IT26214_Chapter2

What is the primary function of information security in an organization?

• To protect the organization's ability to function

• To reduce IT costs

• To replace management decision-making

• To eliminate cyber threats completely

Which of the following is NOT one of the main areas of information security protection?

• Protecting the ability to function

• Enabling the safe operation of applications

• Enhancing software aesthetics

• Safeguarding technology assets

Who is primarily responsible for ensuring information security in an organization?

• IT Department

• Management

• Customers

• Software developers

What is a 'threat' in the context of information security?

• An outdated software system

• An object, person, or entity that poses a danger to assets

• A security tool used to prevent cyber attacks

• A measure to ensure internet speed

Which of the following is an example of an act of human error or failure?

• Intentional hacking

• Phishing attacks

• Improper training leading to accidental data leaks

• Malware installation by an external hacker

Which service loss can significantly impact an organization's ability to function?

• Telephone services

• Water supply

• Internet services

• All of the above

What is the main risk associated with power irregularities?

• They can cause voltage fluctuations that harm electronic devices

• They reduce the internet speed

• They increase cybersecurity risks

• They improve system performance

What is espionage in the context of information security?

• A legal method of data gathering

• Unauthorized access to confidential information

• A type of firewall technology

• A legitimate business practice

Which of the following best describes "shoulder surfing"?

• Watching someone enter their password to steal credentials

• Surfing the internet using a proxy server

• Using a VPN for secure browsing

• Encrypting sensitive data

What is information extortion?

• Encrypting sensitive files for security

• Deleting outdated information for compliance

• Strengthening firewalls for better security

• Stealing information and demanding compensation for its return