ISFS PDF Exam Material 2023 Realistic ISFS Dumps Questions
Updated EXIN ISFS Dumps – PDF & Online Engine
NEW QUESTION # 19
What is the best description of a risk analysis?
- A. A risk analysis calculates the exact financial consequences of damages.
- B. A risk analysis helps to estimate the risks and develop the appropriate security measures.
- C. A risk analysis is a method of mapping risks without looking at company processes.
Answer: B
NEW QUESTION # 20
Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?
- A. Reports can be developed more easily and with fewer errors.
- B. Everyone can easiliy see how sensitive the reports' contents are by consulting the grading label.
- C. The costs for automating are easier to charge to the responsible departments.
- D. A determination can be made as to which report should be printed first and which one can wait a little longer.
Answer: B
NEW QUESTION # 21
A Dutch company requests to be listed on the American Stock Exchange. Which legislation within the scope of information security is relevant in this case?
- A. Security regulations for the Dutch government
- B. Sarbanes-Oxley Act
- C. Public Records Act
- D. Dutch Tax Law
Answer: B
NEW QUESTION # 22
You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?
- A. Risk neutral
- B. Risk avoiding
- C. Risk bearing
Answer: A
NEW QUESTION # 23
Three characteristics determine the reliability of information. Which characteristics are these?
- A. Availability, Integrity and Confidentiality
- B. Availability, Nonrepudiation and Confidentiality
- C. Availability, Integrity and Correctness
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION # 24
Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?
- A. Intellectual Property Rights
- B. Personal data protection legislation
- C. ISO/IEC 27001:2005
- D. ISO/IEC 27002:2005
Answer: B
NEW QUESTION # 25
Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?
- A. The recipient, Rachel
- B. The manager, Linda
- C. The person who drafted the insurance terms and conditions
- D. The sender, Peter
Answer: A
NEW QUESTION # 26
You read in the newspapers that the ex-employee of a large company systematically deleted files out of revenge on his manager. Recovering these files caused great losses in time and money. What is this kind of threat called?
- A. Natural threat
- B. Social Engineering
- C. Human threat
Answer: C
NEW QUESTION # 27
Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization. What occurs during the first step of this process: identification?
- A. The first step consists of checking if the user appears on the list of authorized users.
- B. The first step consists of comparing the password with the registered password.
- C. The first step consists of checking if the user is using the correct certificate.
- D. The first step consists of granting access to the information to which the user is authorized.
Answer: A
NEW QUESTION # 28
There is a network printer in the hallway of the company where you work. Many employees dont pick up their printouts immediately and leave them in the printer. What are the consequences of this to the reliability of the information?
- A. The integrity of the information is no longer guaranteed.
- B. The confidentiality of the information is no longer guaranteed.
- C. The availability of the information is no longer guaranteed.
Answer: B
NEW QUESTION # 29
What is an example of a good physical security measure?
- A. All employees and visitors carry an access pass.
- B. Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.
- C. Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.
Answer: A
NEW QUESTION # 30
My user profile specifies which network drives I can read and write to. What is the name of the type of logical access management wherein my access and rights are determined centrally?
- A. Mandatory Access Control (MAC)
- B. Public Key Infrastructure (PKI)
- C. Discretionary Access Control (DAC)
Answer: A
NEW QUESTION # 31
You have just started working at a large organization. You have been asked to sign a code of conduct as well as a contract. What does the organization wish to achieve with this?
- A. A code of conduct helps to prevent the misuse of IT facilities.
- B. A code of conduct is a legal obligation that organizations have to meet.
- C. A code of conduct gives staff guidance on how to report suspected misuses of IT facilities.
- D. A code of conduct prevents a virus outbreak.
Answer: A
NEW QUESTION # 32
There is a network printer in the hallway of the company where you work. Many employees dont pick up their printouts immediately and leave them in the printer. What are the consequences of this to the reliability of the information?
- A. The integrity of the information is no longer guaranteed.
- B. The confidentiality of the information is no longer guaranteed.
- C. The availability of the information is no longer guaranteed.
Answer: B
Explanation:
Explanation
NEW QUESTION # 33
You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?
- A. Set up an access control policy
- B. Appoint security personnel
- C. Encrypt the hard drives of laptops and USB sticks
- D. Formulate a policy regarding mobile media (PDAs, laptops, smartphones, USB sticks)
Answer: D
NEW QUESTION # 34
Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization.
What occurs during the first step of this process: identification?
- A. The first step consists of checking if the user appears on the list of authorized users.
- B. The first step consists of comparing the password with the registered password.
- C. The first step consists of checking if the user is using the correct certificate.
- D. The first step consists of granting access to the information to which the user is authorized.
Answer: A
NEW QUESTION # 35
Why is air-conditioning placed in the server room?
- A. It is not pleasant for the maintenance staff to have to work in a server room that is too warm.
- B. Backup tapes are made from thin plastic which cannot withstand high temperatures. Therefore, if it gets too hot in a server room, they may get damaged.
- C. When a company wishes to cool its offices, the server room is the best place. This way, no office space needs to be sacrificed for such a large piece of equipment.
- D. In the server room the air has to be cooled and the heat produced by the equipment has to be extracted.
The air in the room is also dehumidified and filtered.
Answer: D
NEW QUESTION # 36
What is a risk analysis used for?
- A. A risk analysis is used to ensure that security measures are deployed in a cost-effective and timely fashion.
- B. A risk analysis is used to express the value of information for an organization in monetary terms.
- C. A risk analysis is used to clarify to management their responsibilities.
- D. A risk analysis is used in conjunction with security measures to reduce risks to an acceptable level.
Answer: A
NEW QUESTION # 37
What action is an unintentional human threat?
- A. Arson
- B. Social engineering
- C. Incorrect use of fire extinguishing equipment
- D. Theft of a laptop
Answer: C
NEW QUESTION # 38
What is the goal of an organization's security policy?
- A. To document all procedures required to maintain information security
- B. To provide direction and support to information security
- C. To define all threats to and measures for ensuring information security
- D. To document all incidents that threaten the reliability of information
Answer: B
NEW QUESTION # 39
What is the objective of classifying information?
- A. Creating a label that indicates how confidential the information is
- B. Displaying on the document who is permitted access
- C. Authorizing the use of an information system
- D. Defining different levels of sensitivity into which information may be arranged
Answer: D
NEW QUESTION # 40
......
EXIN ISFS Dumps PDF Are going to be The Best Score: https://www.troytecdumps.com/ISFS-troytec-exam-dumps.html
ISFS.pdf - Questions Answers PDF Sample Questions Reliable: https://drive.google.com/open?id=1RMmx8ZkuAM77lQCFpioEqeE9ci-n6Jwx