Download AppGovt. JobsFree G.K. & Current AffairsScholarshipBlog
Free PracticeContact
📚 Exam by Category
▾
Objective Questions

Latest Central Bank of India SO Information Security Exam Question (Objective Questions), MCQ in English

Subjects : Specific Subject (Information Security, Cyber Security & IT Governance, Risk), Reasoning, Banking, Present Economic Scenario & General Awareness

Question Bank Central Bank of India SO (Information Security) Exam - English
Back to Exam

Specific Subject (Information Security, Cyber Security & IT Governance, Risk)

Question 1Single Answer
Information Security Governance primarily ensures?
  1. A
    Alignment of security with business objectives
  2. B
    Compliance with legal regulations only
  3. C
    Implementation of firewalls only
  4. D
    Use of antivirus software
Question 2Single Answer
ISO/IEC 27001 is mainly focused on?
  1. A
    Network security
  2. B
    Information Security Management System (ISMS)
  3. C
    Disaster Recovery Planning
  4. D
    Physical security of premises
Question 3Single Answer
The purpose of a risk assessment is to?
  1. A
    Install software updates
  2. B
    Create strong passwords
  3. C
    Identify, analyze, and evaluate risks
  4. D
    Monitor network traffic
Question 4Single Answer
In risk treatment, ‘Mitigate’ means?
  1. A
    Reduce the impact or likelihood of risk
  2. B
    Ignore the risk
  3. C
    Transfer risk to another party
  4. D
    Accept the risk without action
Question 5Single Answer
NIST Cybersecurity Framework is primarily used for?
  1. A
    Physical security auditing
  2. B
    Providing guidelines for managing cybersecurity risk
  3. C
    Installing firewalls
  4. D
    Database management
Question 6Single Answer
COBIT framework is mainly used for?
  1. A
    Network penetration testing
  2. B
    Governance and management of enterprise IT
  3. C
    Endpoint protection
  4. D
    Disaster recovery only
Question 7Single Answer
In ISO/IEC 27001, Statement of Applicability (SoA) is used to?
  1. A
    List applicable controls and their implementation status
  2. B
    Monitor network traffic
  3. C
    Backup data
  4. D
    Identify threats
Question 8Single Answer
Asset classification in ISMS involves?
  1. A
    Categorizing assets based on value, sensitivity, and criticality
  2. B
    Encrypting all data
  3. C
    Installing antivirus software
  4. D
    Hiring security staff
Question 9Single Answer
Threat modeling is used to?
  1. A
    Identify potential threats to assets and their impact
  2. B
    Detect malware
  3. C
    Create antivirus signatures
  4. D
    Encrypt network traffic
Question 10Single Answer
Vulnerability assessment helps in?
  1. A
    Identifying weaknesses in systems and processes
  2. B
    Installing security patches automatically
  3. C
    Encrypting emails
  4. D
    Conducting physical security audits only
Question 11Single Answer
Accepting a risk in risk treatment means?
  1. A
    Ignoring risk entirely
  2. B
    Transferring the risk to insurance
  3. C
    Acknowledging the risk and taking no immediate action
  4. D
    Eliminating the risk
Question 12Single Answer
Transferring risk can be achieved by?
  1. A
    Implementing strong encryption
  2. B
    Using multi-factor authentication
  3. C
    Conducting vulnerability scans
  4. D
    Buying insurance or outsourcing
Question 13Single Answer
RTO in Business Continuity Planning stands for?
  1. A
    Risk Transfer Option
  2. B
    Recovery Time Objective
  3. C
    Remote Technology Operations
  4. D
    Real-Time Optimization
Question 14Single Answer
RPO in Disaster Recovery means?
  1. A
    Recovery Point Objective
  2. B
    Risk Prevention Option
  3. C
    Remote Process Operation
  4. D
    Real-time Processing Output
Question 15Single Answer
BCP testing is essential to?
  1. A
    Perform network upgrades
  2. B
    Install antivirus software
  3. C
    Monitor employee activities
  4. D
    Ensure business operations can continue during a disruption
Question 16Single Answer
Impact analysis in banking helps to?
  1. A
    Implement firewall rules
  2. B
    Encrypt all customer data
  3. C
    Measure financial and operational impact of IT disruptions
  4. D
    Conduct phishing tests
Question 17Single Answer
A Cyber Security Policy should primarily include?
  1. A
    Only password rules
  2. B
    Server room access logs only
  3. C
    Hardware installation instructions
  4. D
    Guidelines for protecting information assets, roles, and responsibilities
Question 18Single Answer
Information Security Policy (ISP) is needed to?
  1. A
    Control antivirus licenses
  2. B
    Ensure compliance and provide management direction on security
  3. C
    Conduct network scans
  4. D
    Train staff on software usage
Question 19Single Answer
ISO/IEC 27001 requires which of the following for continual improvement?
  1. A
    Plan-Do-Check-Act (PDCA) cycle
  2. B
    Annual software updates
  3. C
    Firewall configuration
  4. D
    Malware scanning only
Question 20Single Answer
In risk assessment, likelihood refers to?
  1. A
    The impact of risk
  2. B
    Probability of a threat exploiting a vulnerability
  3. C
    Cost of mitigation
  4. D
    Insurance coverage
Question 21Single Answer
A risk register is used to?
  1. A
    Track employee attendance
  2. B
    Store backup data
  3. C
    List identified risks, their assessment, and mitigation plans
  4. D
    Monitor network bandwidth
Question 22Single Answer
Which of the following is an example of risk mitigation?
  1. A
    Purchasing insurance
  2. B
    Accepting all operational risks
  3. C
    Ignoring low-risk events
  4. D
    Installing intrusion detection systems
Question 23Single Answer
ISMS scope document defines?
  1. A
    Database architecture
  2. B
    Firewall policies
  3. C
    Boundaries and applicability of the ISMS within the organization
  4. D
    Employee job descriptions
Question 24Single Answer
The “Identify” function in NIST Cybersecurity Framework includes?
  1. A
    Asset management, governance, risk assessment
  2. B
    Detecting malware
  3. C
    Installing antivirus
  4. D
    Data encryption
Question 25Single Answer
Which control type in ISO/IEC 27001 is preventive?
  1. A
    Antivirus monitoring
  2. B
    Access control policies
  3. C
    Logging of incidents
  4. D
    Periodic audits
Question 26Single Answer
Recovery strategies in BCP include?
  1. A
    Firewall rules
  2. B
    Antivirus updates
  3. C
    Phishing awareness
  4. D
    Cold site, hot site, and warm site
Question 27Single Answer
Asset inventory in ISMS includes?
  1. A
    Only servers and routers
  2. B
    Only critical applications
  3. C
    All information assets including data, software, hardware, and personnel
  4. D
    Only sensitive data
Question 28Single Answer
Security governance ensures?
  1. A
    Employee password resets
  2. B
    Installation of antivirus only
  3. C
    Firewall configuration
  4. D
    IT security aligns with business goals and regulations
Question 29Single Answer
COBIT domains include?
  1. A
    ISO, NIST, GDPR
  2. B
    Firewall, IDS, IPS
  3. C
    CIA, AAA, PKI
  4. D
    EDM, APO, BAI, DSS, MEA
Question 30Single Answer
In ISO/IEC 27001, “Annex A” contains?
  1. A
    Network topology
  2. B
    List of controls for implementation
  3. C
    Software versions
  4. D
    Disaster recovery checklist
Question 31Single Answer
Threat in cybersecurity refers to?
  1. A
    Access logs
  2. B
    Firewall rules
  3. C
    Security audit
  4. D
    A potential cause of an unwanted incident
Question 32Single Answer
Vulnerability in ISMS context means?
  1. A
    Network traffic
  2. B
    Risk acceptance
  3. C
    Weakness in assets that could be exploited by threats
  4. D
    Security awareness training
Question 33Single Answer
Risk treatment plans generally include which options?
  1. A
    Audit, Test, Train
  2. B
    Encrypt, Backup, Monitor
  3. C
    Firewall, IDS, Antivirus
  4. D
    Avoid, Mitigate, Transfer, Accept
Question 34Single Answer
Business Impact Analysis (BIA) helps in?
  1. A
    Determining critical business functions and their dependencies
  2. B
    Encrypting data only
  3. C
    Installing antivirus
  4. D
    Configuring firewall rules
Question 35Single Answer
In ISO/IEC 27001, top management is responsible for?
  1. A
    Updating software patches
  2. B
    Installing antivirus
  3. C
    Leadership, commitment, and provision of resources for ISMS
  4. D
    Monitoring network traffic
Question 36Single Answer
Which of the following is a preventive control?
  1. A
    Risk acceptance
  2. B
    Logging incidents
  3. C
    Backup verification
  4. D
    Security awareness training
Question 37Single Answer
NIST CSF’s “Detect” function includes?
  1. A
    Data backup
  2. B
    Installing antivirus software
  3. C
    Continuous monitoring and detection of anomalies
  4. D
    Firewall configuration
Question 38Single Answer
ISO/IEC 27001 requires which document for risk management?
  1. A
    Asset encryption plan
  2. B
    Firewall rulebook
  3. C
    Risk assessment report and risk treatment plan
  4. D
    Employee attendance sheet
Question 39Single Answer
Security metrics are used to?
  1. A
    Track employee logins
  2. B
    Configure antivirus updates
  3. C
    Monitor network traffic only
  4. D
    Measure the effectiveness of security controls and policies
Question 40Single Answer
In BCP, a warm site is?
  1. A
    Fully equipped site ready for immediate use
  2. B
    Backup tapes only
  3. C
    Site with partial infrastructure that can be made operational quickly
  4. D
    Offsite storage of data only
Question 41Single Answer
Cybersecurity framework helps organizations to?
  1. A
    Identify, protect, detect, respond, and recover from cyber threats
  2. B
    Install antivirus
  3. C
    Encrypt emails
  4. D
    Configure VPN
Question 42Single Answer
Risk appetite is defined as?
  1. A
    RTO of critical systems
  2. B
    Likelihood of threat occurrence
  3. C
    Value of IT assets
  4. D
    Amount of risk an organization is willing to accept
Question 43Single Answer
Policies, standards, and procedures in ISMS are examples of?
  1. A
    Technical controls
  2. B
    Administrative controls
  3. C
    Physical controls
  4. D
    Network controls
Question 44Single Answer
Access control policies aim to?
  1. A
    Encrypt files
  2. B
    Restrict unauthorized access to information assets
  3. C
    Monitor network traffic
  4. D
    Conduct audits
Question 45Single Answer
Incident response plan helps to?
  1. A
    Manage and mitigate impact of security incidents
  2. B
    Backup data
  3. C
    Update software patches
  4. D
    Encrypt emails
Question 46Single Answer
Business Continuity Plan (BCP) focuses on?
  1. A
    Installing antivirus
  2. B
    Encrypting databases
  3. C
    Ensuring continuous business operations during disruption
  4. D
    Monitoring network traffic
Question 47Single Answer
Disaster Recovery Plan (DRP) primarily focuses on?
  1. A
    Risk assessment
  2. B
    Asset classification
  3. C
    Recovery of IT systems and data after disruption
  4. D
    Firewall configuration
Question 48Single Answer
Asset criticality is determined based on?
  1. A
    Impact on business operations if compromised
  2. B
    Size of storage
  3. C
    Number of users
  4. D
    Hardware vendor
Question 49Single Answer
Security awareness training aims to?
  1. A
    Install firewalls
  2. B
    Encrypt all emails
  3. C
    Educate employees on security threats and best practices
  4. D
    Monitor logs
Question 50Single Answer
Risk treatment “Avoid” means?
  1. A
    Accept the risk
  2. B
    Ignore risk
  3. C
    Transfer to insurance
  4. D
    Change business process to eliminate the risk
Important Questions Package

Central Bank of India SO Information Security Exam Online Question Bank Package

Buy Central Bank of India SO Information Security Important Questions, MCQ, question answer in Hindi & English. It will help you to score high marks in Central Bank of India SO Information Security question bank 2026 in Online, PDF & Print study material.

+ Free Monthly Current Affairs, GK & more PDF Download
Sr.Package NameAmount
1.Central Bank of India SO (Information Security) Exam - Hindi
Description : 1000 Question with Answer
₹101 [₹500]
2.Central Bank of India SO (Information Security) Exam - Hindi
Description : 1500 Question with Answer
₹131 [₹500]
3.Central Bank of India SO (Information Security) Exam - English
Description : 1000 Question with Answer
₹101 [₹500]
4.Central Bank of India SO (Information Security) Exam - English
Description : 1500 Question with Answer
₹131 [₹500]
5.Central Bank of India SO (Information Security) Exam - Hindi
Description : 1000 Question & Answer Download in PDF (Send by Email)
₹151 [₹450]
6.Central Bank of India SO (Information Security) Exam - English
Description : 1000 Question & Answer Download in PDF (Send by Email)
₹151 [₹450]
7.Central Bank of India SO (Information Security) Exam Question Bank Book - Hindi
Description : 1000 Question with Answer (Printed Material)
₹450 [₹800]
8.Central Bank of India SO (Information Security) Exam Question Bank Book - English
Description : 1000 Question with Answer (Printed Material)
₹390 [₹600]
Back to Exam