MIS Information Security Management 1 — Questions and Answers
Question 1: What are the three core principles of information security known as the CIA triad?
- Communication, Integration, Authentication
- Confidentiality, Integrity, Availability (Correct answer)
- Compliance, Investigation, Authorization
- Control, Identification, Assessment
Correct answer: Confidentiality, Integrity, Availability
The CIA triad — Confidentiality, Integrity, and Availability — represents the three fundamental principles of information security.
Question 2: Which type of attack attempts to overwhelm a system with traffic to make it unavailable?
- Phishing attack
- SQL injection attack
- Denial of Service (DoS) attack (Correct answer)
- Man-in-the-middle attack
Correct answer: Denial of Service (DoS) attack
A Denial of Service (DoS) attack floods a system with excessive traffic to exhaust resources and prevent legitimate access.
Question 3: What is a firewall in information security?
- A physical barrier protecting server hardware
- A network security system that monitors and controls incoming/outgoing traffic (Correct answer)
- An encryption algorithm for database security
- A software tool for detecting computer viruses
Correct answer: A network security system that monitors and controls incoming/outgoing traffic
A firewall monitors and controls network traffic based on predetermined security rules, acting as a barrier between trusted and untrusted networks.
Question 4: Which of the following best describes phishing?
- Testing network security with simulated attacks
- Fraudulent attempts to obtain sensitive information by impersonating trusted entities (Correct answer)
- Unauthorized access to physical server rooms
- Encrypting data without authorization
Correct answer: Fraudulent attempts to obtain sensitive information by impersonating trusted entities
Phishing involves deceptive emails or websites that impersonate legitimate organizations to trick users into revealing passwords or financial information.
Question 5: What is multi-factor authentication (MFA)?
- Using multiple passwords for one account
- Verifying identity using two or more independent authentication factors (Correct answer)
- Having multiple administrators approve each login
- Logging in from multiple devices simultaneously
Correct answer: Verifying identity using two or more independent authentication factors
MFA requires users to provide two or more verification factors to gain access, significantly reducing the risk of unauthorized access.
Question 6: Which US federal law governs the protection of health information in digital systems?
- FERPA
- SOX
- HIPAA (Correct answer)
- GDPR
Correct answer: HIPAA
HIPAA (Health Insurance Portability and Accountability Act) establishes standards for protecting sensitive patient health information in the US.
MIS Information Security Management 1
What are the three core principles of information security known as the CIA triad?