Give Push to your Success with Exin Certification ISFS Exam Questions
ISFS 100% Guarantee Download ISFS Exam PDF Q&A
EXIN Information Security Foundation based on ISO/IEC 27001 (ISFS) certification exam is a globally recognized credential that validates a comprehensive understanding of information security management fundamentals. The technical qualification is suitable for professionals with little or no prior knowledge of information security management systems (ISMSs). It helps in making a candidate well-versed with the concepts of information security management, information security control, and risk management. Information Security Foundation based on ISO/IEC 27001 certification confirms their ability to comprehend the standard terminology used in the industry.
NEW QUESTION # 39
The Information Security Manager (ISM) at Smith Consultants Inc. introduces the following measures to assure information security:
-The security requirements for the network are specified.
-A test environment is set up for the purpose of testing reports coming from the database.
-The various employee functions are assigned corresponding access rights.
-
RFID access passes are introduced for the building. Which one of these measures is not a technical measure?
- A. Setting up a test environment
- B. Introducing a logical access policy
- C. Introducing RFID access passes
- D. The specification of requirements for the network
Answer: C
NEW QUESTION # 40
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk.
He asks you for your password. What kind of threat is this?
- A. Social Engineering
- B. Natural threat
- C. Organizational threat
Answer: A
NEW QUESTION # 41
Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do?
- A. Make the employees responsible for submitting their personal data.
- B. Appoint a person responsible for supporting managers in adhering to the policy.
- C. Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.
- D. Issue a ban on the provision of personal information.
Answer: C
NEW QUESTION # 42
What is a repressive measure in the case of a fire?
- A. Taking out fire insurance
- B. Putting out a fire after it has been detected by a fire detector
- C. Repairing damage caused by the fire
Answer: B
NEW QUESTION # 43
You are a consultant and are regularly hired by the Ministry of Defense to perform analysis.
Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?
- A. Availability
- B. Integrity
- C. Confidentiality
Answer: C
NEW QUESTION # 44
You have a small office in an industrial areA. You would like to analyze the risks your company faces. The office is in a pretty remote location; therefore, the possibility of arson is not entirely out of the question. What is the relationship between the threat of fire and the risk of fire?
- A. The threat of fire is the risk of fire multiplied by the chance that the fire may occur and the consequences thereof.
- B. The risk of fire is the threat of fire multiplied by the chance that the fire may occur and the consequences thereof.
Answer: B
NEW QUESTION # 45
You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?
- A. Set up an access control policy
- B. Appoint security personnel
- C. Encrypt the hard drives of laptops and USB sticks
- D. Formulate a policy regarding mobile media (PDAs, laptops, smartphones, USB sticks)
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION # 46
What physical security measure is necessary to control access to company information?
- A. Username and password
- B. The use of break-resistant glass and doors with the right locks, frames and hinges
- C. Prohibiting the use of USB sticks
- D. Air-conditioning
Answer: B
NEW QUESTION # 47
Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?
- A. The costs for automating are easier to charge to the responsible departments.
- B. Everyone can easiliy see how sensitive the reports' contents are by consulting the grading label.
- C. A determination can be made as to which report should be printed first and which one can wait a little longer.
- D. Reports can be developed more easily and with fewer errors.
Answer: B
NEW QUESTION # 48
You are the owner of the courier company SpeeDelivery. You employ a few people who, while waiting to make a delivery, can carry out other tasks. You notice, however, that they use this time to send and read their private mail and surf the Internet. In legal terms, in which way can the use of the Internet and e-mail facilities be best regulated?
- A. Implementing privacy regulations
- B. Installing a virus scanner
- C. Installing an application that makes certain websites no longer accessible and that filters attachments in e-mails
- D. Drafting a code of conduct for the use of the Internet and e-mail in which the rights and obligations of both the employer and staff are set down
Answer: D
NEW QUESTION # 49
Which type of malware builds a network of contaminated computers?
- A. Logic Bomb
- B. Storm Worm or Botnet
- C. Trojan
- D. Virus
Answer: B
NEW QUESTION # 50
You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?
- A. Risk neutral
- B. Risk avoiding
- C. Risk bearing
Answer: A
NEW QUESTION # 51
What is the best way to comply with legislation and regulations for personal data protection?
- A. Performing a threat analysis
- B. Performing a vulnerability analysis
- C. Maintaining an incident register
- D. Appointing the responsibility to someone
Answer: D
NEW QUESTION # 52
You own a small company in a remote industrial areA. Lately, the alarm regularly goes off in the middle of the night. It takes quite a bit of time to respond to it and it seems to be a false alarm every time. You decide to set up a hidden camerA. What is such a measure called?
- A. Repressive measure
- B. Preventive measure
- C. Detective measure
Answer: C
NEW QUESTION # 53
Some security measures are optional. Other security measures must always be implemented. Which measure(s) must always be implemented?
- A. Measures required by laws and regulations
- B. Logical access security measures
- C. Physical security measures
- D. Clear Desk Policy
Answer: A
NEW QUESTION # 54
......
EXIN ISFS Certification Exam is suitable for individuals who are new to the field of information security and want to gain a foundational understanding of the subject. Information Security Foundation based on ISO/IEC 27001 certification is also beneficial for professionals who work in the field of information security and want to enhance their knowledge and skills.
EXIN ISFS (Information Security Foundation based on ISO/IEC 27001) Certification Exam is a globally recognized certification that evaluates an individual's knowledge and skills in information security management. It assesses whether the candidate has the basic understanding of information security management concepts and best practices based on the ISO/IEC 27001 standard.
Get ISFS Actual Free Exam Q&As to Prepare Certification: https://www.passtorrent.com/ISFS-latest-torrent.html
EXIN Actual Free Exam Questions And Answers: https://drive.google.com/open?id=1Vyf3lX36P-RqQyISKQI9xr4Aagi53vRH