Information Security Quiz

What is the primary goal of information security?

• To make data public

• To protect data from unauthorized access

• To delete sensitive data

• To allow easy sharing of data

Which of the following methods would help secure reports shared between Product Heads and Business Heads in NBFCs?

• Use password-protected zip files for report transmission

• Share reports on public cloud platforms without encryption

• Email reports to all employees for transparency

• Store reports in plain text for easy access

What is the potential penalty for an NBFC if customer data is leaked due to employees using personal laptops without sufficient data security measures?

• The NBFC could be ordered to shut down its operations for a period

• A fine and regulatory sanctions for violating information security and privacy norms

• Only the employee will be penalized with a warning

• No penalty, as the breach was accidental

What does the acronym 'VPN' stand for in the context of cybersecurity?

• Virtual Protection Network

• Very Private Network

• Virtual Private Network

• Verified Protection Network

What is the risk when personal laptops are used for accessing sensitive financial reports in an NBFC?

• Employees have unrestricted access to data, increasing the risk of data leakage

• Reports are more likely to be automatically backed up

• Personal laptops always comply with regulatory standards

• Reports are easier to track and monitor

What should you do if you receive a suspicious email asking for personal information?

• Reply to verify the sender

• Delete the email immediately

• Click on any links to check their validity

• Report it to the IT team

When creating reports containing sensitive data, what should Business Heads or Product Heads do to prevent accidental exposure?

• Keep sensitive data in documents that are easily accessible to anyone in the organization

• Redact or anonymize sensitive information in reports shared with non-sensitive stakeholders

• Ignore the need for security controls and trust employees to handle data responsibly

• Print out hard copies of all reports and store them in unsecured cabinets

What is considered a strong password in HLF?

• Your name or birthday

• A random combination of letters, numbers, and symbols

• 'Password123'

• Your phone number

Which of these is a method used by attackers to gain unauthorized access to data?

• Phishing

• Data encryption

• Backup recovery

• Multi-factor authentication

Why is multi-factor authentication (MFA) important for information security?

• It simplifies login processes

• It provides additional security by requiring more than one form of verification

• It reduces the number of passwords to remember

• It allows access from any device