Online Access Free ISFS Practice Test

A Dutch company requests to be listed on the American Stock Exchange. Which legislation within the scope of information security is relevant in this case?

• A.Sarbanes-Oxley Act
• B.Public Records Act
• C.Dutch Tax Law
• D.Security regulations for the Dutch government

An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of the clients is earlier than the start date. What type of measure could prevent this error?

• A.Availability measure
• B.Integrity measure
• C.Organizational measure
• D.Technical measure

Which of these is not malicious software?

• A.Worm
• B.Spyware
• C.Phishing
• D.Virus

A well executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives. What is not one of the four main objectives of a risk analysis?

• A.Determining relevant vulnerabilities and threats
• B.Determining the costs of threats
• C.Identifying assets and their value
• D.Establishing a balance between the costs of an incident and the costs of a security measure

Some security measures are optional. Other security measures must always be implemented. Which measure(s) must always be implemented?

• A.Physical security measures
• B.Measures required by laws and regulations
• C.Logical access security measures
• D.Clear Desk Policy