Information Security Final Exam Study Guide Questions with 100%
Correct Answers | Verified | Updated (Actual Exam) 2025\2026
During the early years of computing, the primary threats to security were physical theft of
equipment, espionage against the products of the systems, and sabotage. - answer☑️✔️..True
Network security focuses on the protection of the details of a particular operation or series of
activities. - answer☑️✔️..False
The value of information comes from the characteristics it possesses. - answer☑️✔️..True
When a computer is the subject of an attack, it is the entity being attacked. -
answer☑️✔️..False
An e-mail virus involves sending an e-mail message with a modified field. - answer☑️✔️..False
The possession of information is the quality or state of having value for some purpose or end. -
answer☑️✔️..False
A breach of possession always results in a breach of confidentiality. - answer☑️✔️..False
Hardware is often the most valuable asset possessed by an organization and it is the main target
of intentional attacks. - answer☑️✔️..False
Information security can be an absolute. - answer☑️✔️..False
, To achieve balance — that is, to operate an information system that satisfies the user and the
security professional — the security level must allow reasonable access, yet protect against
threats. - answer☑️✔️..True
The bottom-up approach to information security has a higher probability of success than the
top-down approach. - answer☑️✔️..False
Using a methodology increases the probability of success. - answer☑️✔️..True
The implementation phase is the longest and most expensive phase of the systems
development life cycle (SDLC). - answer☑️✔️..False
The investigation phase of the SecSDLC begins with a directive from upper management. -
answer☑️✔️..True
The physical design is the blueprint for the desired solution. - answer☑️✔️..False
Many states have implemented legislation making certain computer-related activities illegal. -
answer☑️✔️..True
Applications systems developed within the framework of the traditional SDLC are designed to
anticipate a software attack that requires some degree of application reconstruction. -
answer☑️✔️..False
A champion is a project manager, who may be a departmental line manager or staff unit
manager, and has expertise in project management and information security technical
requirements. - answer☑️✔️..False
Correct Answers | Verified | Updated (Actual Exam) 2025\2026
During the early years of computing, the primary threats to security were physical theft of
equipment, espionage against the products of the systems, and sabotage. - answer☑️✔️..True
Network security focuses on the protection of the details of a particular operation or series of
activities. - answer☑️✔️..False
The value of information comes from the characteristics it possesses. - answer☑️✔️..True
When a computer is the subject of an attack, it is the entity being attacked. -
answer☑️✔️..False
An e-mail virus involves sending an e-mail message with a modified field. - answer☑️✔️..False
The possession of information is the quality or state of having value for some purpose or end. -
answer☑️✔️..False
A breach of possession always results in a breach of confidentiality. - answer☑️✔️..False
Hardware is often the most valuable asset possessed by an organization and it is the main target
of intentional attacks. - answer☑️✔️..False
Information security can be an absolute. - answer☑️✔️..False
, To achieve balance — that is, to operate an information system that satisfies the user and the
security professional — the security level must allow reasonable access, yet protect against
threats. - answer☑️✔️..True
The bottom-up approach to information security has a higher probability of success than the
top-down approach. - answer☑️✔️..False
Using a methodology increases the probability of success. - answer☑️✔️..True
The implementation phase is the longest and most expensive phase of the systems
development life cycle (SDLC). - answer☑️✔️..False
The investigation phase of the SecSDLC begins with a directive from upper management. -
answer☑️✔️..True
The physical design is the blueprint for the desired solution. - answer☑️✔️..False
Many states have implemented legislation making certain computer-related activities illegal. -
answer☑️✔️..True
Applications systems developed within the framework of the traditional SDLC are designed to
anticipate a software attack that requires some degree of application reconstruction. -
answer☑️✔️..False
A champion is a project manager, who may be a departmental line manager or staff unit
manager, and has expertise in project management and information security technical
requirements. - answer☑️✔️..False
