EXIN Information Security Foundation based on ISO/IEC 27001 - ISFS FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Why is compliance important for the reliability of the information?

A. By meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner. B. When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information. C. When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information. D. Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.

Discussion 0

Correct Answer: A Vote an answer

Question 2

Which type of malware builds a network of contaminated computers?

A. Trojan B. Storm Worm or Botnet C. Logic Bomb D. Virus

Discussion 0

Correct Answer: B Vote an answer

Question 3

You are a consultant and are regularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?

A. Availability B. Integrity C. Confidentiality

Discussion 0

Correct Answer: C Vote an answer

Question 4

There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good. What is an example of the indirect damage caused by this fire?

A. Water damage due to the fire extinguishers B. Burned computer systems C. Melted backup tapes D. Burned documents

Discussion 0

Correct Answer: A Vote an answer

Question 5

The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?

A. Encryption of information B. Information Security Management System C. The use of tokens to gain access to information systems D. Validation of input and output data in applications

Discussion 0

Correct Answer: B Vote an answer

Question 6

Susan sends an email to Paul. Who determines the meaning and the value of information in this email?

A. Paul and Susan, the sender and the recipient of the information. B. Susan, the sender of the information. C. Paul, the recipient of the information.

Discussion 0

Correct Answer: C Vote an answer

Question 7

What is a risk analysis used for?

A. A risk analysis is used to ensure that security measures are deployed in a cost-effective and timely fashion. B. A risk analysis is used to express the value of information for an organization in monetary terms. C. A risk analysis is used in conjunction with security measures to reduce risks to an acceptable level. D. A risk analysis is used to clarify to management their responsibilities.

Discussion 0

Correct Answer: A Vote an answer

Question 8

Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

A. ISO/IEC 27001:2005 B. Intellectual Property Rights C. Personal data protection legislation D. ISO/IEC 27002:2005

Discussion 0

Correct Answer: C Vote an answer