Download Free EXIN ISFS Exam Questions & Answer
Online VALID ISFS Exam Dumps File Instantly
Being a globally recognized certification, the EXIN ISFS Exam focuses on providing candidates with a strong understanding of the fundamental principles of information security. ISFS exam syllabus is designed to cover a broad range of topics, including the basic concepts of information security, security management, ISO/IEC 27001 framework and its implementation, risk management principles and practices, business-IT alignment, and information security incidents management.
NEW QUESTION # 46
What is an example of a good physical security measure?
- A. All employees and visitors carry an access pass.
- B. Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.
- C. Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.
Answer: A
NEW QUESTION # 47
Your company is in the news as a result of an unfortunate action by one of your employees. The phones are ringing off the hook with customers wanting to cancel their contracts. What do we call this type of damage?
- A. Indirect damage
- B. Direct damage
Answer: A
NEW QUESTION # 48
What sort of security does a Public Key Infrastructure (PKI) offer?
- A. Having a PKI shows customers that a web-based business is secure.
- B. A PKI ensures that backups of company data are made on a regular basis.
- C. It provides digital certificates which can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent.
- D. By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.
Answer: D
NEW QUESTION # 49
You have a small office in an industrial areA. You would like to analyze the risks your company faces. The office is in a pretty remote location; therefore, the possibility of arson is not entirely out of the question. What is the relationship between the threat of fire and the risk of fire?
- A. The threat of fire is the risk of fire multiplied by the chance that the fire may occur and the consequences thereof.
- B. The risk of fire is the threat of fire multiplied by the chance that the fire may occur and the consequences thereof.
Answer: B
NEW QUESTION # 50
A Dutch company requests to be listed on the American Stock Exchange. Which legislation within the scope of information security is relevant in this case?
- A. Dutch Tax Law
- B. Public Records Act
- C. Sarbanes-Oxley Act
- D. Security regulations for the Dutch government
Answer: C
NEW QUESTION # 51
You own a small company in a remote industrial areA. Lately, the alarm regularly goes off in the middle of the night. It takes quite a bit of time to respond to it and it seems to be a false alarm every time. You decide to set up a hidden camerA. What is such a measure called?
- A. Preventive measure
- B. Detective measure
- C. Repressive measure
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION # 52
In the organization where you work, information of a very sensitive nature is processed. Management is legally obliged to implement the highest-level security measures. What is this kind of risk strategy called?
- A. Risk bearing
- B. Risk avoiding
- C. Risk neutral
Answer: B
NEW QUESTION # 53
What is the greatest risk for an organization if no information security policy has been defined?
- A. Too many measures are implemented.
- B. If everyone works with the same account, it is impossible to find out who worked on what.
- C. Information security activities are carried out by only a few people.
- D. It is not possible for an organization to implement information security in a consistent manner.
Answer: D
NEW QUESTION # 54
What is the definition of the Annual Loss Expectancy?
- A. The Annual Loss Expectancy is the minimum amount for which an organization must insure itself.
- B. The Annual Loss Expectancy is the size of the damage claims resulting from not having carried out risk analyses effectively.
- C. The Annual Loss Expectancy is the average damage calculated by insurance companies for businesses in a country.
- D. The Annual Loss Expectancy is the amount of damage that can occur as a result of an incident during the year.
Answer: D
NEW QUESTION # 55
We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information?
- A. Timeliness, Accuracy and Completeness
- B. Availability, Integrity and Confidentiality
- C. Availability, Integrity and Completeness
- D. Availability, Information Value and Confidentiality
Answer: B
NEW QUESTION # 56
An airline company employee notices that she has access to one of the company's applications that she has not used before. Is this an information security incident?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation
NEW QUESTION # 57
Some security measures are optional. Other security measures must always be implemented. Which measure(s) must always be implemented?
- A. Physical security measures
- B. Logical access security measures
- C. Measures required by laws and regulations
- D. Clear Desk Policy
Answer: C
NEW QUESTION # 58
Susan sends an email to Paul. Who determines the meaning and the value of information in this email?
- A. Paul and Susan, the sender and the recipient of the information.
- B. Susan, the sender of the information.
- C. Paul, the recipient of the information.
Answer: C
NEW QUESTION # 59
The consultants at Smith Consultants Inc. work on laptops that are protected by asymmetrical cryptography. To keep the management of the keys cheap, all consultants use the same key pair. What is the companys risk if they operate in this manner?
- A. If the private key becomes known all laptops must be supplied with new keys.
- B. If the public key becomes known all laptops must be supplied with new keys.
- C. If the Public Key Infrastructure (PKI) becomes known all laptops must be supplied with new keys.
Answer: A
NEW QUESTION # 60
You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of the threats and risks. What is the relation between a threat, risk and risk analysis?
- A. A risk analysis identifies threats from the known risks.
- B. A risk analysis is used to remove the risk of a threat.
- C. Risk analyses help to find a balance between threats and risks.
- D. A risk analysis is used to clarify which threats are relevant and what risks they involve.
Answer: D
NEW QUESTION # 61
Three characteristics determine the reliability of information. Which characteristics are these?
- A. Availability, Integrity and Confidentiality
- B. Availability, Integrity and Correctness
- C. Availability, Nonrepudiation and Confidentiality
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION # 62
An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of the clients is earlier than the start date. What type of measure could prevent this error?
- A. Availability measure
- B. Organizational measure
- C. Technical measure
- D. Integrity measure
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION # 63
What is the most important reason for applying segregation of duties?
- A. Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.
- B. Segregation of duties makes it clear who is responsible for what.
- C. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.
- D. Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
Answer: C
NEW QUESTION # 64
The act of taking organizational security measures is inextricably linked with all other measures that have to be taken. What is the name of the system that guarantees the coherence of information security in the organization?
- A. Information Security Management System (ISMS)
- B. Rootkit
- C. Security regulations for special information for the government
Answer: A
NEW QUESTION # 65
......
EXIN ISFS (Information Security Foundation based on ISO/IEC 27001) Exam is a certification program designed for professionals and students who want to gain a comprehensive understanding of information security management systems. ISFS exam is based on the ISO/IEC 27001:2013 standard and covers a range of topics, including security policies, risk management, security controls, and the implementation of an information security management system.
ISFS Exam Dumps For Certification Exam Preparation: https://testking.practicematerial.com/ISFS-questions-answers.html
