IMST Information Security & Risk Management 2

Question 1

What is 'role-based access control' (RBAC)?

Accepted Answer

A model where access permissions are assigned to roles, and users are granted access by being assigned to appropriate roles

Answer

RBAC assigns permissions to job roles rather than individuals, so users automatically receive the access rights associated with their organizational role.

Question 2

What is a 'risk register' in information security management?

Accepted Answer

A document that records identified risks, their likelihood, impact, owners, and treatment plans

Answer

A risk register is a centralized record of all identified information risks, including their assessment, priority, responsible owner, and the controls or mitigation actions planned or in place.

Question 3

What does 'encryption' protect in information management?

Accepted Answer

It transforms data into an unreadable format so that only authorized parties with the decryption key can read it

Answer

Encryption converts plaintext data into ciphertext using an algorithm and key, ensuring that even if data is intercepted or stolen, it is unreadable without the correct decryption key.

Question 4

What is the principle of 'least privilege' in information security?

Accepted Answer

Granting users only the minimum access rights necessary to perform their job functions

Answer

The principle of least privilege limits user access rights to only what is required for their specific job duties, reducing the risk of accidental or malicious data compromise.

Question 5

What is a 'Business Continuity Plan' (BCP)?

Accepted Answer

A documented plan for maintaining or restoring essential business operations during and after a disruption

Answer

A BCP outlines the processes and procedures to ensure that critical business functions can continue during and after a disaster, minimizing downtime and data loss.

IMST - Information Management Specialist Test Practice Test

IMST - Information Management Specialist Test Practice Test

IMST Information Security & Risk Management 2