ISFS

Review 77 ISFS practice questions with answer explanations and community insights.

Question 1

You are the owner of the courier company SpeeDelivery. You employ a few people who, while waiting to make a delivery, can carry out other tasks. You notice, however, that they use this time to send and read their private mail and surf the Internet. In legal terms, in which way can the use of the Internet and e-mail facilities be best regulated?

  1. Installing an application that makes certain websites no longer accessible and that filters attachments in e-mails
  2. Drafting a code of conduct for the use of the Internet and e-mail in which the rights and obligations of both the employer and staff are set down
  3. Implementing privacy regulations
  4. Installing a virus scanner

Question 2

What is an example of a physical security measure?

  1. A code of conduct that requires staff to adhere to the clear desk policy, ensuring that confidential information is not left visibly on the desk at the end of the work day
  2. An access control policy with passes that have to be worn visibly
  3. The encryption of confidential information
  4. Special fire extinguishers with inert gas, such as Argon

Question 3

What physical security measure is necessary to control access to company information?

  1. Air-conditioning
  2. Username and password
  3. The use of break-resistant glass and doors with the right locks, frames and hinges
  4. Prohibiting the use of USB sticks

Question 4

Why do organizations have an information security policy?

  1. In order to demonstrate the operation of the Plan-Do-Check-Act cycle within an organization.
  2. In order to ensure that staff do not break any laws.
  3. In order to give direction to how information security is set up within an organization.
  4. In order to ensure that everyone knows who is responsible for carrying out the backup procedures.

Question 5

You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?

  1. Formulate a policy regarding mobile media (PDAs, laptops, smartphones, USB sticks)
  2. Appoint security personnel
  3. Encrypt the hard drives of laptops and USB sticks
  4. Set up an access control policy
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.