Latest [Nov 02, 2023] ISFS Exam Questions – Valid ISFS Dumps Pdf
ISFS Practice Test Questions Answers Updated 80 Questions
NEW QUESTION # 48
What physical security measure is necessary to control access to company information?
- A. Air-conditioning
- B. The use of break-resistant glass and doors with the right locks, frames and hinges
- C. Username and password
- D. Prohibiting the use of USB sticks
Answer: B
NEW QUESTION # 49
A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the companys staff. Which kind of security measure could have prevented this?
- A. A technical security measure
- B. An organizational security measure
- C. A physical security measure
Answer: C
NEW QUESTION # 50
In the organization where you work, information of a very sensitive nature is processed.
Management is legally obliged to implement the highest-level security measures. What is this kind of risk strategy called?
- A. Risk neutral
- B. Risk avoiding
- C. Risk bearing
Answer: B
NEW QUESTION # 51
You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?
- A. Risk avoiding
- B. Risk neutral
- C. Risk bearing
Answer: B
NEW QUESTION # 52
A couple of years ago you started your company which has now grown from 1 to 20 employees.
Your companys information is worth more and more and gone are the days when you could keep it all in hand yourself. You are aware that you have to take measures, but what should they be?
You hire a consultant who advises you to start with a qualitative risk analysis. What is a qualitative risk analysis?
- A. This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.
- B. This analysis is based on scenarios and situations and produces a subjective view of the possible threats.
Answer: B
Explanation:
Explanation
NEW QUESTION # 53
At Midwest Insurance, all information is classified. What is the goal of this classification of information?
- A. Applying labels making the information easier to recognize
- B. To create a manual about how to handle mobile devices
- C. Structuring information according to its sensitivity
Answer: C
NEW QUESTION # 54
What is an example of a physical security measure?
- A. The encryption of confidential information
- B. An access control policy with passes that have to be worn visibly
- C. A code of conduct that requires staff to adhere to the clear desk policy, ensuring that confidential information is not left visibly on the desk at the end of the work day
- D. Special fire extinguishers with inert gas, such as Argon
Answer: D
NEW QUESTION # 55
Three characteristics determine the reliability of information. Which characteristics are these?
- A. Availability, Integrity and Correctness
- B. Availability, Integrity and Confidentiality
- C. Availability, Nonrepudiation and Confidentiality
Answer: B
NEW QUESTION # 56
You work for a flexible employer who doesnt mind if you work from home or on the road. You regularly take copies of documents with you on a USB memory stick that is not secure. What are the consequences for the reliability of the information if you leave your USB memory stick behind on the train?
- A. The availability of the data on the USB memory stick is no longer guaranteed.
- B. The integrity of the data on the USB memory stick is no longer guaranteed.
- C. The confidentiality of the data on the USB memory stick is no longer guaranteed.
Answer: C
NEW QUESTION # 57
What is the objective of classifying information?
- A. Creating a label that indicates how confidential the information is
- B. Authorizing the use of an information system
- C. Displaying on the document who is permitted access
- D. Defining different levels of sensitivity into which information may be arranged
Answer: D
NEW QUESTION # 58
What is an example of a good physical security measure?
- A. Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.
- B. Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.
- C. All employees and visitors carry an access pass.
Answer: C
NEW QUESTION # 59
What is the goal of an organization's security policy?
- A. To define all threats to and measures for ensuring information security
- B. To document all incidents that threaten the reliability of information
- C. To provide direction and support to information security
- D. To document all procedures required to maintain information security
Answer: C
NEW QUESTION # 60
Which of these is not malicious software?
- A. Worm
- B. Virus
- C. Spyware
- D. Phishing
Answer: D
NEW QUESTION # 61
The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?
- A. Encryption of information
- B. The use of tokens to gain access to information systems
- C. Validation of input and output data in applications
- D. Information Security Management System
Answer: D
NEW QUESTION # 62
Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do?
- A. Appoint a person responsible for supporting managers in adhering to the policy.
- B. Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.
- C. Issue a ban on the provision of personal information.
- D. Make the employees responsible for submitting their personal data.
Answer: B
NEW QUESTION # 63
You work for a large organization. You notice that you have access to confidential information that you should not be able to access in your position. You report this security incident to the helpdesk. The incident cycle isinitiated. What are the stages of the security incident cycle?
- A. Threat, Recovery, Incident, Damage
- B. Threat, Incident, Damage, Recovery
- C. Threat, Damage, Incident, Recovery
- D. Threat, Damage, Recovery, Incident
Answer: B
NEW QUESTION # 64
What action is an unintentional human threat?
- A. Arson
- B. Social engineering
- C. Incorrect use of fire extinguishing equipment
- D. Theft of a laptop
Answer: C
NEW QUESTION # 65
In most organizations, access to the computer or the network is granted only after the user has entered a correct username and password. This process consists of 3 steps: identification, authentication and authorization. What is the purpose of the second step, authentication?
- A. In the second step, you make your identity known, which means you are given access to the system.
- B. During the authentication step, the system gives you the rights that you need, such as being able to read the data in the system.
- C. The authentication step checks the username against a list of users who have access to the system.
- D. The system determines whether access may be granted by determining whether the token used is authentic.
Answer: D
NEW QUESTION # 66
What is the most important reason for applying segregation of duties?
- A. Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.
- B. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.
- C. Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
- D. Segregation of duties makes it clear who is responsible for what.
Answer: B
NEW QUESTION # 67
You are a consultant and are regularly hired by the Ministry of Defense to perform analysis.
Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?
- A. Confidentiality
- B. Integrity
- C. Availability
Answer: A
NEW QUESTION # 68
My user profile specifies which network drives I can read and write to. What is the name of the type of logical access management wherein my access and rights are determined centrally?
- A. Public Key Infrastructure (PKI)
- B. Discretionary Access Control (DAC)
- C. Mandatory Access Control (MAC)
Answer: C
NEW QUESTION # 69
You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of the threats and risks. What is the relation between a threat, risk and risk analysis?
- A. A risk analysis is used to clarify which threats are relevant and what risks they involve.
- B. A risk analysis is used to remove the risk of a threat.
- C. A risk analysis identifies threats from the known risks.
- D. Risk analyses help to find a balance between threats and risks.
Answer: A
NEW QUESTION # 70
......
ISFS dumps Sure Practice with 80 Questions: https://www.troytecdumps.com/ISFS-troytec-exam-dumps.html
Get New ISFS Certification – Valid Exam Dumps Questions: https://drive.google.com/open?id=1PuWeV1fU0AlhcPsHAU-8EsCZQ0rk1iDg