ISFS sample questions

Question 1

What is an example of a security incident?

Accepted Answer

A member of staff loses a laptop.

Answer

The lighting in the department no longer works.

Answer

You cannot set the correct fonts in your word processing software.

Answer

A file is saved under an incorrect name.

Question 2

You are the owner of the SpeeDelivery courier service. Last year you had a firewall installed. You now discover that no maintenance has been performed since the installation. What is the biggest risk because of this?

Accepted Answer

The risk that hackers can do as they wish on the network without detection

Answer

The risk that fire may break out in the server room

Answer

The risk of a virus outbreak

Answer

The risk of undesired e-mails

Question 3

What do employees need to know to report a security incident?

Accepted Answer

How to report an incident and to whom.

Answer

Whether the incident has occurred before and what was the resulting damage.

Answer

The measures that should have been taken to prevent the incident in the first place.

Answer

Who is responsible for the incident and whether it was intentional.

Question 4

What is an example of a good physical security measure?

Accepted Answer

All employees and visitors carry an access pass.

Answer

Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.

Answer

Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

Question 5

The act of taking organizational security measures is inextricably linked with all other measures that have to be taken. What is the name of the system that guarantees the coherence of information security in the organization?

Accepted Answer

Information Security Management System (ISMS)

Answer

Rootkit

Answer

Security regulations for special information for the government

Question 6

You are the owner of the courier company SpeeDelivery. You employ a few people who, while waiting to make a delivery, can carry out other tasks. You notice, however, that they use this time to send and read their private mail and surf the Internet. In legal terms, in which way can the use of the Internet and e-mail facilities be best regulated?

Accepted Answer

Drafting a code of conduct for the use of the Internet and e-mail in which the rights and obligations of both the employer and staff are set down

Answer

Installing an application that makes certain websites no longer accessible and that filters attachments in e-mails

Answer

Implementing privacy regulations

Answer

Installing a virus scanner

Question 7

You have a small office in an industrial areA. You would like to analyze the risks your company faces. The office is in a pretty remote location; therefore, the possibility of arson is not entirely out of the question. What is the relationship between the threat of fire and the risk of fire?

Accepted Answer

The risk of fire is the threat of fire multiplied by the chance that the fire may occur and the consequences thereof.

Answer

The threat of fire is the risk of fire multiplied by the chance that the fire may occur and the consequences thereof.

Question 8

You have just started working at a large organization. You have been asked to sign a code of conduct as well as a contract. What does the organization wish to achieve with this?

Accepted Answer

A code of conduct helps to prevent the misuse of IT facilities.

Answer

A code of conduct is a legal obligation that organizations have to meet.

Answer

A code of conduct prevents a virus outbreak.

Answer

A code of conduct gives staff guidance on how to report suspected misuses of IT facilities.

Question 9

You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?

Accepted Answer

Formulate a policy regarding mobile media (PDAs, laptops, smartphones, USB sticks)

Answer

Appoint security personnel

Answer

Encrypt the hard drives of laptops and USB sticks

Answer

Set up an access control policy

Question 10

Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do?

Accepted Answer

Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.

Answer

Make the employees responsible for submitting their personal data.

Answer

Appoint a person responsible for supporting managers in adhering to the policy.

Answer

Issue a ban on the provision of personal information.

ISFS Sample Questions & Answers

Ready for the real thing?

ISFS Sample Questions & Answers

Related practice tests

Ready for the real thing?