Free ISFS – Information Security Foundation (based on ISO/IEC 27002) (EX0-105) Practice Test Question

Select an option, then click Submit answer.

• ○

  In order to demonstrate the operation of the Plan-Do-Check-Act cycle within an organization.

• ○

  In order to ensure that staff do not break any laws.

• ○

  In order to give direction to how information security is set up within an organization.

• ○

  In order to ensure that everyone knows who is responsible for carrying out the backup procedures.
  

Select an option, then click Submit answer.

• ○

  Threat, Damage, Incident, Recovery

• ○

  Threat, Damage, Recovery, Incident

• ○

  Threat, Incident, Damage, Recovery

• ○

  Threat, Recovery, Incident, Damage
  

Select an option, then click Submit answer.

• ○

  To provide direction and support to information security

• ○

  To define all threats to and measures for ensuring information security

• ○

  To document all incidents that threaten the reliability of information

• ○

  To document all procedures required to maintain information security
  

Select an option, then click Submit answer.

• ○

  Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.

• ○

  By meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.

• ○

  When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.

• ○

  When an organization is compliant, it meets the requirements of privacy legislation and,
  in doing so, protects the reliability of its information.
  

Select an option, then click Submit answer.

• ○

  Taking out fire insurance

• ○

  Putting out a fire after it has been detected by a fire detector

• ○

  Repairing damage caused by the fire
  

Select an option, then click Submit answer.

• ○

  Human threat

• ○

  Natural threat

• ○

  Social Engineering
  

Select an option, then click Submit answer.

• ○

  Make the employees responsible for submitting their personal data.

• ○

  Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.

• ○

  Appoint a person responsible for supporting managers in adhering to the policy.

• ○

  Issue a ban on the provision of personal information.
  

Select an option, then click Submit answer.

• ○

  This incident should be reported immediately.

• ○

  You should first investigate this incident yourself and try to limit the damage.

• ○

  You should wait a few days before reporting this incident. The CD ROM can still reappear and, in that case, you will have made a fuss for nothing.
  

Select an option, then click Submit answer.

• ○

  How to report an incident and to whom.

• ○

  Whether the incident has occurred before and what was the resulting damage.

• ○

  The measures that should have been taken to prevent the incident in the first place.

• ○

  Who is responsible for the incident and whether it was intentional.
  

Select an option, then click Submit answer.

• ○

  The risk of fire is the threat of fire multiplied by the chance that the fire may occur and the consequences thereof.

• ○

  The threat of fire is the risk of fire multiplied by the chance that the fire may occur and the consequences thereof.