SPG Unit 1-1

What is the primary focus of information security (InfoSec)?

• Maximizing business profits

• Protection of information and its characteristics like confidentiality, integrity, and availability

• Developing new technologies

• Increasing IT infrastructure spending

Which of the following is NOT a specialized area of security?

• Physical security

• Operations security

• Economic security

• Communications security

What is the role of the general business community in information security?

• Protecting the organization’s information assets

• Supporting IT needs of the organization

• Articulating policies, communicating objectives, and allocating resources

• Managing the data center

What does the McCumber Cube primarily represent in InfoSec?

• Financial models for IT security investments

• A 3D model addressing information characteristics, location, and security control categories

• The design of computer networks

• Employee roles in an organization

Which group is responsible for protecting information assets from threats?

• IT community

• Information security community

• General business community

• Executive management

What is the relationship between network security and cybersecurity?

• Network security is unrelated to cybersecurity.

• Cybersecurity is a subset of network security.

• Network security is a subset of cybersecurity.

• Both are completely independent fields.

What is a significant limitation of the CNSS model?

• It is outdated and irrelevant to modern InfoSec practices.

• It does not address guidelines and policies for implementing controls.

• It does not consider technology as a dimension.

• It focuses only on financial security.

What are the three distinct communities of interest involved in InfoSec?

• Technology, management, and customers

• IT, InfoSec, and the general business community

• Marketing, IT, and HR

• IT, sales, and executive management

Which of the following best defines security in the context of InfoSec?

• Achieving maximum productivity

• Being free from danger, risk of loss, or unwanted modification

• Implementing the latest technology

• Limiting access to all information

Why is information security no longer the sole responsibility of a small, dedicated group?

• IT systems have become cheaper.

• Technology now permeates every facet of business environments.

• Employees lack the technical knowledge required.

• Managers focus only on financial performance.