Released EXIN ISFS Updated Questions PDF [Q12-Q33]

12Apr 2022 by admin No Comments

4.7/5 - (3 votes)

Released EXIN ISFS Updated Questions PDF

ISFS Dumps and Practice Test (80 Exam Questions)

NEW QUESTION 12
Midwest Insurance controls access to its offices with a passkey system. We call this a preventive measure. What are some other measures?

Detective, repressive and corrective measures

Partial, adaptive and corrective measures

Repressive, adaptive and corrective measures

NEW QUESTION 13
You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?

Formulate a policy regarding mobile media (PDAs, laptops, smartphones, USB sticks)

Appoint security personnel

Encrypt the hard drives of laptops and USB sticks

Set up an access control policy

NEW QUESTION 14
You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?

Formulate a policy regarding mobile media (PDAs, laptops, smartphones, USB sticks)

Appoint security personnel

Encrypt the hard drives of laptops and USB sticks

Set up an access control policy

NEW QUESTION 15
What is the objective of classifying information?

Authorizing the use of an information system

Creating a label that indicates how confidential the information is

Defining different levels of sensitivity into which information may be arranged

Displaying on the document who is permitted access

NEW QUESTION 16
A well executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives. What is not one of the four main objectives of a risk analysis?

Identifying assets and their value

Determining the costs of threats

Establishing a balance between the costs of an incident and the costs of a security measure

Determining relevant vulnerabilities and threats

NEW QUESTION 17
There is a network printer in the hallway of the company where you work. Many employees dont pick up their printouts immediately and leave them in the printer. What are the consequences of this to the reliability of the information?

The integrity of the information is no longer guaranteed.

The availability of the information is no longer guaranteed.

The confidentiality of the information is no longer guaranteed.

NEW QUESTION 18
A couple of years ago you started your company which has now grown from 1 to 20 employees.
Your companys information is worth more and more and gone are the days when you could keep it all in hand yourself. You are aware that you have to take measures, but what should they be?
You hire a consultant who advises you to start with a qualitative risk analysis. What is a qualitative risk analysis?

This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.

This analysis is based on scenarios and situations and produces a subjective view of the possible threats.

NEW QUESTION 19
The consultants at Smith Consultants Inc. work on laptops that are protected by asymmetrical cryptography. To keep the management of the keys cheap, all consultants use the same key pair. What is the companys risk if they operate in this manner?

If the private key becomes known all laptops must be supplied with new keys.

If the Public Key Infrastructure (PKI) becomes known all laptops must be supplied with new keys.

If the public key becomes known all laptops must be supplied with new keys.

NEW QUESTION 20
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password. What kind of threat is this?

Natural threat

Organizational threat

Social Engineering

NEW QUESTION 21
You are the first to arrive at work in the morning and notice that the CD ROM on which you saved contracts yesterday has disappeared. You were the last to leave yesterday. When should you report this information security incident?

This incident should be reported immediately.

You should first investigate this incident yourself and try to limit the damage.

You should wait a few days before reporting this incident. The CD ROM can still reappear and, in that case, you will have made a fuss for nothing.

NEW QUESTION 22
Midwest Insurance controls access to its offices with a passkey system. We call this a preventive measure.
What are some other measures?

Detective, repressive and corrective measures

Partial, adaptive and corrective measures

Repressive, adaptive and corrective measures

NEW QUESTION 23
You own a small company in a remote industrial areA. Lately, the alarm regularly goes off in the middle of the night. It takes quite a bit of time to respond to it and it seems to be a false alarm every time. You decide to set up a hidden camerA. What is such a measure called?

Detective measure

Preventive measure

Repressive measure

NEW QUESTION 24
You own a small company in a remote industrial areA. Lately, the alarm regularly goes off in the middle of the night. It takes quite a bit of time to respond to it and it seems to be a false alarm every time. You decide to set up a hidden camerA. What is such a measure called?

Detective measure

Preventive measure

Repressive measure

NEW QUESTION 25
Which of the following measures is a preventive measure?

Installing a logging system that enables changes in a system to be recognized

Shutting down all internet traffic after a hacker has gained access to the company systems

Putting sensitive information in a safe

Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk

NEW QUESTION 26
You have just started working at a large organization. You have been asked to sign a code of conduct as well as a contract. What does the organization wish to achieve with this?

A code of conduct helps to prevent the misuse of IT facilities.

A code of conduct is a legal obligation that organizations have to meet.

A code of conduct prevents a virus outbreak.

A code of conduct gives staff guidance on how to report suspected misuses of IT facilities.

NEW QUESTION 27
In the organization where you work, information of a very sensitive nature is processed.
Management is legally obliged to implement the highest-level security measures. What is this kind of risk strategy called?

Risk bearing

Risk avoiding

Risk neutral

NEW QUESTION 28
What physical security measure is necessary to control access to company information?

Air-conditioning

Username and password

The use of break-resistant glass and doors with the right locks, frames and hinges

Prohibiting the use of USB sticks

NEW QUESTION 29
Susan sends an email to Paul. Who determines the meaning and the value of information in this email?

Paul, the recipient of the information.

Paul and Susan, the sender and the recipient of the information.

Susan, the sender of the information.

NEW QUESTION 30
You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?

A code of conduct specifies how employees are expected to conduct themselves and is the same for all companies.

A code of conduct is a standard part of a labor contract.

A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.

NEW QUESTION 31
We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information?

Availability, Information Value and Confidentiality

Availability, Integrity and Confidentiality

Availability, Integrity and Completeness

Timeliness, Accuracy and Completeness

NEW QUESTION 32
What is a human threat to the reliability of the information on your company website?

One of your employees commits an error in the price of a product on your website.

The computer hosting your website is overloaded and crashes. Your website is offline.

Because of a lack of maintenance, a fire hydrant springs a leak and floods the premises. Your employees cannot come into the office and therefore can not keep the information on the website up to date.

NEW QUESTION 33
Which one of the threats listed below can occur as a result of the absence of a physical measure?

A user can view the files belonging to another user.

A server shuts off because of overheating.

A confidential document is left in the printer.

Hackers can freely enter the computer network.

ISFS Exam Dumps Pass with Updated 2022 Certified Exam Questions: https://www.practicematerial.com/ISFS-exam-materials.html

Leave a Reply Cancel reply