Free EXIN ISFS Exam Dumps Questions & Answers

What is the goal of an organization's security policy?

• A.To define all threats to and measures for ensuring information security
• B.To document all incidents that threaten the reliability of information
• C.To provide direction and support to information security
• D.To document all procedures required to maintain information security

What is the best way to comply with legislation and regulations for personal data protection?

• A.Performing a threat analysis
• B.Performing a vulnerability analysis
• C.Maintaining an incident register
• D.Appointing the responsibility to someone

You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?

• A.Formulate a policy regarding mobile media (PDAs, laptops, smartphones, USB sticks)
• B.Set up an access control policy
• C.Encrypt the hard drives of laptops and USB sticks
• D.Appoint security personnel

Your organization has an office with space for 25 workstations. These workstations are all fully equipped and in use. Due to a reorganization 10 extra workstations are added, 5 of which are used for a call centre 24 hours per day. Five workstations must always be available. What physical security measures must be taken in order to ensure this?

• A.Obtain an extra office and provide a UPS (Uninterruptible Power Supply) for the five most important workstations.
• B.Obtain an extra office and set up 10 workstations. You would therefore have spare equipment that can be used to replace any non-functioning equipment.
• C.Obtain an extra office and set up 10 workstations. Ensure that there are security personnel both in the evenings and at night, so that staff can work there safely and securely.
• D.Obtain an extra office and connect all 10 new workstations to an emergency power supply and UPS (Uninterruptible Power Supply). Adjust the access control system to the working hours of the new staff. Inform the building security personnel that work will also be carried out in the evenings and at night.

The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?

• A.Information Security Management System
• B.The use of tokens to gain access to information systems
• C.Encryption of information
• D.Validation of input and output data in applications