BEC Information Technology and Systems 2

Question 1

Which of the following describes the role of a firewall in IT security?

Accepted Answer

Monitors and controls incoming and outgoing network traffic based on security rules

Answer

A firewall enforces security rules by filtering network traffic between trusted internal networks and untrusted external networks, blocking unauthorized access.

Question 2

In the context of IT systems, what is the primary purpose of data encryption?

Accepted Answer

To protect data confidentiality by converting it into an unreadable format for unauthorized users

Answer

Encryption transforms data into ciphertext using algorithms and keys, ensuring that only authorized parties with the decryption key can read the information.

Question 3

A recovery time objective (RTO) in disaster recovery planning defines:

Accepted Answer

The maximum acceptable time to restore systems after a disruption

Answer

RTO specifies the maximum tolerable duration for system downtime after a disruption — the target time within which business operations must be restored.

Question 4

Which systems development life cycle (SDLC) phase involves identifying user needs and defining project scope?

Accepted Answer

Requirements analysis (systems analysis)

Answer

The requirements analysis phase gathers and documents stakeholder needs, defines the project scope, and establishes the functional and non-functional requirements the system must meet.

Question 5

The concept of 'least privilege' in IT security means users should:

Accepted Answer

Have access only to the resources needed to perform their job functions

Answer

The principle of least privilege limits user access rights to the minimum necessary for their job, reducing the attack surface and potential damage from compromised accounts.

BEC - Business Environment and Concepts Practice Test

BEC - Business Environment and Concepts Practice Test

BEC Information Technology and Systems 2