Free ISFS Braindumps Download Updated on Feb 10, 2023 with 80 Questions [Q27-Q51]

5/5 - (1 vote)

Free ISFS Braindumps Download Updated on Feb 10, 2023 with 80 Questions

EXIN ISFS Exam Practice Test Questions

NEW QUESTION 27
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password. What kind of threat is this?

Natural threat

Organizational threat

Social Engineering

NEW QUESTION 28
Your company has to ensure that it meets the requirements set down in personal data protection legislation.
What is the first thing you should do?

Make the employees responsible for submitting their personal data.

Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.

Appoint a person responsible for supporting managers in adhering to the policy.

Issue a ban on the provision of personal information.

NEW QUESTION 29
What is the definition of the Annual Loss Expectancy?

The Annual Loss Expectancy is the amount of damage that can occur as a result of an incident during the year.

The Annual Loss Expectancy is the size of the damage claims resulting from not having carried out risk analyses effectively.

The Annual Loss Expectancy is the average damage calculated by insurance companies for businesses in a country.

The Annual Loss Expectancy is the minimum amount for which an organization must insure itself.

NEW QUESTION 30
In most organizations, access to the computer or the network is granted only after the user has entered a correct username and password. This process consists of 3 steps: identification, authentication and authorization. What is the purpose of the second step, authentication?

In the second step, you make your identity known, which means you are given access to the system.

The authentication step checks the username against a list of users who have access to the system.

The system determines whether access may be granted by determining whether the token used is authentic.

During the authentication step, the system gives you the rights that you need, such as being able to read the data in the system.

NEW QUESTION 31
What is the most important reason for applying segregation of duties?

Segregation of duties makes it clear who is responsible for what.

Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.

Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.

NEW QUESTION 32
Some security measures are optional. Other security measures must always be implemented. Which measure(s) must always be implemented?

Clear Desk Policy

Physical security measures

Logical access security measures

Measures required by laws and regulations

NEW QUESTION 33
There is a network printer in the hallway of the company where you work. Many employees dont pick up their printouts immediately and leave them in the printer. What are the consequences of this to the reliability of the information?

The integrity of the information is no longer guaranteed.

The availability of the information is no longer guaranteed.

The confidentiality of the information is no longer guaranteed.

NEW QUESTION 34
Your company is in the news as a result of an unfortunate action by one of your employees. The phones are ringing off the hook with customers wanting to cancel their contracts. What do we call this type of damage?

Direct damage

Indirect damage

NEW QUESTION 35
What do employees need to know to report a security incident?

How to report an incident and to whom.

Whether the incident has occurred before and what was the resulting damage.

The measures that should have been taken to prevent the incident in the first place.

Who is responsible for the incident and whether it was intentional.

NEW QUESTION 36
We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information?

Availability, Information Value and Confidentiality

Availability, Integrity and Confidentiality

Availability, Integrity and Completeness

Timeliness, Accuracy and Completeness

NEW QUESTION 37
Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?

The costs for automating are easier to charge to the responsible departments.

A determination can be made as to which report should be printed first and which one can wait a little longer.

Everyone can easiliy see how sensitive the reports’ contents are by consulting the grading label.

Reports can be developed more easily and with fewer errors.

NEW QUESTION 38
Three characteristics determine the reliability of information. Which characteristics are these?

Availability, Integrity and Correctness

Availability, Integrity and Confidentiality

Availability, Nonrepudiation and Confidentiality

NEW QUESTION 39
You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?

Formulate a policy regarding mobile media (PDAs, laptops, smartphones, USB sticks)

Appoint security personnel

Encrypt the hard drives of laptops and USB sticks

Set up an access control policy

NEW QUESTION 40
You are a consultant and are regularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don’t want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?

Availability

Integrity

Confidentiality

NEW QUESTION 41
An airline company employee notices that she has access to one of the company’s applications that she has not used before. Is this an information security incident?

Yes

NEW QUESTION 42
Why is air-conditioning placed in the server room?

In the server room the air has to be cooled and the heat produced by the equipment has to be extracted.
The air in the room is also dehumidified and filtered.

When a company wishes to cool its offices, the server room is the best place. This way, no office space needs to be sacrificed for such a large piece of equipment.

It is not pleasant for the maintenance staff to have to work in a server room that is too warm.

Backup tapes are made from thin plastic which cannot withstand high temperatures. Therefore, if it gets too hot in a server room, they may get damaged.

NEW QUESTION 43
Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?

The recipient, Rachel

The person who drafted the insurance terms and conditions

The manager, Linda

The sender, Peter

NEW QUESTION 44
What is an example of a non-human threat to the physical environment?

Fraudulent transaction

Corrupted file

Storm

Virus

NEW QUESTION 45
What is the greatest risk for an organization if no information security policy has been defined?

If everyone works with the same account, it is impossible to find out who worked on what.

Information security activities are carried out by only a few people.

Too many measures are implemented.

It is not possible for an organization to implement information security in a consistent manner.

NEW QUESTION 46
Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization.
What occurs during the first step of this process: identification?

The first step consists of checking if the user is using the correct certificate.

The first step consists of checking if the user appears on the list of authorized users.

The first step consists of comparing the password with the registered password.

The first step consists of granting access to the information to which the user is authorized.

NEW QUESTION 47
What is an example of a physical security measure?

A code of conduct that requires staff to adhere to the clear desk policy, ensuring that confidential information is not left visibly on the desk at the end of the work day

An access control policy with passes that have to be worn visibly

The encryption of confidential information

Special fire extinguishers with inert gas, such as Argon

NEW QUESTION 48
What action is an unintentional human threat?

Arson

Theft of a laptop

Social engineering

Incorrect use of fire extinguishing equipment

NEW QUESTION 49
You have an office that designs corporate logos. You have been working on a draft for a large client. Just as you are going to press the <save> button, the screen goes blank. The hard disk is damaged and cannot be repaired. You find an early version of the design in your mail folder and you reproduce the draft for the customer. What is such a measure called?

Corrective measure

Preventive measure

Reductive measure

NEW QUESTION 50
What is the best description of a risk analysis?

A risk analysis is a method of mapping risks without looking at company processes.

A risk analysis helps to estimate the risks and develop the appropriate security measures.

A risk analysis calculates the exact financial consequences of damages.

NEW QUESTION 51
What is a human threat to the reliability of the information on your company website?

One of your employees commits an error in the price of a product on your website.

The computer hosting your website is overloaded and crashes. Your website is offline.

Because of a lack of maintenance, a fire hydrant springs a leak and floods the premises. Your employees cannot come into the office and therefore can not keep the information on the website up to date.