Information Security Governance and Risk Management Quiz

What is the primary purpose of Information Security Governance?

• To manage employee performance

• To provide strategic direction and manage risk

• To develop marketing strategies

• To increase sales and revenue

Which of the following is NOT a component of Information Security Governance?

• Strategy

• Implementation

• Monitoring

• Marketing

What does the term 'assets' refer to in Information Security?

• Only customer data

• Only physical devices

• Only financial data

• Any information or device that supports business activities

What is a Black Hat Hacker?

• A hacker who works with government agencies

• A hacker who bypasses security measures for malicious intent

• A hacker who only targets financial institutions

• A hacker who helps organizations secure their systems

Which of the following is a type of malware that can self-replicate?

• Trojan Horse

• Worm

• Rootkit

• Spyware

What is the purpose of a firewall in information security?

• To store sensitive data

• To monitor employee productivity

• To create marketing campaigns

• To inspect network traffic and control access

What does the term 'vulnerability' refer to?

• A security policy

• A type of malware

• A weakness that may harm systems or networks

• A strength in a system

Which of the following is an example of a Denial of Service (DoS) attack?

• Accessing data without permission

• Flooding a network to make it unavailable

• Modifying data without authorization

• Stealing sensitive information

What is the role of an Information Security Professional?

• To manage the company's finances

• To secure the company's properties from risks

• To oversee human resources

• To develop marketing strategies

What is the main goal of an Information Security Governance Framework?

• To develop new products

• To manage employee relations

• To prepare for risks and align business strategy with IT strategy

• To increase sales