← Back

Chapter 5: Information Systems Security Risk Management

Every problem in the chapter beside the book’s answer, a chapter at a time as you scroll.

Chapter 5: Information Systems Security Risk Management

11 problems · 0 figures

5-1 §5.1 source ↗

What principle primarily concerns protecting information from unauthorized access, modification, or deletion?
  1. a.
    data encryption
  2. b.
    information security
  3. c.
    information privacy
  4. d.
    user authentication

Answer

B. information security

5-3 §5.1 source ↗

What type of social engineering attack appears as a trustworthy entity in digital communication but steals user data, such as login credentials and financial information?
  1. a.
    spoofing
  2. b.
    hacking
  3. c.
    identity theft
  4. d.
    phishing

Answer

C. identity theft

5-5 §5.2 source ↗

What is the purpose of role-based access control (RBAC) in network security?
  1. a.
    to monitor and filter outgoing internet traffic
  2. b.
    to prevent data loss through email and web applications
  3. c.
    to ensure users have access only to the resources necessary for their roles
  4. d.
    to encrypt data transmissions over the network

Answer

C. to ensure users have access only to the resources necessary for their roles

5-7 §5.2 source ↗

What is the cyber safety significance of applying regular software updates and patches?
  1. a.
    They maintain the software’s compatibility with new hardware.
  2. b.
    They often add new features to the software.
  3. c.
    They address identified security vulnerabilities to prevent exploits.
  4. d.
    They are mainly for aesthetic improvements to the user interface.

Answer

C. They address identified security vulnerabilities to prevent exploits.

5-9 §5.2 source ↗

What is the purpose of antivirus software?
  1. a.
    to increase the speed of the computer’s processor
  2. b.
    to protect against known threats and analyze system behavior to detect new threats
  3. c.
    to manage the organization’s email server
  4. d.
    to offer technical support for software developers

Answer

B. to protect against known threats and analyze system behavior to detect new threats

5-11 §5.3 source ↗

What is a key process of an effective information security risk management (ISRM) strategy?
  1. a.
    periodic security training
  2. b.
    continuous monitoring
  3. c.
    single-layer security
  4. d.
    annual risk assessments

Answer

B. continuous monitoring

5-13 §5.3 source ↗

What organization is well known for developing standards and frameworks like COBIT to support compliance with ISRM practices?
  1. a.
    IEEE
  2. b.
    ISO
  3. c.
    ISACA
  4. d.
    NIST

Answer

C. ISACA

5-15 §5.3 source ↗

Why is continuous monitoring in an ISRM strategy important?
  1. a.
    It allows for one-time setup of complete security controls.
  2. b.
    It helps eliminate all cyber risks.
  3. c.
    It ensures security measures are effective over time against evolving threats.
  4. d.
    It provides a static security environment.

Answer

C. It ensures security measures are effective over time against evolving threats.

5-17 §5.4 source ↗

Who is responsible for implementing security measures to protect an organization’s data and ensuring that these measures are aligned with regulatory requirements?
  1. a.
    security consultant
  2. b.
    compliance analyst
  3. c.
    security software developer
  4. d.
    threat intelligence analyst

Answer

B. compliance analyst

5-19 §5.4 source ↗

In the context of cybersecurity, what does the term “digital trust” primarily refer to?
  1. a.
    the encryption standards used in digital communications
  2. b.
    the confidence stakeholders place in an organization’s ability to secure data and systems
  3. c.
    the digital certificates used for website authentication
  4. d.
    the trustworthiness of digital signatures

Answer

B. the confidence stakeholders place in an organization’s ability to secure data and systems

5-21 §5.4 source ↗

In which type of organization would a Certified Information Security Manager (CISM) certification be especially beneficial for career advancement?
  1. a.
    tech start-ups
  2. b.
    government agencies
  3. c.
    financial institutions
  4. d.
    nonprofit organizations

Answer

C. financial institutions

Loading chapter 6…

Problems and answers are adapted from Foundations of Information Systems by Mahesh S. Raisinghani, OpenStax, and are used under the CC BY-NC-SA 4.0 licence. Access for free at https://openstax.org/books/foundations-information-systems/pages/1-introduction. Illustrations: Copyright Rice University, OpenStax, under CC BY-NC-SA 4.0 license. This adaptation is released under the same licence, is non-commercial, and is neither affiliated with nor endorsed by OpenStax or Rice University.