ISFS Exam Questions - Online Test

ISFS Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Exam Code: ISFS (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Information Security Foundation based on ISO/IEC 27002
Certification Provider: EXIN,Inc
Free Today! Guaranteed Training- Pass ISFS Exam.

New EXIN,Inc ISFS Exam Dumps Collection (Question 1 - Question 10)

Question No: 1

You are the owner of SpeeDelivery courier service. Because of your companys growth you have to think about information security. You know that you have to start creating a policy. Why is it so important to have an information security policy as a starting point?

A. The information security policy gives direction to the information security efforts.

B. The information security policy supplies instructions for the daily practice of information security.

C. The information security policy establishes which devices will be protected.

D. The information security policy establishes who is responsible for which area of information security.

Answer: A

Question No: 2

A Dutch company requests to be listed on the American Stock Exchange. Which legislation within

the scope of information security is relevant in this case?

A. Public Records Act

B. Dutch Tax Law

C. Sarbanes-Oxley Act

D. Security regulations for the Dutch government

Answer: C

Question No: 3

You own a small company in a remote industrial areA. Lately, the alarm regularly goes off in the middle of the night. It takes quite a bit of time to respond to it and it seems to be a false alarm every time. You decide to set up a hidden camerA. What is such a measure called?

A. Detective measure

B. Preventive measure

C. Repressive measure

Answer: A

Question No: 4

The consultants at Smith Consultants Inc. work on laptops that are protected by asymmetrical cryptography. To keep the management of the keys cheap, all consultants use the same key pair.

What is the companys risk if they operate in this manner?

A. If the private key becomes known all laptops must be supplied with new keys.

B. If the Public Key Infrastructure (PKI) becomes known all laptops must be supplied with new keys.

C. If the public key becomes known all laptops must be supplied with new keys.

Answer: A

Question No: 5

The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?

A. Information Security Management System

B. The use of tokens to gain access to information systems

C. Validation of input and output data in applications

D. Encryption of information

Answer: A

Question No: 6

Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do?

A. Make the employees responsible for submitting their personal data.

B. Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.

C. Appoint a person responsible for supporting managers in adhering to the policy.

D. Issue a ban on the provision of personal information.

Answer: B

Question No: 7

You are the owner of the courier company SpeeDelivery. You employ a few people who, while waiting to make a delivery, can carry out other tasks. You notice, however, that they use this time

to send and read their private mail and surf the Internet. In legal terms, in which way can the use

of the Internet and e-mail facilities be best regulated?

A. Installing an application that makes certain websites no longer accessible and that filters attachments in e-mails

B. Drafting a code of conduct for the use of the Internet and e-mail in which the rights and obligations of both the employer and staff are set down

C. Implementing privacy regulations

D. Installing a virus scanner

Answer: B

Question No: 8

Why is compliance important for the reliability of the information?

A. Compliance is another word for reliability. So, if a company indicates that it is compliant, it

means that the information is managed properly.

B. By meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.

C. When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.

D. When an organization is compliant, it meets the requirements of privacy legislation and, in

doing so, protects the reliability of its information.

Answer: B

Question No: 9

The Information Security Manager (ISM) at Smith Consultants Inc. introduces the following measures to assure information security:

- The security requirements for the network are specified.

- A test environment is set up for the purpose of testing reports coming from the database.

- The various employee functions are assigned corresponding access rights.

- RFID access passes are introduced for the building. Which one of these measures is not a technical measure?

A. The specification of requirements for the network

B. Setting up a test environment

C. Introducing a logical access policy

D. Introducing RFID access passes

Answer:: D

Question No: 10

A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the companys staff. Which kind of security measure could have prevented this?

A. A physical security measure

B. An organizational security measure

C. A technical security measure

Answer: A

Recommend!! Get the Refined ISFS dumps in VCE and PDF From Certifytools, Welcome to download: https://www.certifytools.com/ISFS-exam.html (New Q&As Version)