EX0-105 Practice Test

EX0-105 Practice Test practice questions, page 4 of 5, with answer review and explanations.

Question 16

We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information?

  1. Availability, Information Value and Confidentiality
  2. Availability, Integrity and Confidentiality
  3. Availability, Integrity and Completeness
  4. Timeliness, Accuracy and Completeness

Question 17

Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do?

  1. Make the employees responsible for submitting their personal data.
  2. Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.
  3. Appoint a person responsible for supporting managers in adhering to the policy.
  4. Issue a ban on the provision of personal information.

Question 18

What sort of security does a Public Key Infrastructure (PKI) offer?

  1. It provides digital certificates which can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent.
  2. Having a PKI shows customers that a web-based business is secure.
  3. By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.
  4. A PKI ensures that backups of company data are made on a regular basis.

Question 19

An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of the clients is earlier than the start date. What type of measure could prevent this error?

  1. Availability measure
  2. Integrity measure
  3. Organizational measure
  4. Technical measure

Question 20

What is the greatest risk for an organization if no information security policy has been defined?

  1. If everyone works with the same account, it is impossible to find out who worked on what.
  2. Information security activities are carried out by only a few people.
  3. Too many measures are implemented.
  4. It is not possible for an organization to implement information security in a consistent manner.