IS-821: CRITICAL INFRASTRUCTURE PROTECTION
EXAM QUESTIONS AND CORRECT ANSWERS
(VERIFIED ANSWERS) Q&A 2027|INSTANT
DOWNLOAD PDF
1. What is the primary purpose of Critical Infrastructure
Protection (CIP)?
A. To eliminate every possible hazard
B. To protect essential systems and assets from disruption
C. To increase government revenue
D. To reduce international trade
Correct Answer: B. To protect essential systems and assets from
disruption
Rationale: Critical Infrastructure Protection focuses on
safeguarding systems and assets whose disruption would
significantly affect national security, public health, safety, and
the economy.
2. Which of the following best describes critical
infrastructure?
A. Buildings older than 100 years
B. Assets and systems essential to national functions
,C. Residential neighborhoods only
D. Recreational facilities
Correct Answer: B. Assets and systems essential to national
functions
Rationale: Critical infrastructure includes physical and cyber
systems essential for society and government to function
effectively.
3. Which sector provides electricity to homes, businesses, and
industries?
A. Financial Services
B. Energy
C. Emergency Services
D. Transportation
Correct Answer: B. Energy
Rationale: The Energy Sector supplies electricity, oil, and
natural gas necessary for nearly every other infrastructure
sector.
4. A vulnerability is best defined as:
A. A confirmed attack
B. A weakness that can be exploited
,C. A recovery strategy
D. An emergency response plan
Correct Answer: B. A weakness that can be exploited
Rationale: Vulnerabilities are weaknesses in systems, facilities,
or procedures that threats can exploit.
5. Which element is necessary for risk to exist?
A. Only an asset
B. Only a hazard
C. A threat exploiting a vulnerability
D. Only emergency responders
Correct Answer: C. A threat exploiting a vulnerability
Rationale: Risk exists when a threat has the opportunity to
exploit a vulnerability and impact an asset.
6. Which of the following is an example of a cyber threat?
A. Flooding
B. Earthquake
C. Malware attack
D. Snowstorm
Correct Answer: C. Malware attack
, Rationale: Malware is malicious software designed to damage,
disrupt, or gain unauthorized access to computer systems.
7. Physical security primarily protects:
A. Software updates
B. Buildings, facilities, and personnel
C. Financial records only
D. Internet bandwidth
Correct Answer: B. Buildings, facilities, and personnel
Rationale: Physical security measures safeguard facilities,
equipment, and people from unauthorized access or damage.
8. Which organization typically owns much of a nation's
critical infrastructure?
A. Foreign governments
B. Private sector organizations
C. International charities
D. Universities only
Correct Answer: B. Private sector organizations
Rationale: In many countries, the majority of critical
infrastructure is privately owned, making public-private
partnerships essential.
EXAM QUESTIONS AND CORRECT ANSWERS
(VERIFIED ANSWERS) Q&A 2027|INSTANT
DOWNLOAD PDF
1. What is the primary purpose of Critical Infrastructure
Protection (CIP)?
A. To eliminate every possible hazard
B. To protect essential systems and assets from disruption
C. To increase government revenue
D. To reduce international trade
Correct Answer: B. To protect essential systems and assets from
disruption
Rationale: Critical Infrastructure Protection focuses on
safeguarding systems and assets whose disruption would
significantly affect national security, public health, safety, and
the economy.
2. Which of the following best describes critical
infrastructure?
A. Buildings older than 100 years
B. Assets and systems essential to national functions
,C. Residential neighborhoods only
D. Recreational facilities
Correct Answer: B. Assets and systems essential to national
functions
Rationale: Critical infrastructure includes physical and cyber
systems essential for society and government to function
effectively.
3. Which sector provides electricity to homes, businesses, and
industries?
A. Financial Services
B. Energy
C. Emergency Services
D. Transportation
Correct Answer: B. Energy
Rationale: The Energy Sector supplies electricity, oil, and
natural gas necessary for nearly every other infrastructure
sector.
4. A vulnerability is best defined as:
A. A confirmed attack
B. A weakness that can be exploited
,C. A recovery strategy
D. An emergency response plan
Correct Answer: B. A weakness that can be exploited
Rationale: Vulnerabilities are weaknesses in systems, facilities,
or procedures that threats can exploit.
5. Which element is necessary for risk to exist?
A. Only an asset
B. Only a hazard
C. A threat exploiting a vulnerability
D. Only emergency responders
Correct Answer: C. A threat exploiting a vulnerability
Rationale: Risk exists when a threat has the opportunity to
exploit a vulnerability and impact an asset.
6. Which of the following is an example of a cyber threat?
A. Flooding
B. Earthquake
C. Malware attack
D. Snowstorm
Correct Answer: C. Malware attack
, Rationale: Malware is malicious software designed to damage,
disrupt, or gain unauthorized access to computer systems.
7. Physical security primarily protects:
A. Software updates
B. Buildings, facilities, and personnel
C. Financial records only
D. Internet bandwidth
Correct Answer: B. Buildings, facilities, and personnel
Rationale: Physical security measures safeguard facilities,
equipment, and people from unauthorized access or damage.
8. Which organization typically owns much of a nation's
critical infrastructure?
A. Foreign governments
B. Private sector organizations
C. International charities
D. Universities only
Correct Answer: B. Private sector organizations
Rationale: In many countries, the majority of critical
infrastructure is privately owned, making public-private
partnerships essential.
