Test Your NISM-IFSCA-02A: Cyber Security and Cyber Resilience in the GIFT IFSC (Basic) Mock Test Knowledge in 5 Minutes

1. Which property of the CIA triad ensures that data stays accurate, complete, and unaltered?

A. Confidentiality B. Availability C. Integrity D. Authentication

2. What is residual risk?

A. The level of risk the organisation is willing to accept in pursuit of its objectives B. The risk that remains after controls are applied, together with any risk, that management has accepted C. The combined view of a risk across functions and locations D. The level of risk that exists before any controls are applied

3. Buying insurance to pass a risk to another party is an example of which risk response?

A. Mitigate B. Accept C. Transfer or share D. Avoid

4. Which of the following cyber attacks involves secretly intercepting or altering communications between two parties, thereby threatening both confidentiality and integrity?

A. Man-in-the-Middle (MitM) attack B. Credential stuffing attack C. Phishing and social engineering D. Denial-of-Service (DoS) attack

5. Which function was newly introduced in NIST CSF 2.0 to cover strategy, policy, oversight, and accountability?

A. Protect B. Recover C. Identify D. Govern

6. What is the primary purpose of a cyber security governance structure?

A. To allow the IT team to independently manage all cyber security decisions. B. To replace risk management with technical security tools. C. To define authority, accountability, oversight, reporting, and escalation for cyber security matters. D. To ensure that only external auditors review cyber security risks.

7. Why should cyber risk be considered part of overall business risk?

A. Cyber risk is limited to firewalls, antivirus, and IT infrastructure. B. Cyber risk is only relevant during annual audits. C. Cyber incidents can affect operations, reputation, legal obligations, financial performance, and regulatory compliance. D. Cyber security risks cannot be quantified or reported to management.

8. Which of the following best describes risk appetite?

A. The technical severity assigned to a vulnerability scan finding. B. The amount and type of risk an organisation is willing to accept in pursuit of its objectives. C. The total number of risks identified during a risk assessment. D. The cost of implementing all security controls.

9. In the three lines of defence model, which function provides independent assurance?

A. Process owners B. Business and operations teams C. IT operations team D. Internal audit

10. What does design effectiveness of a control assess?

A. Whether the control is appropriately designed to prevent, detect, or reduce the identified risk to an acceptable level. B. Whether the control is performed by the IT department only. C. Whether the control has been implemented for the longest period of time. D. Whether the control is documented in the policy manual.