EX0-105 Practice Test

EX0-105 Practice Test practice questions, page 5 of 5, with answer review and explanations.

Question 21

What is the objective of classifying information?

  1. Authorizing the use of an information system
  2. Creating a label that indicates how confidential the information is
  3. Defining different levels of sensitivity into which information may be arranged
  4. Displaying on the document who is permitted access

Question 22

What do employees need to know to report a security incident?

  1. How to report an incident and to whom.
  2. Whether the incident has occurred before and what was the resulting damage.
  3. The measures that should have been taken to prevent the incident in the first place.
  4. Who is responsible for the incident and whether it was intentional.

Question 23

You have just started working at a large organization. You have been asked to sign a code of conduct as well as a contract. What does the organization wish to achieve with this?

  1. A code of conduct helps to prevent the misuse of IT facilities.
  2. A code of conduct is a legal obligation that organizations have to meet.
  3. A code of conduct prevents a virus outbreak.
  4. A code of conduct gives staff guidance on how to report suspected misuses of IT facilities.

Question 24

Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?

  1. The recipient, Rachel
  2. The person who drafted the insurance terms and conditions
  3. The manager, Linda
  4. The sender, Peter

Question 25

When we are at our desk, we want the information system and the necessary information to be available. We want to be able to work with the computer and access the network and our files. What is the correct definition of availability?

  1. The degree to which the system capacity is enough to allow all users to work with it
  2. The degree to which the continuity of an organization is guaranteed
  3. The degree to which an information system is available for the users
  4. The total amount of time that an information system is accessible to the users