Information Security Basics: Definition and Scope

Question 1

What's the main goal of information security?

Accepted Answer

Protect the secrecy, accuracy, and availability of information.

Answer

Stop people from getting into computer systems without permission.

Answer

Find and deal with security problems.

Question 2

Which element is NOT a core principle of the CIA Triad in information security?

Accepted Answer

Reliability

Answer

Confidentiality

Answer

Integrity

Answer

Availability

Question 3

Which of these emerging trends in information security leverages artificial intelligence to boost data protection and detect cyber threats?

Accepted Answer

AI-Driven Security

Answer

Biometric Authentication

Answer

Quantum Cryptography

Answer

Blockchain Technology

Question 4

Define information security.

Accepted Answer

Protecting the confidentiality, integrity, and availability of information

Answer

Ensuring the privacy of individuals

Answer

Safeguarding computer systems from malware

Question 5

State the primary goal of information security.

Accepted Answer

To protect information assets from unauthorized access, use, disclosure, disruption, modification, or destruction

Answer

To ensure the confidentiality of sensitive information

Question 6

Explain the CIA triad in the context of information security.

Accepted Answer

Confidentiality, Integrity, and Availability

Answer

Confidentiality, Integrity, and Authentication

Answer

Confidentiality, Identification, and Authorization

Answer

Confidentiality, Identification, and Authentication

Question 7

Describe the purpose of risk assessment in information security.

Accepted Answer

To identify and analyze potential risks to information assets

Answer

To monitor security incidents

Answer

To implement security controls

Question 8

Distinguish between a vulnerability and a threat.

Accepted Answer

A vulnerability is a weakness in a system that can be exploited by a threat

Answer

A vulnerability is a potential threat, while a threat is an actual attack

Answer

A threat is an action or event that can cause harm to a system

Question 9

What is a key responsibility of an information security professional?

Accepted Answer

Developing and implementing security policies

Answer

Providing customer support

Answer

Maintaining computer systems

Answer

Troubleshooting network issues

Question 10

Explain the importance of staying informed about emerging information security trends.

Accepted Answer

To adapt to new threats and vulnerabilities

Answer

To impress clients and customers

Answer

To enhance career opportunities

Answer

To comply with industry regulations

Question 11

What is the primary objective of information security?

Accepted Answer

To protect information assets from unauthorized access, use, disclosure, disruption, modification, or destruction.

Answer

To ensure the privacy of individuals

Answer

To improve the efficiency of information systems

Answer

To comply with regulatory requirements

Question 12

Which of the following is NOT a fundamental principle of information security?

Accepted Answer

Convenience

Answer

Confidentiality

Answer

Availability

Answer

Integrity

Question 13

Which domain of information security focuses on protecting information during transmission?

Accepted Answer

Network security

Answer

Data security

Answer

Endpoint security

Answer

Cloud security

Question 14

Which of the following is the best way to protect the confidentiality of information at rest and in transit?

Accepted Answer

Using strong encryption algorithms

Answer

Disabling unused network ports

Answer

Restricting access on a need-to-know basis

Answer

Implementing role-based access control

Question 15

Which of the following refers to malicious software that can damage or steal information?

Accepted Answer

Malware

Answer

Spam

Answer

Phishing

Answer

Spyware

Question 16

Which type of security control includes physical barriers, such as fences and security guards?

Accepted Answer

Physical security

Answer

Administrative security

Answer

Technical security

Answer

Operational security

Question 17

What is a major benefit of using an information security framework?

Accepted Answer

Providing a standardized approach to managing information security

Answer

Reducing the cost of implementing security measures

Answer

Guaranteeing complete protection against all threats

Answer

Eliminating the need for security audits

Question 18

Which element of an incident response plan is crucial for effective coordination?

Accepted Answer

Clearly defined roles and responsibilities

Answer

Regularly scheduled training exercises

Answer

A comprehensive list of potential security incidents

Answer

A detailed budget for disaster recovery

Question 19

Which of the following is a best practice for ensuring high availability of information systems and data?

Accepted Answer

Implementing redundant systems and backups

Answer

Restricting access to sensitive information during non-business hours

Answer

Ignoring security vulnerabilities that are not considered critical

Answer

Storing all data in a single centralized location

Question 20

Which of the following best describes the primary goal of information security?

Accepted Answer

To preserve the Confidentiality, Integrity, and Availability (CIA) of information assets

Answer

To ensure that information is always backed up in case of a disaster

Answer

To completely eliminate all unauthorized access to information

Question 21

The principle of Confidentiality in information security primarily focuses on:

Accepted Answer

Restricting access to information only to authorized individuals

Answer

Ensuring that information is accessible whenever needed

Answer

Maintaining the accuracy and completeness of information

Question 22

The CIA triad in information security stands for:

Accepted Answer

Confidentiality, Integrity, Availability

Answer

Cryptology, Intrusion Detection, Antivirus

Answer

Classification, Identification, Authentication

Answer

Compliance, Incident Response, Forensics

Question 23

The primary purpose of conducting a risk assessment in information security is to:

Accepted Answer

Identify and prioritize potential threats and vulnerabilities

Answer

Design and implement security controls

Answer

Monitor and respond to security incidents

Question 24

The primary purpose of encryption in information security is to:

Accepted Answer

Convert plaintext into ciphertext to safeguard its confidentiality

Answer

Detect and block unauthorized access to information

Answer

Guarantee that information is consistently accessible to authorized users

Question 25

Which of the following is an example of a common social engineering attack?

Accepted Answer

Phishing

Answer

Buffer overflow

Answer

Cross-site scripting

Answer

SQL injection

Question 26

The significance of incident response in information security lies in its ability to:

Accepted Answer

Minimize the impact and restore normal operations after a security incident occurs

Answer

Identify and prosecute individuals responsible for security breaches

Answer

Prevent security incidents from happening in the first place

Question 27

Which of the following is the primary objective of information security?

Accepted Answer

To protect the confidentiality, integrity, and availability of information

Answer

To prevent unauthorized access to systems and data

Answer

To ensure that data is always backed up and recoverable

Question 28

What is the fundamental purpose of the CIA triad in information security?

Accepted Answer

To provide a framework for defining and implementing security objectives

Answer

To assess the effectiveness of information security measures

Answer

To prioritize security threats based on potential impact

Question 29

What is the distinction between a vulnerability and an exploit?

Accepted Answer

A vulnerability is a weakness in a system or software, while an exploit is a technique or code that takes advantage of that vulnerability

Answer

A vulnerability is always caused by a software bug, whereas an exploit is always the result of human error

Question 30

What is the primary function of a firewall in a network security architecture?

Accepted Answer

To control and filter incoming and outgoing network traffic based on predefined security rules

Answer

To detect and neutralize malicious software and viruses

Answer

To provide secure encryption and decryption of data transmissions

Question 31

What is the central responsibility of an Information Security Officer (ISO) within an organization?

Accepted Answer

To lead, develop, and manage the organization's comprehensive information security program

Answer

To design and implement specific security controls and measures

Answer

To conduct regular security assessments and audits

Question 32

The primary goal of information security is to:

Accepted Answer

Protect the confidentiality, integrity, and availability of information.

Answer

Ensure that everyone has access to all information.

Answer

Prevent all unauthorized access to information.

Question 33

Which of the following is NOT a typical information security threat?

Accepted Answer

Regular software updates

Answer

Malware

Answer

Social engineering

Answer

Phishing attacks

Question 34

The principle of least privilege states that:

Accepted Answer

Users should only have access to the information and resources they need to do their jobs.

Answer

All users should have equal access to information.

Answer

Access controls should be implemented to prevent any unauthorized access to information.

Question 35

Which of the following BEST describes the scope of information security?

Accepted Answer

It encompasses all aspects of protecting information, including hardware, software, networks, and people.

Answer

It focuses solely on protecting computer systems from unauthorized access.

Question 36

An employee accidentally deleting a critical database is an example of a(n):

Accepted Answer

Human error

Answer

Natural disaster

Answer

System failure

Answer

Malicious attack

Question 37

Which of the following is NOT a common information security control measure?

Accepted Answer

Data redundancy

Answer

Access controls

Answer

Firewalls

Answer

Antivirus software

Question 38

The process of evaluating a system or application to ensure it meets security requirements is known as:

Accepted Answer

Security assessment

Answer

Risk management

Answer

Incident response

Answer

Vulnerability scanning

Question 39

Which of the following is an example of a physical security control?

Accepted Answer

Surveillance cameras

Answer

Firewalls

Answer

Data encryption

Answer

Password policies

Question 40

Why is it important to regularly review and update information security policies?

Accepted Answer

To keep up with changing threats and technologies.

Answer

To comply with legal requirements only.

Answer

To increase the number of security controls in place.

Answer

To improve employee morale.

Question 41

What is the main goal of information security?

Accepted Answer

To protect the confidentiality, integrity, and availability of information.

Answer

To make sure all network devices work smoothly.

Answer

To stop people from accessing computer systems without permission.

Question 42

A company's database holding personal information about their customers is considered a(n):

Accepted Answer

Information asset

Answer

Vulnerability

Answer

Risk

Answer

Security threat

Question 43

Which of these is NOT a common category of information security threats?

Accepted Answer

Hardware malfunction

Answer

Malware attacks

Answer

Social engineering attacks

Answer

Natural disasters

Question 44

The 'least privilege' principle in information security means:

Accepted Answer

Giving users only the access they need to do their job.

Answer

Using strong passwords and extra security steps.

Answer

Protecting the most important things first.

Question 45

A company's rule that makes employees change their passwords every 90 days is an example of:

Accepted Answer

An administrative control

Answer

A technical control

Answer

A physical control

Question 46

Which area of information security focuses on keeping sensitive information secret?

Accepted Answer

Confidentiality

Answer

Integrity

Answer

Availability

Answer

Non-repudiation

Question 47

Regularly updating software and operating systems is mainly done to address:

Accepted Answer

Vulnerability management

Answer

Risk assessment

Answer

Incident response

Answer

Data recovery

Question 48

What is the main job of a Chief Information Security Officer (CISO)?

Accepted Answer

To manage all aspects of information security in a company.

Answer

To find security weaknesses and test how safe systems are.

Answer

To create and follow security rules.

Question 49

Which of these is NOT a common example of a physical security control?

Accepted Answer

Strong passwords

Answer

Access control systems

Answer

Security cameras

Answer

Security guards

Question 50

A company decides to use data encryption to protect sensitive customer information. This is an example of:

Accepted Answer

A risk mitigation strategy

Answer

An incident response plan

Answer

A vulnerability assessment