Get 100% Passing Success With True ISFS Exam! [Aug-2021]
EXIN ISFS PDF Questions - Exceptional Practice To Information Security Foundation based on ISO/IEC 27001
NEW QUESTION 19
Why is air-conditioning placed in the server room?
- A. It is not pleasant for the maintenance staff to have to work in a server room that is too warm.
- B. Backup tapes are made from thin plastic which cannot withstand high temperatures. Therefore, if it gets too hot in a server room, they may get damaged.
- C. When a company wishes to cool its offices, the server room is the best place. This way, no office space needs to be sacrificed for such a large piece of equipment.
- D. In the server room the air has to be cooled and the heat produced by the equipment has to be extracted.
The air in the room is also dehumidified and filtered.
Answer: D
NEW QUESTION 20
Why is compliance important for the reliability of the information?
- A. By meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.
- B. When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.
- C. Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.
- D. When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.
Answer: A
NEW QUESTION 21
A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the companys staff. Which kind of security measure could have prevented this?
- A. A technical security measure
- B. An organizational security measure
- C. A physical security measure
Answer: C
NEW QUESTION 22
Your organization has an office with space for 25 workstations. These workstations are all fully equipped and in use. Due to a reorganization 10 extra workstations are added, 5 of which are used for a call centre 24 hours per day. Five workstations must always be available. What physical security measures must be taken in order to ensure this?
- A. Obtain an extra office and provide a UPS (Uninterruptible Power Supply) for the five most important workstations.
- B. Obtain an extra office and set up 10 workstations. You would therefore have spare equipment that can be used to replace any non-functioning equipment.
- C. Obtain an extra office and connect all 10 new workstations to an emergency power supply and UPS (Uninterruptible Power Supply). Adjust the access control system to the working hours of the new staff.
Inform the building security personnel that work will also be carried out in the evenings and at night. - D. Obtain an extra office and set up 10 workstations. Ensure that there are security personnel both in the evenings and at night, so that staff can work there safely and securely.
Answer: C
NEW QUESTION 23
The Information Security Manager (ISM) at Smith Consultants Inc. introduces the following measures to assure information security:
-The security requirements for the network are specified.
-A test environment is set up for the purpose of testing reports coming from the database.
-The various employee functions are assigned corresponding access rights.
-
RFID access passes are introduced for the building. Which one of these measures is not a technical measure?
- A. Setting up a test environment
- B. Introducing RFID access passes
- C. Introducing a logical access policy
- D. The specification of requirements for the network
Answer: B
NEW QUESTION 24
What is a repressive measure in the case of a fire?
- A. Taking out fire insurance
- B. Putting out a fire after it has been detected by a fire detector
- C. Repairing damage caused by the fire
Answer: B
NEW QUESTION 25
What action is an unintentional human threat?
- A. Incorrect use of fire extinguishing equipment
- B. Theft of a laptop
- C. Arson
- D. Social engineering
Answer: A
NEW QUESTION 26
What physical security measure is necessary to control access to company information?
- A. Air-conditioning
- B. Username and password
- C. Prohibiting the use of USB sticks
- D. The use of break-resistant glass and doors with the right locks, frames and hinges
Answer: D
NEW QUESTION 27
What is the most important reason for applying segregation of duties?
- A. Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.
- B. Segregation of duties makes it clear who is responsible for what.
- C. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.
- D. Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
Answer: C
NEW QUESTION 28
Which of the following measures is a preventive measure?
- A. Putting sensitive information in a safe
- B. Installing a logging system that enables changes in a system to be recognized
- C. Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk
- D. Shutting down all internet traffic after a hacker has gained access to the company systems
Answer: A
NEW QUESTION 29
What is the most important reason for applying segregation of duties?
- A. Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.
- B. Segregation of duties makes it clear who is responsible for what.
- C. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.
- D. Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
Answer: C
Explanation:
Explanation
NEW QUESTION 30
You are the owner of the courier company SpeeDelivery. On the basis of your risk analysis you have decided to take a number of measures. You have daily backups made of the server, keep the server room locked and install an intrusion alarm system and a sprinkler system. Which of these measures is a detective measure?
- A. Backup tape
- B. Sprinkler installation
- C. Intrusion alarm
- D. Access restriction to special rooms
Answer: C
NEW QUESTION 31
An airline company employee notices that she has access to one of the company's applications that she has not used before. Is this an information security incident?
- A. No
- B. Yes
Answer: A
NEW QUESTION 32
You are the first to arrive at work in the morning and notice that the CD ROM on which you saved contracts yesterday has disappeared. You were the last to leave yesterday. When should you report this information security incident?
- A. You should wait a few days before reporting this incident. The CD ROM can still reappear and, in that case, you will have made a fuss for nothing.
- B. You should first investigate this incident yourself and try to limit the damage.
- C. This incident should be reported immediately.
Answer: C
NEW QUESTION 33
Some threats are caused directly by people, others have a natural cause. What is an example of an intentional human threat?
- A. Lightning strike
- B. Loss of a USB stick
- C. Flood
- D. Arson
Answer: D
NEW QUESTION 34
What action is an unintentional human threat?
- A. Incorrect use of fire extinguishing equipment
- B. Theft of a laptop
- C. Arson
- D. Social engineering
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION 35
What is a human threat to the reliability of the information on your company website?
- A. Because of a lack of maintenance, a fire hydrant springs a leak and floods the premises. Your employees cannot come into the office and therefore can not keep the information on the website up to date.
- B. The computer hosting your website is overloaded and crashes. Your website is offline.
- C. One of your employees commits an error in the price of a product on your website.
Answer: C
NEW QUESTION 36
......
ISFS dumps - PassCollection - 100% Passing Guarantee: https://www.passcollection.com/ISFS_real-exams.html
Fast, Hands-On ISFS exam: https://drive.google.com/open?id=1TecdXFuc8EYrjEvFfn5gac0d1P_j8tf1
