MIS Information Security Management

Question 1

What are the three core principles of information security known as the CIA triad?

Accepted Answer

Confidentiality, Integrity, Availability

Answer

Communication, Integration, Authentication

Answer

Compliance, Investigation, Authorization

Answer

Control, Identification, Assessment

Question 2

Which type of attack attempts to overwhelm a system with traffic to make it unavailable?

Accepted Answer

Denial of Service (DoS) attack

Answer

Phishing attack

Answer

SQL injection attack

Answer

Man-in-the-middle attack

Question 3

What is a firewall in information security?

Accepted Answer

A network security system that monitors and controls incoming/outgoing traffic

Answer

A physical barrier protecting server hardware

Answer

An encryption algorithm for database security

Answer

A software tool for detecting computer viruses

Question 4

Which of the following best describes phishing?

Accepted Answer

Fraudulent attempts to obtain sensitive information by impersonating trusted entities

Answer

Testing network security with simulated attacks

Answer

Unauthorized access to physical server rooms

Answer

Encrypting data without authorization

Question 5

What is multi-factor authentication (MFA)?

Accepted Answer

Verifying identity using two or more independent authentication factors

Answer

Using multiple passwords for one account

Answer

Having multiple administrators approve each login

Answer

Logging in from multiple devices simultaneously

Question 6

Which US federal law governs the protection of health information in digital systems?

Accepted Answer

HIPAA

Answer

FERPA

Answer

SOX

Answer

GDPR