IMST Information Security & Risk Management

Question 1

What does the CIA triad stand for in information security?

Accepted Answer

Confidentiality, Integrity, Availability

Answer

The CIA triad is the foundational model of information security: Confidentiality (limiting access to authorized users), Integrity (ensuring data accuracy), and Availability (ensuring authorized access when needed).

Question 2

What is 'information risk management'?

Accepted Answer

The systematic process of identifying, assessing, and treating risks to organizational information assets

Answer

Information risk management involves identifying threats and vulnerabilities, assessing their likelihood and impact, and applying controls to reduce risk to an acceptable level.

Question 3

What is a 'data classification' scheme in information security?

Accepted Answer

A framework that categorizes information by sensitivity level to determine appropriate access controls and handling requirements

Answer

Data classification assigns labels (such as Public, Internal, Confidential, Restricted) to information based on sensitivity, guiding how data should be stored, transmitted, and shared.

Question 4

In information security risk assessment, what does 'vulnerability' refer to?

Accepted Answer

A weakness in a system, process, or control that could be exploited by a threat

Answer

A vulnerability is a flaw or weakness (in software, hardware, processes, or people) that a threat actor could exploit to cause harm to information assets.

Question 5

Which US law specifically regulates the protection of health information?

Accepted Answer

Health Insurance Portability and Accountability Act (HIPAA)

Answer

HIPAA establishes national standards for protecting sensitive patient health information from being disclosed without the patient's consent or knowledge.

IMST - Information Management Specialist Test Practice Test

IMST - Information Management Specialist Test Practice Test

IMST Information Security & Risk Management