1 Foundations of Information Security Online Quiz Questions

A hospital must be able to access essential patient records during care. Which security goal is most directly served by ensuring the records remain usable when needed?

A security measure can improve one security goal while making another goal harder to achieve.

Completing a threat model guarantees that every way a system could be attacked or fail has been identified.

A team is assessing the risk of a security event. What two considerations are commonly used to assess risk?

An administrator gives a service account only the permissions needed for its task, and removes those permissions when they are no longer needed. Which security principle is being applied?

A team discovers that a planned activity could expose sensitive customer information. Explain how it could assess and respond to the risk. Describe at least two different risk responses and why ongoing monitoring may still be needed.

A team is beginning a threat model for an online service. Which actions are appropriate parts of the process? Select all that apply.

A manager is deciding how to handle an assessed security risk. Which are recognized risk-response options? Select all that apply.

A payment process requires one employee to prepare a transaction and a different employee to approve it. Which security principle is most directly reflected in this design?

A safeguard that was appropriate when a system was first deployed may need to be reassessed after the system or its operating conditions change.

A company stores employee payroll records in a system. Which security goal is most directly served by restricting access so only authorized payroll staff can view those records?

A payment record is changed without authorization, causing the amount owed to be incorrect. Which security goal has been directly violated?

A ticket-booking service has accurate records and protects customer information, but authorized customers cannot access it during peak booking hours. Which security goal is most directly affected?

A public-facing server contains an unpatched software flaw that could allow unauthorized access. What is the flaw in this scenario?

A team is choosing between two designs that meet the same requirements. One has fewer unnecessary components and is easier to understand and review. Which security principle best supports choosing that design?

An attacker tries to access a server containing customer records. In this scenario, what is the attacker’s attempt?

A system has a weakness that could be exploited by an attacker or triggered by another harmful event. What is this weakness called? Enter the security term.

In threat modeling, what term names the important information and services identified as things to protect? Enter the plural term.