QUESTION 12
A decent visitor is roaming around without visitor’s ID. As an employee you should do the following, except:

QUESTION 13
————————-is an asset like other important business assets has value to an organization and consequently needs to be protected.

QUESTION 14
Which is the glue that ties the triad together

QUESTION 15
How is the purpose of information security policy best described?

QUESTION 16
Which of the following does an Asset Register contain? (Choose two)

QUESTION 17
In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?

QUESTION 18
As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

QUESTION 19
You are the lead auditor of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks.
What is this risk strategy called?

QUESTION 20
A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company’s information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?

QUESTION 21
A member of staff denies sending a particular message.
Which reliability aspect of information is in danger here?

QUESTION 22
What is the worst possible action that an employee may receive for sharing his or her password or access with others?

QUESTION 23
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.

QUESTION 24
An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.

QUESTION 25
Which measure is a preventive measure?

QUESTION 26
A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:

QUESTION 27
What type of compliancy standard, regulation or legislation provides a code of practice for information security?

QUESTION 28
You have a hard copy of a customer design document that you want to dispose off. What would you do

QUESTION 29
What is a repressive measure in case of a fire?

QUESTION 30
Implement plan on a test basis – this comes under which section of PDCA

QUESTION 31
All are prohibited in acceptable use of information assets, except:

QUESTION 32
In what part of the process to grant access to a system does the user present a token?

QUESTION 33
What is social engineering?

QUESTION 34
There is a network printer in the hallway of the company where you work. Many employees don’t pick up their printouts immediately and leave them on the printer.
What are the consequences of this to the reliability of the information?

QUESTION 35
Which is not a requirement of HR prior to hiring?

QUESTION 36
Integrity of data means