IS policies Quiz

Froggy Jumps

Played 8

Create copy

About this activity

Test your knowledge of internal security policies.

Created by

Doris Kralj

Slovenia

Download the paper version to play

Top 10 results

#	Player	Accuracy	time
1	marjan October 23, 2025	% 96	03:40

Do you want to stay in the Top 10 of this game? Log in to identify yourself.

Make your own free game from our game creator

Compete against your friends to see who gets the best score in this game

Make challenge

Bill of Rights Game - The Constitutionalist

Doni The Don

United States

(90)

Test your knowledge on the Bill of Rights. A fun way to test your knowledge and focus on where you need to improve.
Ethos, Pathos, and Logos Quiz

Kristine Vester

United States

(131)

Test your knowledge of ethos, pathos, and logos with these 10 questions on examples of persuasive techniques.
Phlebotomy Order of Draw Quiz

Pamela Chapman

United States

(59)

Test your knowledge of the order of draw in Phlebotomy with these 10 questions!
The Integumentary System

Breanna Nesbitt

United States

(58)

Functions and Structures of the skin
pizza

Lorelay Tyana

Romania

(261)

joc despre pizza

		%
	Anonymous	%
		%
		%

Print your game

IS policies Quiz


Froggy Jumps IS policies QuizOnline version Test your knowledge of internal security policies. by Doris Kralj 1 What phase follows when a security incident is detected and confirmed? a Detect and identify b Response and remediation c Analysis and closure 2 Which data label is most restrictive and requires offline erasure after 30 days? a Confidential b Public c Internal 3 What must you use to access company resources while remote? a Cloudflare WARP b Public WiFi c Unsecured VPN 4 Which document practice helps prevent data leakage when sharing data? a Use Google Drive with expiration dates for temporary access b Share via public links without limits c Email large attachments to all recipients 5 What is the recommended action for patching critical vulnerabilities? a Install within 24 hours unless CAB changes b Patch only quarterly c Ignore if not convenient 6 Who has the final say on external communications about incidents? a Incident Manager b Board of Directors c CTO 7 What should you do with hardcopy documents containing confidential data? a Shred when no longer needed b Email to team as backup c Keep for 7 years 8 Which type of data requires the Confidential label automatically? a PII b Internal data only c Public data 9 Which tool is used to manage code and enforce access controls? a Public GitHub without access controls b Secure code repository (e.g., Gitlab) c Local only on PC 10 What must be done before decommissioning storage media? a Reformat once b Wipe data thoroughly or physical destruction c Leave as is for reuse 11 What is the first step of incident handling? a Restore services b Contain the incident c Detect and report 12 What is a security event? a A security incident b An event with a confirmed compromise of CIA c Any event that has a potential impact on CIA 13 What must be installed on all servers as part of patching policy? a Manual patching only b Disabled updates c Auto-install Security Patches 14 What is required for external access authentication? a Mandatory 2FA b Single password c No authentication 15 Which type of data label means publicly shareable data? a Confidential b Public c Internal 16 What should you do with development data before production? a Ensure it is removed or masked b Publish it for auditing c Move to production anyway 17 Which policy guides data encryption in transit? a Backup policy b Cryptographic Controls Policy c Password policy 18 What is the principle behind 'Need to know' access? a No access control b Access only to necessary systems/data c Access to all data 19 Which role is responsible for post-mortem actions in an incident? a CTO only b First responder c Incident manager 20 Where can you store hardcopies of confidential data? a In a locked, fireproof cabinet b Shared drives c Personal desks 21 What should be used to grant temporary data access? a Email attachment b Google Drive with expiration c Permanent share 22 Which data type requires strict privacy handling rules? a Confidential:PII b Internal c Public 23 Who approves external-facing communications about incidents? a Board of Directors b CTO alone c Security team only 24 What should be logged when a supplier is decommissioned? a Data wiping verification b New contract signed c Unchanged data 25 Which document outlines cloud service supplier rules? a Supplier selection guidelines b Supplier Security Policy c Code review guideline 26 What is an essential control for BYOD devices? a Ignore patches b Device management and patching c Disable management 27 Where would you find info on decomissioning? a Change management policy b Access control policy c Equipment management policy 28 What is required before sharing credentials externally? a NDA b Public posting c DPA

IS policies Quiz

Froggy Jumps

About this activity

Created by

Download the paper version to play

Top Games

Froggy Jumps

Bill of Rights Game - The Constitutionalist

Froggy Jumps

Ethos, Pathos, and Logos Quiz

Froggy Jumps

Phlebotomy Order of Draw Quiz

Froggy Jumps

The Integumentary System

Froggy Jumps

pizza

Froggy Jumps

IS policies QuizOnline version

by Doris Kralj

What phase follows when a security incident is detected and confirmed?

Which data label is most restrictive and requires offline erasure after 30 days?

What must you use to access company resources while remote?

Which document practice helps prevent data leakage when sharing data?

What is the recommended action for patching critical vulnerabilities?

Who has the final say on external communications about incidents?

What should you do with hardcopy documents containing confidential data?

Which type of data requires the Confidential label automatically?

Which tool is used to manage code and enforce access controls?

What must be done before decommissioning storage media?

What is the first step of incident handling?

What is a security event?

What must be installed on all servers as part of patching policy?

What is required for external access authentication?

Which type of data label means publicly shareable data?

What should you do with development data before production?

Which policy guides data encryption in transit?

What is the principle behind 'Need to know' access?

Which role is responsible for post-mortem actions in an incident?

Where can you store hardcopies of confidential data?

What should be used to grant temporary data access?

Which data type requires strict privacy handling rules?

Who approves external-facing communications about incidents?

What should be logged when a supplier is decommissioned?

Which document outlines cloud service supplier rules?

What is an essential control for BYOD devices?

Where would you find info on decomissioning?

What is required before sharing credentials externally?