Question 1

What is the purpose of an Information Security policy?

Options :

A : An information security policy makes the security plan concrete by providing the necessary details

B : An information security policy provides insight into threats and the possible consequences

C : An information security policy provides direction and support to the management regarding information security

D : An information security policy documents the analysis of risks and the search for countermeasures

Answer: C

Question 2

Phishing is what type of Information Security Incident?

Options :

A : Private Incidents

B : Cracker/Hacker Attacks

C : Technical Vulnerabilities

D : Legal Incidents

Answer: B

Question 3

Which of the following does a lack of adequate security controls represent?

Options :

A : Asset

B : Vulnerability

C : Impact

D : Threat

Answer: B

Question 4

A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.

What is not one of the four main objectives of a risk analysis?

Options :

A : Identifying assets and their value

B : Implementing counter measures

C : Establishing a balance between the costs of an incident and the costs of a security measure

D : Determining relevant vulnerabilities and threats

Answer: B

Question 5

Below is Purpose of 'Integrity', which is one of the Basic Components of Information Security

Options :

A : the property that information is not made available or disclosed to unauthorized individuals

B : the property of safeguarding the accuracy and completeness of assets.

C : the property of being accessible and usable upon demand by an authorized entity.

Answer: B