[May-2022] Verified ISFS dumps Q&As – ISFS dumps with Correct Answers [Q45-Q61]

4/5 - (2 votes)

[May-2022] Verified ISFS dumps Q&As – ISFS dumps with Correct Answers

The Best Exin Certification Study Guide for the ISFS Exam

For more info visit:

NEW QUESTION 45
Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

ISO/IEC 27001:2005

Intellectual Property Rights

ISO/IEC 27002:2005

Personal data protection legislation

NEW QUESTION 46
What is an example of a security incident?

The lighting in the department no longer works.

A member of staff loses a laptop.

You cannot set the correct fonts in your word processing software.

A file is saved under an incorrect name.

NEW QUESTION 47
What is a repressive measure in the case of a fire?

Taking out fire insurance

Putting out a fire after it has been detected by a fire detector

Repairing damage caused by the fire

NEW QUESTION 48
Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?

The costs for automating are easier to charge to the responsible departments.

A determination can be made as to which report should be printed first and which one can wait a little longer.

Everyone can easiliy see how sensitive the reports’ contents are by consulting the grading label.

Reports can be developed more easily and with fewer errors.

NEW QUESTION 49
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk.
He asks you for your password. What kind of threat is this?

Natural threat

Organizational threat

Social Engineering

NEW QUESTION 50
What is the greatest risk for an organization if no information security policy has been defined?

If everyone works with the same account, it is impossible to find out who worked on what.

Information security activities are carried out by only a few people.

Too many measures are implemented.

It is not possible for an organization to implement information security in a consistent manner.

NEW QUESTION 51
What is an example of a non-human threat to the physical environment?

Fraudulent transaction

Corrupted file

Storm

Virus

NEW QUESTION 52
Under which condition is an employer permitted to check if Internet and email services in the workplace are being used for private purposes?

The employer is permitted to check this if the employee is informed after each instance of checking.

The employer is permitted to check this if the employees are aware that this could happen.

The employer is permitted to check this if a firewall is also installed.

The employer is in no way permitted to check the use of IT services by employees.

NEW QUESTION 53
A Dutch company requests to be listed on the American Stock Exchange. Which legislation within the scope of information security is relevant in this case?

Public Records Act

Dutch Tax Law

Sarbanes-Oxley Act

Security regulations for the Dutch government

NEW QUESTION 54
What is the best way to comply with legislation and regulations for personal data protection?

Performing a threat analysis

Maintaining an incident register

Performing a vulnerability analysis

Appointing the responsibility to someone

NEW QUESTION 55
Your organization has an office with space for 25 workstations. These workstations are all fully equipped and in use. Due to a reorganization 10 extra workstations are added, 5 of which are used for a call centre 24 hours per day. Five workstations must always be available. What physical security measures must be taken in order to ensure this?

Obtain an extra office and set up 10 workstations. You would therefore have spare equipment that can be used to replace any non-functioning equipment.

Obtain an extra office and set up 10 workstations. Ensure that there are security personnel both in the evenings and at night, so that staff can work there safely and securely.

Obtain an extra office and connect all 10 new workstations to an emergency power supply and UPS (Uninterruptible Power Supply). Adjust the access control system to the working hours of the new staff. Inform the building security personnel that work will also be carried out in the evenings and at night.

Obtain an extra office and provide a UPS (Uninterruptible Power Supply) for the five most important workstations.

NEW QUESTION 56
What is the most important reason for applying segregation of duties?

Segregation of duties makes it clear who is responsible for what.

Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.

Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.

Explanation

NEW QUESTION 57
What physical security measure is necessary to control access to company information?

Air-conditioning

Username and password

The use of break-resistant glass and doors with the right locks, frames and hinges

Prohibiting the use of USB sticks

NEW QUESTION 58
Your company has to ensure that it meets the requirements set down in personal data protection legislation.
What is the first thing you should do?

Make the employees responsible for submitting their personal data.

Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.

Appoint a person responsible for supporting managers in adhering to the policy.

Issue a ban on the provision of personal information.

NEW QUESTION 59
A couple of years ago you started your company which has now grown from 1 to 20 employees.
Your companys information is worth more and more and gone are the days when you could keep it all in hand yourself. You are aware that you have to take measures, but what should they be?
You hire a consultant who advises you to start with a qualitative risk analysis. What is a qualitative risk analysis?

This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.

This analysis is based on scenarios and situations and produces a subjective view of the possible threats.

Explanation

NEW QUESTION 60
In the organization where you work, information of a very sensitive nature is processed. Management is legally obliged to implement the highest-level security measures. What is this kind of risk strategy called?

Risk bearing

Risk avoiding

Risk neutral

NEW QUESTION 61
What is the most important reason for applying segregation of duties?

Segregation of duties makes it clear who is responsible for what.

Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.

Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.

Loading …

How to book the ISFS Exam

These are following steps for registering the Exin ISFS exam.
Step 1: Visit to Pearson VUE Exam Registration
Step 2: Signup/Login to Pearson VUE account
Step 3: Search for Exin ISFS Exam Certifications Exam
Step 4: Select Date, time and confirm with payment method

ISFS certification guide Q&A from Training Expert DumpsTests: https://www.dumpstests.com/ISFS-latest-test-dumps.html

[May-2022] Verified ISFS dumps Q&As – ISFS dumps with Correct Answers [Q45-Q61]

For more info visit:

How to book the ISFS Exam

No Responses

Leave a Reply Cancel reply

Related Certifications

ISFS Practice Tests

Recent Posts

Recent Comments

Categories