[Q15-Q29] Attested ISFS Dumps PDF Resource [2022]

Rate this post

Attested ISFS Dumps PDF Resource [2022]

Latest ISFS Actual Free Exam Questions Updated 80 Questions

For more info visit:

NO.15 You work for a flexible employer who doesnt mind if you work from home or on the road. You regularly take copies of documents with you on a USB memory stick that is not secure. What are the consequences for the reliability of the information if you leave your USB memory stick behind on the train?

The integrity of the data on the USB memory stick is no longer guaranteed.

The availability of the data on the USB memory stick is no longer guaranteed.

The confidentiality of the data on the USB memory stick is no longer guaranteed.

NO.16 What is an example of a good physical security measure?

All employees and visitors carry an access pass.

Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.

Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

NO.17 Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization. What occurs during the first step of this process: identification?

The first step consists of checking if the user is using the correct certificate.

The first step consists of checking if the user appears on the list of authorized users.

The first step consists of comparing the password with the registered password.

The first step consists of granting access to the information to which the user is authorized.

NO.18 You have a small office in an industrial areA. You would like to analyze the risks your company faces. The office is in a pretty remote location; therefore, the possibility of arson is not entirely out of the question. What is the relationship between the threat of fire and the risk of fire?

The risk of fire is the threat of fire multiplied by the chance that the fire may occur and the consequences thereof.

The threat of fire is the risk of fire multiplied by the chance that the fire may occur and the consequences thereof.

NO.19 Which one of the threats listed below can occur as a result of the absence of a physical measure?

A user can view the files belonging to another user.

A server shuts off because of overheating.

A confidential document is left in the printer.

Hackers can freely enter the computer network.

NO.20 What sort of security does a Public Key Infrastructure (PKI) offer?

It provides digital certificates which can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent.

Having a PKI shows customers that a web-based business is secure.

By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.

A PKI ensures that backups of company data are made on a regular basis.

NO.21 Why do organizations have an information security policy?

In order to demonstrate the operation of the Plan-Do-Check-Act cycle within an organization.

In order to ensure that staff do not break any laws.

In order to give direction to how information security is set up within an organization.

In order to ensure that everyone knows who is responsible for carrying out the backup procedures.

NO.22 A well executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives. What is not one of the four main objectives of a risk analysis?

Identifying assets and their value

Determining the costs of threats

Establishing a balance between the costs of an incident and the costs of a security measure

Determining relevant vulnerabilities and threats

NO.23 There is a network printer in the hallway of the company where you work. Many employees dont pick up their printouts immediately and leave them in the printer. What are the consequences of this to the reliability of the information?

The integrity of the information is no longer guaranteed.

The availability of the information is no longer guaranteed.

The confidentiality of the information is no longer guaranteed.

NO.24 Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

ISO/IEC 27001:2005

Intellectual Property Rights

ISO/IEC 27002:2005

Personal data protection legislation

NO.25 My user profile specifies which network drives I can read and write to. What is the name of the type of logical access management wherein my access and rights are determined centrally?

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Public Key Infrastructure (PKI)

NO.26 When we are at our desk, we want the information system and the necessary information to be available. We want to be able to work with the computer and access the network and our files.
What is the correct definition of availability?

The degree to which the system capacity is enough to allow all users to work with it

The degree to which the continuity of an organization is guaranteed

The degree to which an information system is available for the users

The total amount of time that an information system is accessible to the users

Explanation/Reference:

NO.27 In the organization where you work, information of a very sensitive nature is processed.
Management is legally obliged to implement the highest-level security measures. What is this kind of risk strategy called?

Risk bearing

Risk avoiding

Risk neutral

NO.28 Which of the following measures is a preventive measure?

Installing a logging system that enables changes in a system to be recognized

Shutting down all internet traffic after a hacker has gained access to the company systems

Putting sensitive information in a safe

Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk

NO.29 Under which condition is an employer permitted to check if Internet and email services in the workplace are being used for private purposes?

The employer is permitted to check this if the employee is informed after each instance of checking.

The employer is permitted to check this if the employees are aware that this could happen.

The employer is permitted to check this if a firewall is also installed.

The employer is in no way permitted to check the use of IT services by employees.

Loading …