EXIN EXIN Certifications ISFS Questions & Answers

• Question 41:

  An airline company employee notices that she has access to one of the company's applications that she has not used before. Is this an information security incident?

  A. Yes

  B. No

  Correct Answer: B

• Question 42:

  Your company is in the news as a result of an unfortunate action by one of your employees. The phones are ringing off the hook with customers wanting to cancel their contracts. What do we call this type of damage?

  A. Direct damage

  B. Indirect damage

  Correct Answer: B

• Question 43:

  You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password. What kind of threat is this?

  A. Natural threat

  B. Organizational threat

  C. Social Engineering

  Correct Answer: C

• Question 44:

  You are a consultant and are regularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?

  A. Availability

  B. Integrity

  C. Confidentiality

  Correct Answer: C

• Question 45:

  Which type of malware builds a network of contaminated computers?

  A. Logic Bomb

  B. Storm Worm or Botnet

  C. Trojan

  D. Virus

  Correct Answer: B

• Question 46:

  What is the relationship between data and information?

  A. Data is structured information.

  B. Information is the meaning and value assigned to a collection of data.

  Correct Answer: B

• Question 47:

  You are the owner of the courier company SpeeDelivery. On the basis of your risk analysis you have decided to take a number of measures. You have daily backups made of the server, keep the server room locked and install an intrusion alarm system and a sprinkler system. Which of these measures is a detective measure?

  A. Backup tape

  B. Intrusion alarm

  C. Sprinkler installation

  D. Access restriction to special rooms

  Correct Answer: B

• Question 48:

  Why is compliance important for the reliability of the information?

  A. Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.

  B. By meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.

  C. When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.

  D. When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.

  Correct Answer: B

• Question 49:

  A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

  A. If the risk analysis has not been carried out.

  B. When computer systems are kept in a cellar below ground level.

  C. When the computer systems are not insured.

  D. When the organization is located near a river.

  Correct Answer: B

• Question 50:

  What is the most important reason for applying segregation of duties?

  A. Segregation of duties makes it clear who is responsible for what.

  B. Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.

  C. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

  D. Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.

  Correct Answer: C