ISFS Exam Questions - Online Test

ISFS Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

It is more faster and easier to pass the EXIN,Inc ISFS exam by using Pinpoint EXIN,Inc Information Security Foundation based on ISO/IEC 27002 questuins and answers. Immediate access to the Renewal ISFS Exam and find the same core area ISFS questions with professionally verified answers, then PASS your exam with a high score now.

New EXIN,Inc ISFS Exam Dumps Collection (Question 5 - Question 14)

Q1. What is the most important reason for applying segregation of duties?

A. Segregation of duties makes it clear who is responsible for what.

B. Segregation of duties ensures that, when a person is absent, it can be investigated whether he

or she has been committing fraud.

C. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

D. Segregation of duties makes it easier for a person who is ready with his or her part of the work

to take time off or to take over the work of another person.

Answer: C

Q2. Why do organizations have an information security policy?

A. In order to demonstrate the operation of the Plan-Do-Check-Act cycle within an organization.

B. In order to ensure that staff do not break any laws.

C. In order to give direction to how information security is set up within an organization.

D. In order to ensure that everyone knows who is responsible for carrying out the backup procedures.

Answer: : C

Q3. What is a risk analysis used for?

A. A risk analysis is used to express the value of information for an organization in monetary terms.

B. A risk analysis is used to clarify to management their responsibilities.

C. A risk analysis is used in conjunction with security measures to reduce risks to an acceptable level.

D. A risk analysis is used to ensure that security measures are deployed in a cost-effective and timely fashion.

Answer: D

Q4. You are the first to arrive at work in the morning and notice that the CD ROM on which you

saved

contracts yesterday has disappeared. You were the last to leave yesterday. When should you

report this information security incident?

A. This incident should be reported immediately.

B. You should first investigate this incident yourself and try to limit the damage.

C. You should wait a few days before reporting this incident. The CD ROM can still reappear and, in that case, you will have made a fuss for nothing.

Answer: A

Q5. What is an example of a security incident?

A. The lighting in the department no longer works.

B. A member of staff loses a laptop.

C. You cannot set the correct fonts in your word processing software.

D. A file is saved under an incorrect name.

Answer: B

Q6. When we are at our desk, we want the information system and the necessary information to be available. We want to be able to work with the computer and access the network and our files.

What is the correct definition of availability?

A. The degree to which the system capacity is enough to allow all users to work with it

B. The degree to which the continuity of an organization is guaranteed

C. The degree to which an information system is available for the users

D. The total amount of time that an information system is accessible to the users

Answer: C

Q7. Which of the following measures is a corrective measure?

A. Incorporating an Intrusion Detection System (IDS) in the design of a computer centre

B. Installing a virus scanner in an information system

C. Making a backup of the data that has been created or altered that day

D. Restoring a backup of the correct database after a corrupt copy of the database was written over the original

Answer: D

Q8. Who is authorized to change the classification of a document?

A. The author of the document

B. The administrator of the document

C. The owner of the document

D. The manager of the owner of the document

Answer: C

Q9. What physical security measure is necessary to control access to company information?

A. Air-conditioning

B. Username and password

C. The use of break-resistant glass and doors with the right locks, frames and hinges

D. Prohibiting the use of USB sticks

Answer: C

Q10. You have a small office in an industrial areA. You would like to analyze the risks your company faces. The office is in a pretty remote location; therefore, the possibility of arson is not entirely out of the question. What is the relationship between the threat of fire and the risk of fire?

A. The risk of fire is the threat of fire multiplied by the chance that the fire may occur and the consequences thereof.

B. The threat of fire is the risk of fire multiplied by the chance that the fire may occur and the consequences thereof.

Answer: A

100% Renewal EXIN,Inc ISFS Questions & Answers shared by Examcollectionplus, Get HERE: https://www.examcollectionplus.net/vce-ISFS/ (New Q&As)