Information Security Quiz

What is the term used to describe the potential for loss or damage to an asset due to a threat?

• Harm

• Vulnerability

• Control

• Authentication

What is the process of verifying the identity of a user or a system?

• Control

• Authentication

• Access Control

• Malware

What is the mechanism that restricts the actions or operations that a user or a system can perform on an asset?

• Control

• Authentication

• Access Control

• Malware

What is the term used to describe the unintentional errors or flaws in a software program that can be exploited by an attacker?

• Unintentional Programming Oversights

• Malicious Code

• Malware

• Countermeasures

What is the term used to describe the software programs that are designed to harm or disrupt a system or a network?

• Unintentional Programming Oversights

• Malicious Code

• Malware

• Countermeasures

What is the term used to describe the actions or techniques that are used to prevent, detect, or mitigate the effects of a threat?

• Unintentional Programming Oversights

• Malicious Code

• Malware

• Countermeasures

Which of the following is not a type of threat to information security?

• Natural disasters

• Human errors

• Malicious attacks

• Encryption algorithms

Which of the following is not a type of control for information security?

• Preventive

• Detective

• Corrective

• Infective

Which of the following is not a type of authentication factor?

• Something you know

• Something you have

• Something you are

• Something you want

Which of the following is not a type of access control model?

• Discretionary

• Mandatory

• Role-based

• Attribute-based