Information Security Foundation Free Sample Questions

ISO/IEC 27001:2005

Intellectual Property Rights

ISO/IEC 27002:2005

Personal data protection legislation

A risk analysis is a method of mapping risks without looking at company processes.

A risk analysis helps to estimate the risks and develop the appropriate security measures.

A risk analysis calculates the exact financial consequences of damages.

If everyone works with the same account, it is impossible to find out who worked on what.

Information security activities are carried out by only a few people.

Too many measures are implemented.

It is not possible for an organization to implement information security in a consistent manner.

Data is structured information.

Information is the meaning and value assigned to a collection of data.

Logic Bomb

Storm Worm or Botnet

Trojan

Virus

The lighting in the department no longer works.

A member of staff loses a laptop.

You cannot set the correct fonts in your word processing software.

A file is saved under an incorrect name.

The risk that hackers can do as they wish on the network without detection

The risk that fire may break out in the server room

The risk of a virus outbreak

The risk of undesired e-mails

How to report an incident and to whom.

Whether the incident has occurred before and what was the resulting damage.

The measures that should have been taken to prevent the incident in the first place.

Who is responsible for the incident and whether it was intentional.

All employees and visitors carry an access pass.

Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.

Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

Information Security Management System (ISMS)

Rootkit

Security regulations for special information for the government