CTech Unit 2 LO6.1Information Security Principles and Risks Quiz

What is a key aspect of confidentiality in information security?

• Information can be accessed by anyone.

• Information is maintained to be up to date.

• Information is always available to everyone.

• Information can only be accessed by authorized individuals.

Answer explanation

A key aspect of confidentiality is that information can only be accessed by authorized individuals. This ensures that sensitive data is protected from unauthorized access, maintaining its privacy and integrity.

Which of the following is a measure to ensure confidentiality?

• Allowing public access to data.

• Making data available to everyone.

• Checking data periodically.

• Restricting access to a computer network.

Answer explanation

Restricting access to a computer network is a key measure to ensure confidentiality, as it limits who can view or interact with sensitive data, unlike the other options which promote openness.

What does integrity in information security ensure?

• Data is stored in multiple locations.

• Data can be accessed by unauthorized users.

• Data is up to date, accurate, and complete.

• Data is always available.

Answer explanation

Integrity in information security ensures that data is up to date, accurate, and complete. This means that the information remains reliable and trustworthy, which is essential for effective decision-making.

What is a risk associated with unauthorized access to data?

• Increased data availability.

• Gaining an advantage over the original data holder.

• Loss of data integrity.

• Improved data accuracy.

Answer explanation

Unauthorized access can lead to individuals gaining an advantage over the original data holder by exploiting sensitive information, which can compromise competitive positions and trust.

What is a potential impact of accidental loss of data?

• Breach of the Data Protection Act.

• Increased data availability.

• Compliance with the Data Protection Act.

• Improved data security.

Answer explanation

Accidental loss of data can lead to a breach of the Data Protection Act, as it may compromise personal information and violate legal obligations to protect that data.

What is the motivation behind intentional destruction of data?

• To comply with legal requirements.

• To harm the organization holding the data.

• To improve data accuracy.

• To increase data availability.

Answer explanation

The motivation behind intentional destruction of data can be to harm the organization holding the data. This choice reflects malicious intent, contrasting with compliance or accuracy goals.

What is the impact of tampering with data?

• Decisions based on data become flawed.

• Data is more accessible.

• Data becomes more accurate.

• Data is more secure.

Answer explanation

Tampering with data leads to flawed decisions, as inaccurate or manipulated information can misguide analysis and outcomes. This undermines the reliability of data-driven choices.

What is considered intellectual property?

• A generic software application.

• A random individual's address.

• A public domain document.

• A written report or a piece of artwork.

Answer explanation

Intellectual property includes creations of the mind, such as written reports and artwork, which are protected by law. The other options do not represent original creations or protected works.

What could be a result of a failure in the security of confidential information?

• Enhanced data availability.

• Confidential data becomes accessible to all.

• Increased public trust.

• Improved data integrity.

Answer explanation

A failure in the security of confidential information can lead to unauthorized access, meaning confidential data becomes accessible to all. This is a significant risk that undermines privacy and security.

What is a potential consequence of a loss of reputation due to data security failure?

• Increased customer trust.

• Higher sales and income.

• Lost sales and a drop in income.

• Improved legal standing.

Answer explanation

A loss of reputation from a data security failure can lead to customers losing trust, resulting in lost sales and a drop in income. This highlights the negative financial impact of compromised data security.