MIS Information Security Management 2

Question 1

What is the purpose of encryption in information security?

Accepted Answer

To convert data into an unreadable format for unauthorized users

Answer

Encryption converts readable data (plaintext) into an unreadable format (ciphertext) that can only be decoded by authorized parties with the correct key.

Question 2

A risk assessment in information security involves:

Accepted Answer

Identifying, analyzing, and evaluating potential threats to information assets

Answer

A risk assessment systematically identifies potential threats, analyzes their likelihood and impact, and evaluates appropriate mitigation strategies.

Question 3

Which security control type is a password policy?

Accepted Answer

Administrative control

Answer

Password policies are administrative controls — documented rules and procedures that govern how people behave to maintain security.

Question 4

What is social engineering in the context of information security?

Accepted Answer

Manipulating people psychologically to divulge confidential information

Answer

Social engineering exploits human psychology rather than technical vulnerabilities to manipulate individuals into revealing sensitive information or granting unauthorized access.

Question 5

What does the principle of least privilege mean in information security?

Accepted Answer

Users are granted only the minimum access needed to perform their job

Answer

The principle of least privilege limits user access rights to only what is strictly necessary to perform their specific job functions.

MIS - Management Information Systems Practice Test

MIS - Management Information Systems Practice Test

MIS Information Security Management 2