ISFS sample questions

Question 1

Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

Accepted Answer

Personal data protection legislation

Answer

ISO/IEC 27001:2005

Answer

Intellectual Property Rights

Answer

ISO/IEC 27002:2005

Question 2

What is the best description of a risk analysis?

Accepted Answer

A risk analysis helps to estimate the risks and develop the appropriate security measures.

Answer

A risk analysis is a method of mapping risks without looking at company processes.

Answer

A risk analysis calculates the exact financial consequences of damages.

Question 3

What is the greatest risk for an organization if no information security policy has been defined?

Accepted Answer

It is not possible for an organization to implement information security in a consistent manner.

Answer

If everyone works with the same account, it is impossible to find out who worked on what.

Answer

Information security activities are carried out by only a few people.

Answer

Too many measures are implemented.

Question 4

What is the relationship between data and information?

Accepted Answer

Information is the meaning and value assigned to a collection of data.

Answer

Data is structured information.

Question 5

Which type of malware builds a network of contaminated computers?

Accepted Answer

Storm Worm or Botnet

Answer

Logic Bomb

Answer

Trojan

Answer

Virus

Question 6

What is an example of a security incident?

Accepted Answer

A member of staff loses a laptop.

Answer

The lighting in the department no longer works.

Answer

You cannot set the correct fonts in your word processing software.

Answer

A file is saved under an incorrect name.

Question 7

You are the owner of the SpeeDelivery courier service. Last year you had a firewall installed. You now discover that no maintenance has been performed since the installation. What is the biggest risk because of this?

Accepted Answer

The risk that hackers can do as they wish on the network without detection

Answer

The risk that fire may break out in the server room

Answer

The risk of a virus outbreak

Answer

The risk of undesired e-mails

Question 8

What do employees need to know to report a security incident?

Accepted Answer

How to report an incident and to whom.

Answer

Whether the incident has occurred before and what was the resulting damage.

Answer

The measures that should have been taken to prevent the incident in the first place.

Answer

Who is responsible for the incident and whether it was intentional.

Question 9

What is an example of a good physical security measure?

Accepted Answer

All employees and visitors carry an access pass.

Answer

Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.

Answer

Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

Question 10

The act of taking organizational security measures is inextricably linked with all other measures that have to be taken. What is the name of the system that guarantees the coherence of information security in the organization?

Accepted Answer

Information Security Management System (ISMS)

Answer

Rootkit

Answer

Security regulations for special information for the government

Top vendors

Top exams

Free ISFS sample questions