ISFS sample questions

Question 1

What is the greatest risk for an organization if no information security policy has been defined?

Accepted Answer

It is not possible for an organization to implement information security in a consistent manner.

Answer

If everyone works with the same account, it is impossible to find out who worked on what.

Answer

Information security activities are carried out by only a few people.

Answer

Too many measures are implemented.

Question 2

What is the relationship between data and information?

Accepted Answer

Information is the meaning and value assigned to a collection of data.

Answer

Data is structured information.

Question 3

Which type of malware builds a network of contaminated computers?

Accepted Answer

Storm Worm or Botnet

Answer

Logic Bomb

Answer

Trojan

Answer

Virus

Question 4

What is an example of a security incident?

Accepted Answer

A member of staff loses a laptop.

Answer

The lighting in the department no longer works.

Answer

You cannot set the correct fonts in your word processing software.

Answer

A file is saved under an incorrect name.

Question 5

You are the owner of the SpeeDelivery courier service. Last year you had a firewall installed. You now discover that no maintenance has been performed since the installation. What is the biggest risk because of this?

Accepted Answer

The risk that hackers can do as they wish on the network without detection

Answer

The risk that fire may break out in the server room

Answer

The risk of a virus outbreak

Answer

The risk of undesired e-mails

Question 6

What do employees need to know to report a security incident?

Accepted Answer

How to report an incident and to whom.

Answer

Whether the incident has occurred before and what was the resulting damage.

Answer

The measures that should have been taken to prevent the incident in the first place.

Answer

Who is responsible for the incident and whether it was intentional.

Question 7

What is an example of a good physical security measure?

Accepted Answer

All employees and visitors carry an access pass.

Answer

Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.

Answer

Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

Question 8

The act of taking organizational security measures is inextricably linked with all other measures that have to be taken. What is the name of the system that guarantees the coherence of information security in the organization?

Accepted Answer

Information Security Management System (ISMS)

Answer

Rootkit

Answer

Security regulations for special information for the government

Question 9

You are the owner of the courier company SpeeDelivery. You employ a few people who, while waiting to make a delivery, can carry out other tasks. You notice, however, that they use this time to send and read their private mail and surf the Internet. In legal terms, in which way can the use of the Internet and e-mail facilities be best regulated?

Accepted Answer

Drafting a code of conduct for the use of the Internet and e-mail in which the rights and obligations of both the employer and staff are set down

Answer

Installing an application that makes certain websites no longer accessible and that filters attachments in e-mails

Answer

Implementing privacy regulations

Answer

Installing a virus scanner

Question 10

You have a small office in an industrial areA. You would like to analyze the risks your company faces. The office is in a pretty remote location; therefore, the possibility of arson is not entirely out of the question. What is the relationship between the threat of fire and the risk of fire?

Accepted Answer

The risk of fire is the threat of fire multiplied by the chance that the fire may occur and the consequences thereof.

Answer

The threat of fire is the risk of fire multiplied by the chance that the fire may occur and the consequences thereof.

Free ISFS sample questions