1 Foundations of Information Security Online Quiz Questions

A system outage prevents authorized staff from accessing records, but no information is disclosed or altered. Has the incident harmed availability?

What three-letter acronym names the group of information security goals confidentiality, integrity, and availability?

A school restricts access to student records so that only permitted people can view them. Which security goal is the school directly protecting?

Which of the following are intangible assets? Select all correct choices.

An organization discovers that a server has unpatched software that an attacker could exploit. What security concept describes the unpatched software weakness?

Information security risk is always calculated using one universal formula.

A power failure could interrupt an organization's systems and cause harm. Which security concept best describes the power failure?

A payroll system must prevent unauthorized salary changes and preserve accurate payment records. Which CIA goal is directly involved?

Ransomware makes files inaccessible, and the attackers may also have copied them. Which CIA goals are directly threatened by these effects? Select all correct choices.

A security incident can affect one, two, or all three goals in the CIA triad.

Which statement best describes how threats, vulnerabilities, and assets can relate in an information security incident?

A school limits access to student records so that only authorized staff can view them. Which security goal is this control primarily intended to protect?

An online service stores customer records on a server that has not received an available security patch. What does the unpatched server represent in this scenario?

An unauthorized change increases an employee’s salary in a payroll system. Which security goal is most directly affected?

An organization is assessing the risk that an attacker could exploit a server weakness and expose customer records. Which approach best reflects the meaning of risk?

What discipline protects both information and the systems that store, process, and transmit it from unauthorized access, disclosure, modification, disruption, or destruction?

A staff member without authorization changes a stored customer record. The record remains viewable, and no information is disclosed. Which CIA goal is directly compromised?

An organization learns that an attacker is preparing to steal its customer records, but there is no evidence that the attacker has accessed them. Explain why the planned attempt can still be classified as a threat.