Free EXIN ISFS Exam Dumps Questions & Answers

What is the greatest risk for an organization if no information security policy has been defined?

• A.  Information security activities are carried out by only a few people.
• B.  It is not possible for an organization to implement information security in a consistent manner.
• C.  Too many measures are implemented.
• D.  If everyone works with the same account, it is impossible to find out who worked on what.

What do employees need to know to report a security incident?

• A.  Whether the incident has occurred before and what was the resulting damage.
• B.  How to report an incident and to whom.
• C.  The measures that should have been taken to prevent the incident in the first place.
• D.  Who is responsible for the incident and whether it was intentional.

You are the owner of the courier company SpeeDelivery. You employ a few people who, while waiting to make a delivery, can carry out other tasks. You notice, however, that they use this time to send and read their private mail and surf the Internet. In legal terms, in which way can the use of the Internet and e-mail facilities be best regulated?

• A.  Installing an application that makes certain websites no longer accessible and that filters attachments in e-mails
• B.  Installing a virus scanner
• C.  Implementing privacy regulations
• D.  Drafting a code of conduct for the use of the Internet and e-mail in which the rights and obligations of both the employer and staff are set down

You own a small company in a remote industrial areA. Lately, the alarm regularly goes off in the middle of the night. It takes quite a bit of time to respond to it and it seems to be a false alarm every time. You decide to set up a hidden camerA. What is such a measure called?

• A.  Preventive measure
• B.  Detective measure
• C.  Repressive measure

You read in the newspapers that the ex-employee of a large company systematically deleted files out of revenge on his manager. Recovering these files caused great losses in time and money. What is this kind of threat called?

• A.  Natural threat
• B.  Social Engineering
• C.  Human threat