physical and electronic
d)
Neither
27.
Why is labeling essential when sharing information?
a)
Ensures proper handling
b)
Improves logo quality
c)
Reduces file size
d)
Speeds up Wi-Fi
28.
FISMA applies to ______.
a)
US civilian agencies
b)
private businesses only
c)
small companies only
d)
international agencies
29.
NIST uses which term instead of 'classification'?
a)
Marking
b)
Categorization
c)
Labeling
d)
Partitioning
30.
Which NIST document defines low, moderate, and high impact levels?
a)
FIPS 199
b)
SP 800-171
c)
FIPS 201
d)
SP 800-115
31.
Which publication provides provisional impact ratings?
a)
ISO 27005
b)
SP 800-60
c)
COBIT
d)
HIPAA
32.
HIGH impact under FIPS 199 indicates ______.
a)
minor inconvenience
b)
serious adverse effect
c)
severe or catastrophic effect
d)
no effect
33.
Confidentiality protects against ______.
a)
unauthorized disclosure
b)
hardware failure
c)
slow networks
d)
incorrect formatting
34.
Integrity protects against ______.
a)
unauthorized modification
b)
power outages
c)
data compression
d)
network congestion
35.
Availability ensures ______.
a)
information is timely and accessible
b)
files are small
c)
printing is fast
d)
software loads quickly
36.
The 'high water mark' principle considers ______.
a)
highest impact value
b)
lowest impact value
c)
average impact
d)
sum of impacts
37.
Which information type had MODERATE integrity impact in the HR example?
a)
Staff acquisition
b)
Financial reporting
c)
Timekeeping
d)
Employee attendance
38.
Baseline security controls are defined in ______.
a)
SP 800-53
b)
SP 800-171
c)
SP 800-34
d)
SP 800-61
39.
Which factor may adjust provisional impact levels?
a)
Organizational culture
b)
Legal requirements
c)
Business requirements
d)
All of the above
40.
Unauthorized disclosure is a breach of ______.
a)
availability
b)
integrity
c)
confidentiality
d)
authentication
41.
Unauthorized modification impacts ______.
a)
confidentiality
b)
integrity
c)
availability
d)
performance
42.
A system outage affects ______.
a)
availability
b)
integrity
c)
confidentiality
d)
classification
43.
Which asset type includes applications and utilities?
a)
Hardware
b)
Software
c)
People
d)
Service
44.
Which of the following is a hardware asset?
a)
Payroll system software
b)
Switch
c)
Skillset
d)
Patent
45.
Which best describes the sensitivity of intangible assets?
a)
Easy to quantify
b)
Hard to quantify
c)
Stored physically
d)
Not valuable
46.
Which responsibility includes reviewing asset use authorizations?
a)
Asset owner
b)
Security guard
c)
Developer
d)
Marketing team
47.
Acceptable use policies include ______.
a)
rules for system usage
b)
laptop color choice
c)
office seating plan
d)
printer brand selection
48.
Which belongs to asset protection?
a)
Unauthorized use prevention
b)
File decoration
c)
Document aesthetics
d)
Wallpaper design
49.
Which statement about information owners is true?
a)
They always implement controls themselves
b)
They may delegate tasks but retain accountability
c)
They do not classify information
d)
They only manage hardware
50.
Information handling procedures must document ______.
a)
processing methods
b)
food menu
c)
employee birthdays
d)
holiday schedules
51.
Which classification level is MOST often shared externally without restriction?
a)
Confidential
b)
Secret
c)
Restricted
d)
Public
52.
Which does NOT belong in an asset inventory?
a)
Security category
b)
Serial number
c)
Location
d)
Employee hobby
53.
The purpose of categorizing assets is to ______.
a)
focus protection on important assets
b)
increase equipment cost
c)
rename files
d)
decorate offices
54.
Which NIST publication maps information types to categories?
a)
SP 800-60
b)
SP 800-30
c)
SP 800-144
d)
SP 800-88
55.
Which impact area includes authenticity and nonrepudiation?
a)
Confidentiality
b)
Integrity
c)
Availability
d)
Efficiency
56.
Disruption of access mainly affects ______.
a)
availability
b)
integrity
c)
authentication
d)
classification
57.
Which scenario requires HIGH availability?
a)
Critical emergency system
b)
Lunch schedule
c)
Poster printing
d)
Email signature update
58.
Improper destruction of information affects ______.
a)
integrity
b)
availability
c)
confidentiality
d)
regulation
59.
In classification, controls must be ______ to the value of information.
a)
proportional
b)
opposite
c)
unrelated
d)
financial
60.
Asset management begins with ______.
a)
identifying the assets
b)
installing assets
c)
classifying assets and staff
d)
painting the office
100 %
