CSIS 170 Exam Prep Question and
answers already passed 2026/2027
The Analysis phase of the SDLC examines the event or plan that initiates the process and specifies the
objectives, constraints, and scope of the project. _________________________
Selected Answer:
True
False - correct answer ✔False
A server would experience a(n) __________ attack when a hacker compromises it to acquire information
via a remote location using a network connection.
a. hardware
b. indirect
c. direct
d. software - correct answer ✔c. direct
During the __________ phase, specific technologies are selected to support the alternatives identified
and evaluated in the prior phases.
a. investigation
b. analysis
c. physical design
d. implementation - correct answer ✔Physical design
Organizations are moving toward more __________-focused development approaches, seeking to
improve not only the functionality of the systems they have in place, but consumer confidence in their
product.
a. security
,b. reliability
c. accessibility
d. availability - correct answer ✔Security
Which of the following phases is often considered the longest and most expensive phase of the systems
development life cycle?
a. maintenance and change
b. implementation
c. investigation
d. logical design - correct answer ✔maintenance and change
The bottom-up approach to information security has a higher probability of success than the top-down
approach.
True
False - correct answer ✔False
__________ of information is the quality or state of being genuine or original.
a. Authorization
b. Spoofing
c. Authenticity
d. Confidentiality - correct answer ✔authenticity
MULTICS stands for Multiple Information and Computing Service. _________________________
True
False - correct answer ✔False
, The value of information comes from the characteristics it possesses.
True
False - correct answer ✔True
Hardware is often the most valuable asset possessed by an organization, and it is the main target of
intentional attacks.
True
False - correct answer ✔False
Information has redundancy when it is free from mistakes or errors and it has the value that the end
user expects. _________________________
True
False - correct answer ✔False
Network security focuses on the protection of physical items, objects, or areas from unauthorized access
and misuse.
True
False - correct answer ✔False
__________ has become a widely accepted evaluation standard for training and education related to
the security of information systems.
a. ISO 17788
b. NSTISSI No. 4011
c. NIST SP 800-12
d. IEEE 802.11(g) - correct answer ✔NSTISSI No. 4011
answers already passed 2026/2027
The Analysis phase of the SDLC examines the event or plan that initiates the process and specifies the
objectives, constraints, and scope of the project. _________________________
Selected Answer:
True
False - correct answer ✔False
A server would experience a(n) __________ attack when a hacker compromises it to acquire information
via a remote location using a network connection.
a. hardware
b. indirect
c. direct
d. software - correct answer ✔c. direct
During the __________ phase, specific technologies are selected to support the alternatives identified
and evaluated in the prior phases.
a. investigation
b. analysis
c. physical design
d. implementation - correct answer ✔Physical design
Organizations are moving toward more __________-focused development approaches, seeking to
improve not only the functionality of the systems they have in place, but consumer confidence in their
product.
a. security
,b. reliability
c. accessibility
d. availability - correct answer ✔Security
Which of the following phases is often considered the longest and most expensive phase of the systems
development life cycle?
a. maintenance and change
b. implementation
c. investigation
d. logical design - correct answer ✔maintenance and change
The bottom-up approach to information security has a higher probability of success than the top-down
approach.
True
False - correct answer ✔False
__________ of information is the quality or state of being genuine or original.
a. Authorization
b. Spoofing
c. Authenticity
d. Confidentiality - correct answer ✔authenticity
MULTICS stands for Multiple Information and Computing Service. _________________________
True
False - correct answer ✔False
, The value of information comes from the characteristics it possesses.
True
False - correct answer ✔True
Hardware is often the most valuable asset possessed by an organization, and it is the main target of
intentional attacks.
True
False - correct answer ✔False
Information has redundancy when it is free from mistakes or errors and it has the value that the end
user expects. _________________________
True
False - correct answer ✔False
Network security focuses on the protection of physical items, objects, or areas from unauthorized access
and misuse.
True
False - correct answer ✔False
__________ has become a widely accepted evaluation standard for training and education related to
the security of information systems.
a. ISO 17788
b. NSTISSI No. 4011
c. NIST SP 800-12
d. IEEE 802.11(g) - correct answer ✔NSTISSI No. 4011
