MCQ Collection
Information Assurance MCQs
Information Assurance MCQs covering security, risk, policies, and compliance concepts.
Choose an option to check your answer.
Correct Answer: D. aligning protection requirements with organizational objectives
Explanation:
Secure planning builds protection into systems before deployment.
Choose an option to check your answer.
Correct Answer: C. documented security requirements or accepted practices
Explanation:
Standards provide consistent security expectations.
Choose an option to check your answer.
Correct Answer: C. a detailed set of steps to implement a policy
Explanation:
Procedures translate policies into repeatable actions.
Choose an option to check your answer.
Correct Answer: B. identifying, assessing, treating, and monitoring risk
Explanation:
Risk management prioritizes protection based on likelihood and impact.
Choose an option to check your answer.
Correct Answer: C. a high-level management statement for information security
Explanation:
Policies communicate management direction and expectations.
Choose an option to check your answer.
Correct Answer: B. safeguards that prevent, detect, or correct security problems
Explanation:
Controls are selected according to risk and requirements.
Choose an option to check your answer.
Correct Answer: C. identifying, owning, classifying, and protecting valuable resources
Explanation:
Asset management helps organizations know what must be protected.
Choose an option to check your answer.
Correct Answer: C. categorize, select, implement, assess, authorize, and monitor
Explanation:
NIST RMF provides a structured security risk process.
Choose an option to check your answer.
Correct Answer: D. a detailed set of steps to implement a policy
Explanation:
Procedures translate policies into repeatable actions.
Choose an option to check your answer.
Correct Answer: C. identifying, assessing, treating, and monitoring risk
Explanation:
Risk management prioritizes protection based on likelihood and impact.
Choose an option to check your answer.
Correct Answer: D. assigning sensitivity levels to information and systems
Explanation:
Classification guides appropriate protection and handling.
Choose an option to check your answer.
Correct Answer: B. measurable indicators of security performance
Explanation:
Metrics help managers evaluate performance and improvement.
