Best Quality EXIN ISFS Exam Questions PracticeTorrent Realistic Practice Exams [2023]
Critical Information To Information Security Foundation based on ISO/IEC 27001 Pass the First Time
What is the duration of the ISFS Exam
- Number of Questions: 40
- Passing Score: 65%
- Format: Multiple choices, multiple answers
- Length of Examination: 1 hour
NEW QUESTION 40
In the organization where you work, information of a very sensitive nature is processed. Management is legally obliged to implement the highest-level security measures. What is this kind of risk strategy called?
- A. Risk avoiding
- B. Risk bearing
- C. Risk neutral
Answer: A
NEW QUESTION 41
Some threats are caused directly by people, others have a natural cause. What is an example of an intentional human threat?
- A. Flood
- B. Loss of a USB stick
- C. Lightning strike
- D. Arson
Answer: D
NEW QUESTION 42
When we are at our desk, we want the information system and the necessary information to be available. We want to be able to work with the computer and access the network and our files.
What is the correct definition of availability?
- A. The degree to which the system capacity is enough to allow all users to work with it
- B. The total amount of time that an information system is accessible to the users
- C. The degree to which the continuity of an organization is guaranteed
- D. The degree to which an information system is available for the users
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 43
A couple of years ago you started your company which has now grown from 1 to 20 employees. Your companys information is worth more and more and gone are the days when you could keep it all in hand yourself. You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis. What is a qualitative risk analysis?
- A. This analysis is based on scenarios and situations and produces a subjective view of the possible threats.
- B. This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.
Answer: A
NEW QUESTION 44
You have a small office in an industrial areA. You would like to analyze the risks your company faces. The office is in a pretty remote location; therefore, the possibility of arson is not entirely out of the question. What is the relationship between the threat of fire and the risk of fire?
- A. The threat of fire is the risk of fire multiplied by the chance that the fire may occur and the consequences thereof.
- B. The risk of fire is the threat of fire multiplied by the chance that the fire may occur and the consequences thereof.
Answer: B
NEW QUESTION 45
My user profile specifies which network drives I can read and write to. What is the name of the type of logical access management wherein my access and rights are determined centrally?
- A. Public Key Infrastructure (PKI)
- B. Mandatory Access Control (MAC)
- C. Discretionary Access Control (DAC)
Answer: B
NEW QUESTION 46
There is a network printer in the hallway of the company where you work. Many employees dont pick up their printouts immediately and leave them in the printer. What are the consequences of this to the reliability of the information?
- A. The confidentiality of the information is no longer guaranteed.
- B. The availability of the information is no longer guaranteed.
- C. The integrity of the information is no longer guaranteed.
Answer: A
Explanation:
Explanation
NEW QUESTION 47
What is an example of a security incident?
- A. A member of staff loses a laptop.
- B. The lighting in the department no longer works.
- C. A file is saved under an incorrect name.
- D. You cannot set the correct fonts in your word processing software.
Answer: A
NEW QUESTION 48
An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of the clients is earlier than the start date. What type of measure could prevent this error?
- A. Integrity measure
- B. Availability measure
- C. Organizational measure
- D. Technical measure
Answer: D
NEW QUESTION 49
Why is air-conditioning placed in the server room?
- A. In the server room the air has to be cooled and the heat produced by the equipment has to be extracted.
The air in the room is also dehumidified and filtered. - B. When a company wishes to cool its offices, the server room is the best place. This way, no office space needs to be sacrificed for such a large piece of equipment.
- C. Backup tapes are made from thin plastic which cannot withstand high temperatures. Therefore, if it gets too hot in a server room, they may get damaged.
- D. It is not pleasant for the maintenance staff to have to work in a server room that is too warm.
Answer: A
NEW QUESTION 50
A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?
- A. When the computer systems are not insured.
- B. When computer systems are kept in a cellar below ground level.
- C. When the organization is located near a river.
- D. If the risk analysis has not been carried out.
Answer: B
NEW QUESTION 51
You are a consultant and are regularly hired by the Ministry of Defense to perform analysis.
Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?
- A. Availability
- B. Confidentiality
- C. Integrity
Answer: B
NEW QUESTION 52
Why is air-conditioning placed in the server room?
- A. In the server room the air has to be cooled and the heat produced by the equipment has to be extracted. The air in the room is also dehumidified and filtered.
- B. When a company wishes to cool its offices, the server room is the best place. This way, no office space needs to be sacrificed for such a large piece of equipment.
- C. Backup tapes are made from thin plastic which cannot withstand high temperatures. Therefore, if it gets too hot in a server room, they may get damaged.
- D. It is not pleasant for the maintenance staff to have to work in a server room that is too warm.
Answer: A
NEW QUESTION 53
You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of the threats and risks. What is the relation between a threat, risk and risk analysis?
- A. Risk analyses help to find a balance between threats and risks.
- B. A risk analysis identifies threats from the known risks.
- C. A risk analysis is used to remove the risk of a threat.
- D. A risk analysis is used to clarify which threats are relevant and what risks they involve.
Answer: D
NEW QUESTION 54
An airline company employee notices that she has access to one of the company's applications that she has not used before. Is this an information security incident?
- A. Yes
- B. No
Answer: B
NEW QUESTION 55
There is a network printer in the hallway of the company where you work. Many employees dont pick up their printouts immediately and leave them in the printer. What are the consequences of this to the reliability of the information?
- A. The confidentiality of the information is no longer guaranteed.
- B. The availability of the information is no longer guaranteed.
- C. The integrity of the information is no longer guaranteed.
Answer: A
NEW QUESTION 56
Your organization has an office with space for 25 workstations. These workstations are all fully equipped and in use. Due to a reorganization 10 extra workstations are added, 5 of which are used for a call centre 24 hours per day. Five workstations must always be available. What physical security measures must be taken in order to ensure this?
- A. Obtain an extra office and provide a UPS (Uninterruptible Power Supply) for the five most important workstations.
- B. Obtain an extra office and set up 10 workstations. Ensure that there are security personnel both in the evenings and at night, so that staff can work there safely and securely.
- C. Obtain an extra office and connect all 10 new workstations to an emergency power supply and UPS (Uninterruptible Power Supply). Adjust the access control system to the working hours of the new staff. Inform the building security personnel that work will also be carried out in the evenings and at night.
- D. Obtain an extra office and set up 10 workstations. You would therefore have spare equipment that can be used to replace any non-functioning equipment.
Answer: C
NEW QUESTION 57
You are a consultant and are regularly hired by the Ministry of Defense to perform analysis.
Since the assignments are irregular, you outsource the administration of your business to temporary workers.
You don't want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?
- A. Availability
- B. Confidentiality
- C. Integrity
Answer: B
NEW QUESTION 58
Which of these is not malicious software?
- A. Phishing
- B. Virus
- C. Worm
- D. Spyware
Answer: A
NEW QUESTION 59
In most organizations, access to the computer or the network is granted only after the user has entered a correct username and password. This process consists of 3 steps: identification, authentication and authorization. What is the purpose of the second step, authentication?
- A. In the second step, you make your identity known, which means you are given access to the system.
- B. During the authentication step, the system gives you the rights that you need, such as being able to read the data in the system.
- C. The authentication step checks the username against a list of users who have access to the system.
- D. The system determines whether access may be granted by determining whether the token used is authentic.
Answer: D
NEW QUESTION 60
Which of the following measures is a preventive measure?
- A. Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk
- B. Installing a logging system that enables changes in a system to be recognized
- C. Shutting down all internet traffic after a hacker has gained access to the company systems
- D. Putting sensitive information in a safe
Answer: D
NEW QUESTION 61
What is the relationship between data and information?
- A. Data is structured information.
- B. Information is the meaning and value assigned to a collection of data.
Answer: B
Explanation:
Explanation
NEW QUESTION 62
......
ISFS EXAM DUMPS WITH GUARANTEED SUCCESS: https://actual4test.practicetorrent.com/ISFS-practice-exam-torrent.html