ISFS無料問題集「EXIN Information Security Foundation based on ISO/IEC 27001」

質問 1

There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good. What is an example of the indirect damage caused by this fire?

（A）Water damage due to the fire extinguishers

（B）Burned documents

（C）Burned computer systems

（D）Melted backup tapes

正解：A 解答を投票する

質問 2

Why is air-conditioning placed in the server room?

（A）It is not pleasant for the maintenance staff to have to work in a server room that is too warm.

（B）In the server room the air has to be cooled and the heat produced by the equipment has to be extracted. The air in the room is also dehumidified and filtered.

（C）Backup tapes are made from thin plastic which cannot withstand high temperatures. Therefore, if it gets too hot in a server room, they may get damaged.

（D）When a company wishes to cool its offices, the server room is the best place. This way, no office space needs to be sacrificed for such a large piece of equipment.

正解：B 解答を投票する

質問 3

Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?

（A）The recipient, Rachel

（B）The person who drafted the insurance terms and conditions

（C）The manager, Linda

（D）The sender, Peter

正解：A 解答を投票する

質問 4

In most organizations, access to the computer or the network is granted only after the user has entered a correct username and password. This process consists of 3 steps: identification, authentication and authorization. What is the purpose of the second step, authentication?

（A）During the authentication step, the system gives you the rights that you need, such as being able to read the data in the system.

（B）The system determines whether access may be granted by determining whether the token used is authentic.

（C）The authentication step checks the username against a list of users who have access to the system.

（D）In the second step, you make your identity known, which means you are given access to the system.

正解：B 解答を投票する

質問 5

Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

（A）Personal data protection legislation

（B）ISO/IEC 27002:2005

（C）Intellectual Property Rights

（D）ISO/IEC 27001:2005

正解：A 解答を投票する

質問 6

Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization. What occurs during the first step of this process: identification?

（A）The first step consists of comparing the password with the registered password.

（B）The first step consists of granting access to the information to which the user is authorized.

（C）The first step consists of checking if the user is using the correct certificate.

（D）The first step consists of checking if the user appears on the list of authorized users.

正解：D 解答を投票する

質問 7

Your organization has an office with space for 25 workstations. These workstations are all fully equipped and in use. Due to a reorganization 10 extra workstations are added, 5 of which are used for a call centre 24 hours per day. Five workstations must always be available. What physical security measures must be taken in order to ensure this?

（A）Obtain an extra office and set up 10 workstations. You would therefore have spare equipment that can be used to replace any non-functioning equipment.

（B）Obtain an extra office and set up 10 workstations. Ensure that there are security personnel both in the evenings and at night, so that staff can work there safely and securely.

（C）Obtain an extra office and provide a UPS (Uninterruptible Power Supply) for the five most important workstations.

（D）Obtain an extra office and connect all 10 new workstations to an emergency power supply and UPS (Uninterruptible Power Supply). Adjust the access control system to the working hours of the new staff. Inform the building security personnel that work will also be carried out in the evenings and at night.

正解：D 解答を投票する

質問 8

What is the goal of an organization's security policy?

（A）To document all incidents that threaten the reliability of information

（B）To provide direction and support to information security

（C）To define all threats to and measures for ensuring information security

（D）To document all procedures required to maintain information security

正解：B 解答を投票する

ISFS 無料問題集「EXIN Information Security Foundation based on ISO/IEC 27001」

弊社を連絡する

関連リンク

トップ試験