Free EXIN ISFS Exam Dumps Questions & Answers

What is the best description of a risk analysis?

• A.  A risk analysis helps to estimate the risks and develop the appropriate security measures.
• B.  A risk analysis calculates the exact financial consequences of damages.
• C.  A risk analysis is a method of mapping risks without looking at company processes.

You are the owner of the courier company SpeeDelivery. You employ a few people who, while waiting to make a delivery, can carry out other tasks. You notice, however, that they use this time to send and read their private mail and surf the Internet. In legal terms, in which way can the use of the Internet and e-mail facilities be best regulated?

• A.  Installing an application that makes certain websites no longer accessible and that filters attachments in e-mails
• B.  Drafting a code of conduct for the use of the Internet and e-mail in which the rights and obligations of both the employer and staff are set down
• C.  Implementing privacy regulations
• D.  Installing a virus scanner

There is a network printer in the hallway of the company where you work. Many employees dont pick up their printouts immediately and leave them in the printer. What are the consequences of this to the reliability of the information?

• A.  The integrity of the information is no longer guaranteed.
• B.  The confidentiality of the information is no longer guaranteed.
• C.  The availability of the information is no longer guaranteed.

Why is air-conditioning placed in the server room?

• A.  In the server room the air has to be cooled and the heat produced by the equipment has to be extracted. The air in the room is also dehumidified and filtered.
• B.  Backup tapes are made from thin plastic which cannot withstand high temperatures. Therefore, if it gets too hot in a server room, they may get damaged.
• C.  When a company wishes to cool its offices, the server room is the best place. This way, no office space needs to be sacrificed for such a large piece of equipment.
• D.  It is not pleasant for the maintenance staff to have to work in a server room that is too warm.

Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization. What occurs during the first step of this process: identification?

• A.  The first step consists of checking if the user is using the correct certificate.
• B.  The first step consists of granting access to the information to which the user is authorized.
• C.  The first step consists of comparing the password with the registered password.
• D.  The first step consists of checking if the user appears on the list of authorized users.