Free EXIN ISFS Exam Dumps Questions & Answers

You have an office that designs corporate logos. You have been working on a draft for a large client. Just as you are going to press the <save> button, the screen goes blank. The hard disk is damaged and cannot be repaired. You find an early version of the design in your mail folder and you reproduce the draft for the customer. What is such a measure called?

• A.Corrective measure
• B.Preventive measure
• C.Reductive measure

Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do?

• A.Issue a ban on the provision of personal information.
• B.Make the employees responsible for submitting their personal data.
• C.Appoint a person responsible for supporting managers in adhering to the policy.
• D.Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.

The consultants at Smith Consultants Inc. work on laptops that are protected by asymmetrical cryptography. To keep the management of the keys cheap, all consultants use the same key pair. What is the companys risk if they operate in this manner?

• A.If the private key becomes known all laptops must be supplied with new keys.
• B.If the public key becomes known all laptops must be supplied with new keys.
• C.If the Public Key Infrastructure (PKI) becomes known all laptops must be supplied with new keys.

Why is compliance important for the reliability of the information?

• A.When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.
• B.Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.
• C.When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.
• D.By meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.

What is the best description of a risk analysis?

• A.A risk analysis calculates the exact financial consequences of damages.
• B.A risk analysis helps to estimate the risks and develop the appropriate security measures.
• C.A risk analysis is a method of mapping risks without looking at company processes.