Free EXIN EX0-105 Exam Dumps Questions & Answers

What is the most important reason for applying segregation of duties?

• A.  Segregation of duties makes it clear who is responsible for what.
• B.  Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
• C.  Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.
• D.  Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

A couple of years ago you started your company which has now grown from 1 to 20 employees.
Your company's information is worth more and more and gone are the days when you could keep it all in hand yourself. You are aware that you have to take measures, but what should they be?
You hire a consultant who advises you to start with a qualitative risk analysis. What is a qualitative risk analysis?

• A.  This analysis is based on scenarios and situations and produces a subjective view of the possible threats.
• B.  This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.

What action is an unintentional human threat?

• A.  Arson
• B.  Incorrect use of fire extinguishing equipment
• C.  Social engineering
• D.  Theft of a laptop

Susan sends an email to Paul. Who determines the meaning and the value of information in this email?

• A.  Susan, the sender of the information.
• B.  Paul, the recipient of the information.
• C.  Paul and Susan, the sender and the recipient of the information.

You are the owner of SpeeDelivery courier service. Because of your companys growth you have to think about information security. You know that you have to start creating a policy. Why is it so important to have an information security policy as a starting point?

• A.  The information security policy establishes who is responsible for which area of information security.
• B.  The information security policy supplies instructions for the daily practice of information security.
• C.  The information security policy gives direction to the information security efforts.
• D.  The information security policy establishes which devices will be protected.