CS 271 Test 1 Questions with 100% Verified Correct Answers 2025/2026

CS 271 Test 1 Questions with 100% Verified Correct Answers 2025/2026 Which of the following is NOT a primary goal of information security management? - Correct Answer Performance What is one important purpose of having an Information Security Policy? - Correct Answer To establish a baseline for security controls Which of the following is an essential component of a risk assessment process? - Correct Answer Vulnerability assessment Which of the following is an example of a technical control in information security? - Correct Answer Firewall configuration Which of the following is NOT a typical phase in the strategic planning process for information security? - Correct Answer Incident response What is an important goal of a security awareness training program? - Correct Answer To educate employees about security risks and best practices In the context of strategic planning, what is the role of a Chief Information Security Officer (CISO)? - Correct Answer Providing executive leadership for security Which of the following regulatory compliance standards focuses on the protection of personal health data? - Correct Answer HIPAA Which of the following is a critical component of strategic planning for information security? - Correct Answer Aligning security with business goals What is one objective of Governance, Risk Management, and Compliance (GRC) within an organization? - C