100% Pass Top-selling ISFS Exams - New 2024 EXIN Pratice Exam
Exin Certification Dumps ISFS Exam for Full Questions - Exam Study Guide
NEW QUESTION # 23
You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?
- A. Risk avoiding
- B. Risk neutral
- C. Risk bearing
Answer: B
NEW QUESTION # 24
You are a consultant and are regularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?
- A. Confidentiality
- B. Integrity
- C. Availability
Answer: A
NEW QUESTION # 25
What is the best way to comply with legislation and regulations for personal data protection?
- A. Performing a vulnerability analysis
- B. Performing a threat analysis
- C. Maintaining an incident register
- D. Appointing the responsibility to someone
Answer: D
NEW QUESTION # 26
You are a consultant and are regularly hired by the Ministry of Defense to perform analysis.
Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?
- A. Confidentiality
- B. Integrity
- C. Availability
Answer: A
NEW QUESTION # 27
My user profile specifies which network drives I can read and write to. What is the name of the type of logical access management wherein my access and rights are determined centrally?
- A. Mandatory Access Control (MAC)
- B. Discretionary Access Control (DAC)
- C. Public Key Infrastructure (PKI)
Answer: A
NEW QUESTION # 28
What is the greatest risk for an organization if no information security policy has been defined?
- A. Too many measures are implemented.
- B. If everyone works with the same account, it is impossible to find out who worked on what.
- C. Information security activities are carried out by only a few people.
- D. It is not possible for an organization to implement information security in a consistent manner.
Answer: D
NEW QUESTION # 29
Midwest Insurance controls access to its offices with a passkey system. We call this a preventive measure.
What are some other measures?
- A. Detective, repressive and corrective measures
- B. Partial, adaptive and corrective measures
- C. Repressive, adaptive and corrective measures
Answer: A
NEW QUESTION # 30
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password. What kind of threat is this?
- A. Organizational threat
- B. Social Engineering
- C. Natural threat
Answer: B
NEW QUESTION # 31
What is the objective of classifying information?
- A. Creating a label that indicates how confidential the information is
- B. Authorizing the use of an information system
- C. Displaying on the document who is permitted access
- D. Defining different levels of sensitivity into which information may be arranged
Answer: D
NEW QUESTION # 32
You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?
- A. Set up an access control policy
- B. Appoint security personnel
- C. Encrypt the hard drives of laptops and USB sticks
- D. Formulate a policy regarding mobile media (PDAs, laptops, smartphones, USB sticks)
Answer: D
NEW QUESTION # 33
An airline company employee notices that she has access to one of the company's applications that she has not used before. Is this an information security incident?
- A. Yes
- B. No
Answer: B
NEW QUESTION # 34
When we are at our desk, we want the information system and the necessary information to be available. We want to be able to work with the computer and access the network and our files.
What is the correct definition of availability?
- A. The degree to which an information system is available for the users
- B. The degree to which the system capacity is enough to allow all users to work with it
- C. The total amount of time that an information system is accessible to the users
- D. The degree to which the continuity of an organization is guaranteed
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION # 35
You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of the threats and risks.
What is the relation between a threat, risk and risk analysis?
- A. A risk analysis is used to remove the risk of a threat.
- B. A risk analysis identifies threats from the known risks.
- C. Risk analyses help to find a balance between threats and risks.
- D. A risk analysis is used to clarify which threats are relevant and what risks they involve.
Answer: D
NEW QUESTION # 36
A well executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives. What is not one of the four main objectives of a risk analysis?
- A. Determining the costs of threats
- B. Identifying assets and their value
- C. Determining relevant vulnerabilities and threats
- D. Establishing a balance between the costs of an incident and the costs of a security measure
Answer: A
NEW QUESTION # 37
What is an example of a non-human threat to the physical environment?
- A. Corrupted file
- B. Fraudulent transaction
- C. Storm
- D. Virus
Answer: C
NEW QUESTION # 38
......
Achieving the EXIN ISFS Certification validates your knowledge and abilities in the field of information security. In addition, it endorses that you possess the fundamental knowledge needed in the management, application, and evaluation of information security controls. It demonstrates to professional and academic communities that you are well versed in the basic principles that constitute the foundation of the field. Therefore, it is an essential certification for anyone who aims to pursue a career in information security or desires to enhance their competencies while in the field.
Authentic Best resources for ISFS Online Practice Exam: https://www.braindumpquiz.com/ISFS-exam-material.html
ISFS Test Engine Practice Exam: https://drive.google.com/open?id=1xgxtvdW_UVoysz5FldsJMHnDUghGt4GW