Skip to main content

EX0-105 Real Exam Questions

Information Security Foundation based on ISO/IEC 27002

128 questions available · Page 1 of 13

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Under which condition is an employer permitted to check if Internet and email services in the workplace are being used for private purposes?

  1. A

    The employer is permitted to check this if the employee is informed after each instance of checking.

  2. B

    The employer is permitted to check this if the employees are aware that this could happen.

  3. C

    The employer is permitted to check this if a firewall is also installed.

  4. D

    The employer is in no way permitted to check the use of IT services by employees.

Show answer and explanation

Correct answer: B

Question 2 Single choice

What is a repressive measure in the case of a fire?

  1. A

    Taking out fire insurance

  2. B

    Putting out a fire after it has been detected by a fire detector

  3. C

    Repairing damage caused by the fire

Show answer and explanation

Correct answer: B

Question 3 Single choice

You own a store, and money keeps disappearing from the cash register. You want to put an end to this by means of a detective measure.

What is an example of a detective measure?

  1. A

    Close the store and hire a detective.

  2. B

    Post a warning sign on the register.

  3. C

    Set up a hidden camera.

Show answer and explanation

Correct answer: C

Question 4 Single choice

What is the most common risk strategy besides Risk bearing and Risk neutral?

  1. A

    Risk acceptance

  2. B

    Risk avoidance

  3. C

    Risk insurance

  4. D

    Risk transference

Show answer and explanation

Correct answer: B

Question 5 Single choice

Midwest Insurance controls access to its offices with a passkey system.

What kind of security measure is this?

  1. A

    Corrective

  2. B

    Detective

  3. C

    Preventive

  4. D

    Repressive

Show answer and explanation

Correct answer: C

Question 6 Single choice

Of which concept is `measures taken to safeguard an information system from attacks' the definition?

  1. A

    Risk analysis

  2. B

    Risk management

  3. C

    Security controls

Show answer and explanation

Correct answer: C

Question 7 Single choice

After a thorough risk analysis and the identification of appropriate security controls, the management team decides that for one specific threat the impact should be covered by insurance.

Which kind of risk treatment control is described here?

  1. A

    Accept

  2. B

    Avoid

  3. C

    Reduce

  4. D

    Transfer

Show answer and explanation

Correct answer: D

Question 8 Single choice

In most organizations, access to the computer or the network is granted only after the user has entered a correct username and password. This process consists of 3 steps: identification, authentication and authorization.

What is the purpose of the second step, authentication?

  1. A

    In the second step, you make your identity known, which means you are given access to the system.

  2. B

    The authentication step checks the username against a list of users who have access to the system.

  3. C

    The system determines whether access may be granted by determining whether the token used is authentic.

  4. D

    During the authentication step, the system gives you the rights that you need, such as being able to read the data in the system.

Show answer and explanation

Correct answer: C

Question 9 Single choice

A Dutch company requests to be listed on the American Stock Exchange.

Which legislation within the scope of information security is relevant in this case?

  1. A

    Public Records Act

  2. B

    Dutch Tax Law

  3. C

    Sarbanes-Oxley Act

  4. D

    Security regulations for the Dutch government

Show answer and explanation

Correct answer: C

Question 10 Single choice

Which measure assures that valuable information is not left out available for the taking?

  1. A

    Clear desk policy

  2. B

    Infra-red detection

  3. C

    Access passes

Show answer and explanation

Correct answer: A