Free Access EXIN.ISFS.v2022-06-21.q36 Practice Test (Page 6)

Question 21

What is the most important reason for applying segregation of duties?

A.Segregation of duties makes it clear who is responsible for what.

B.Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.

C.Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.

D.Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

Question 22

You are the first to arrive at work in the morning and notice that the CD ROM on which you saved contracts yesterday has disappeared. You were the last to leave yesterday. When should you report this information security incident?

A.You should first investigate this incident yourself and try to limit the damage.

B.This incident should be reported immediately.

C.You should wait a few days before reporting this incident. The CD ROM can still reappear and, in that case, you will have made a fuss for nothing.

Question 23

You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?

A.A code of conduct specifies how employees are expected to conduct themselves and is the same for all companies.

B.A code of conduct is a standard part of a labor contract.

C.A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.

Question 24

The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?

A.Information Security Management System

B.Encryption of information

C.Validation of input and output data in applications

D.The use of tokens to gain access to information systems

Question 25

In most organizations, access to the computer or the network is granted only after the user has entered a correct username and password. This process consists of 3 steps: identification, authentication and authorization. What is the purpose of the second step, authentication?

A.During the authentication step, the system gives you the rights that you need, such as being able to read the data in the system.

B.The authentication step checks the username against a list of users who have access to the system.

C.The system determines whether access may be granted by determining whether the token used is authentic.

D.In the second step, you make your identity known, which means you are given access to the system.

Other Version: 806EXIN.ISFS.v2023-09-18.q33; 1062EXIN.ISFS.v2022-02-26.q33; 85EXIN.Trainingdump.ISFS.v2021-11-11.by.walter.33q.pdf

Latest Upload: 157Huawei.H12-811_V1.0.v2025-10-02.q205; 117PMI.PfMP.v2025-10-02.q265; 123EMC.D-NWR-DY-01.v2025-10-02.q145; 142Salesforce.Public-Sector-Solutions.v2025-10-01.q106; 121Microsoft.SC-300.v2025-10-01.q358; 106Snowflake.DSA-C03.v2025-10-01.q105; 109Fortinet.NSE7_SDW-7.2.v2025-10-01.q108; 120Scrum.PAL-I.v2025-09-30.q47; 119SAP.C-C4H22-2411.v2025-09-30.q28; 149LinuxFoundation.CKAD.v2025-09-29.q102

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File