Free EXIN ISFS Exam Dumps Questions & Answers

You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?

• A.  A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.
• B.  A code of conduct is a standard part of a labor contract.
• C.  A code of conduct specifies how employees are expected to conduct themselves and is the same for all companies.

A Dutch company requests to be listed on the American Stock Exchange. Which legislation within the scope of information security is relevant in this case?

• A.  Security regulations for the Dutch government
• B.  Public Records Act
• C.  Dutch Tax Law
• D.  Sarbanes-Oxley Act

A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

• A.  When the organization is located near a river.
• B.  When computer systems are kept in a cellar below ground level.
• C.  If the risk analysis has not been carried out.
• D.  When the computer systems are not insured.

You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?

• A.  Risk avoiding
• B.  Risk bearing
• C.  Risk neutral

What is an example of a physical security measure?

• A.  An access control policy with passes that have to be worn visibly
• B.  The encryption of confidential information
• C.  Special fire extinguishers with inert gas, such as Argon
• D.  A code of conduct that requires staff to adhere to the clear desk policy, ensuring that confidential information is not left visibly on the desk at the end of the work day