[Q13-Q31] Easily To Pass New ISFS Premium Exam Updated [Oct 24, 2023]

5/5 - (2 votes)

Easily To Pass New ISFS Premium Exam Updated [Oct 24, 2023]

ISFS Certification All-in-One Exam Guide Oct-2023

EXIN ISFS certification exam is an internationally recognized certification in information security management. Based on the ISO/IEC 27001 standard, this certification ensures that individuals possess the necessary knowledge and skills needed to implement information security controls and practices within an organization. It is an entry-level exam that tests foundational knowledge in information security management.

NO.13 You are a consultant and are regularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don’t want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?

Availability

Integrity

Confidentiality

NO.14 Why is air-conditioning placed in the server room?

In the server room the air has to be cooled and the heat produced by the equipment has to be extracted.
The air in the room is also dehumidified and filtered.

When a company wishes to cool its offices, the server room is the best place. This way, no office space needs to be sacrificed for such a large piece of equipment.

It is not pleasant for the maintenance staff to have to work in a server room that is too warm.

Backup tapes are made from thin plastic which cannot withstand high temperatures. Therefore, if it gets too hot in a server room, they may get damaged.

NO.15 When we are at our desk, we want the information system and the necessary information to be available. We want to be able to work with the computer and access the network and our files.
What is the correct definition of availability?

The degree to which the system capacity is enough to allow all users to work with it

The degree to which the continuity of an organization is guaranteed

The degree to which an information system is available for the users

The total amount of time that an information system is accessible to the users

Explanation/Reference:

NO.16 You are the owner of the courier company SpeeDelivery. On the basis of your risk analysis you have decided to take a number of measures. You have daily backups made of the server, keep the server room locked and install an intrusion alarm system and a sprinkler system. Which of these measures is a detective measure?

Backup tape

Intrusion alarm

Sprinkler installation

Access restriction to special rooms

NO.17 What is a risk analysis used for?

A risk analysis is used to express the value of information for an organization in monetary terms.

A risk analysis is used to clarify to management their responsibilities.

A risk analysis is used in conjunction with security measures to reduce risks to an acceptable level.

A risk analysis is used to ensure that security measures are deployed in a cost-effective and timely fashion.

NO.18 What is a repressive measure in the case of a fire?

Taking out fire insurance

Putting out a fire after it has been detected by a fire detector

Repairing damage caused by the fire

NO.19 The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?

Information Security Management System

The use of tokens to gain access to information systems

Validation of input and output data in applications

Encryption of information

NO.20 Which of these is not malicious software?

Phishing

Spyware

Virus

Worm

NO.21 An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of the clients is earlier than the start date. What type of measure could prevent this error?

Availability measure

Integrity measure

Organizational measure

Technical measure

Explanation/Reference:

NO.22 What do employees need to know to report a security incident?

How to report an incident and to whom.

Whether the incident has occurred before and what was the resulting damage.

The measures that should have been taken to prevent the incident in the first place.

Who is responsible for the incident and whether it was intentional.

NO.23 Your organization has an office with space for 25 workstations. These workstations are all fully equipped and in use. Due to a reorganization 10 extra workstations are added, 5 of which are used for a call centre 24 hours per day. Five workstations must always be available. What physical security measures must be taken in order to ensure this?

Obtain an extra office and set up 10 workstations. You would therefore have spare equipment that can be used to replace any non-functioning equipment.

Obtain an extra office and set up 10 workstations. Ensure that there are security personnel both in the evenings and at night, so that staff can work there safely and securely.

Obtain an extra office and connect all 10 new workstations to an emergency power supply and UPS (Uninterruptible Power Supply). Adjust the access control system to the working hours of the new staff.
Inform the building security personnel that work will also be carried out in the evenings and at night.

Obtain an extra office and provide a UPS (Uninterruptible Power Supply) for the five most important workstations.

NO.24 You are a consultant and are regularly hired by the Ministry of Defense to perform analysis.
Since the assignments are irregular, you outsource the administration of your business to temporary workers.
You don’t want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?

Availability

Integrity

Confidentiality

NO.25 Which one of the threats listed below can occur as a result of the absence of a physical measure?

A user can view the files belonging to another user.

A server shuts off because of overheating.

A confidential document is left in the printer.

Hackers can freely enter the computer network.

NO.26 You have a small office in an industrial areA. You would like to analyze the risks your company faces. The office is in a pretty remote location; therefore, the possibility of arson is not entirely out of the question. What is the relationship between the threat of fire and the risk of fire?

The risk of fire is the threat of fire multiplied by the chance that the fire may occur and the consequences thereof.

The threat of fire is the risk of fire multiplied by the chance that the fire may occur and the consequences thereof.

NO.27 What action is an unintentional human threat?

Arson

Theft of a laptop

Social engineering

Incorrect use of fire extinguishing equipment

Explanation/Reference:

NO.28 A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

If the risk analysis has not been carried out.

When computer systems are kept in a cellar below ground level.

When the computer systems are not insured.

When the organization is located near a river.

NO.29 An airline company employee notices that she has access to one of the company’s applications that she has not used before. Is this an information security incident?

Yes

Explanation

NO.30 In most organizations, access to the computer or the network is granted only after the user has entered a correct username and password. This process consists of 3 steps: identification, authentication and authorization. What is the purpose of the second step, authentication?

In the second step, you make your identity known, which means you are given access to the system.

The authentication step checks the username against a list of users who have access to the system.

The system determines whether access may be granted by determining whether the token used is authentic.

During the authentication step, the system gives you the rights that you need, such as being able to read the data in the system.

NO.31 What is the relationship between data and information?

Data is structured information.

Information is the meaning and value assigned to a collection of data.

Explanation

Loading …

Exin Information Security Foundation (based on ISO/IEC 27002) (EX0-105) ISFS Exam

Exin Information Security Foundation (based on ISO/IEC 27002) (EX0-105) ISFS Exam which is related to Exin Information Security Foundation based on ISO/IEC 27002 and credits toward Exin Information Security Management Certification. This exam validates the Candidate knowledge and skills of the concept of Information, relationships between threats, risks and the reliability of the information, importance of measures, physical security, technical measures, measures security policy and security organization.

Last ISFS practice test reviews: Practice Test EXIN dumps: https://www.passleadervce.com/ExinCertification/reliable-ISFS-exam-learning-guide.html