Exin ISFS ISO/IEC Exam Questions Instant Access

Question 1

Why is compliance important for the reliability of the information?

ACompliance is another word for reliability. So, if a company indicates that it is compliant, it
means that the information is managed properly.

BBy meeting the legislative requirements and the regulations of both the government and
internal management, an organization shows that it manages its information in a sound
manner.

CWhen an organization employs a standard such as the ISO/IEC 27002 and uses it
everywhere, it is compliant and therefore it guarantees the reliability of its information.

DWhen an organization is compliant, it meets the requirements of privacy legislation and, in
doing so, protects the reliability of its information.

Answer : B

Question 2

What is the best way to comply with legislation and regulations for personal data protection?

APerforming a threat analysis

BMaintaining an incident register

CPerforming a vulnerability analysis

DAppointing the responsibility to someone

Answer : D

Question 3

A couple of years ago you started your company which has now grown from 1 to 20 employees.

Your companys information is worth more and more and gone are the days when you could keep

it all in hand yourself. You are aware that you have to take measures, but what should they be?

You hire a consultant who advises you to start with a qualitative risk analysis. What is a

qualitative risk analysis?

AThis analysis follows a precise statistical probability calculation in order to calculate exact loss
caused by damage.

BThis analysis is based on scenarios and situations and produces a subjective view of the
possible threats.

Answer : B

Question 4

What is the greatest risk for an organization if no information security policy has been defined?

AIf everyone works with the same account, it is impossible to find out who worked on what.

BInformation security activities are carried out by only a few people.

CToo many measures are implemented.

DIt is not possible for an organization to implement information security in a consistent manner.

Answer : D

Question 5

Which measure assures that valuable information is not left out available for the taking?

AClear desk policy

BInfra-red detection

CAccess passes

Answer : A

Question 6

What sort of security does a Public Key Infrastructure (PKI) offer?

AIt provides digital certificates which can be used to digitally sign documents. Such signatures
irrefutably determine from whom a document was sent.

BHaving a PKI shows customers that a web-based business is secure.

CBy providing agreements, procedures and an organization structure, a PKI defines which
person or which system belongs to which specific public key.

DA PKI ensures that backups of company data are made on a regular basis.

Answer : C

Question 7

Who is authorized to change the classification of a document?

AThe author of the document

BThe administrator of the document

CThe owner of the document

DThe manager of the owner of the document

Answer : C

Exin Information Security Foundation ISFS ISO/IEC Exam Questions