ISFS Information Security Foundation based on ISO/IEC 27002 Questions and Answers

You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and

now want to determine your risk strategy. You decide to take measures for the large risks but not

for the small risks. What is this risk strategy called?

There was a fire in a branch of the company Midwest Insurance. The fire department quickly

arrived at the scene and could extinguish the fire before it spread and burned down the entire

premises. The server, however, was destroyed in the fire. The backup tapes kept in another room

had melted and many other documents were lost for good. What is an example of the indirect

damage caused by this fire?

You work for a flexible employer who doesnt mind if you work from home or on the road. You

regularly take copies of documents with you on a USB memory stick that is not secure. What are

the consequences for the reliability of the information if you leave your USB memory stick behind

on the train?

Which of the following measures is a corrective measure?

Midwest Insurance controls access to its offices with a passkey system. We call this a preventive

measure. What are some other measures?

What is the best way to comply with legislation and regulations for personal data protection?

You work for a large organization. You notice that you have access to confidential information that you should not be able to access in your position. You report this security incident to the helpdesk. The incident cycle isinitiated. What are the stages of the security incident cycle?

Which one of the threats listed below can occur as a result of the absence of a physical measure?

Logging in to a computer system is an access-granting process consisting of three steps:

identification, authentication and authorization. What occurs during the first step of this process:

identification?