准备 ISFS 考试问题 [2022] 最近更新的问题 [Q10-Q27]

Q10. Why do organizations have an information security policy?

Q11. Under which condition is an employer permitted to check if Internet and email services in the workplace are being used for private purposes?

Q12. 哪项是与信息安全有关的、可强加给所有组织的立法或监管法案？

Q13. 我的用户配置文件规定了我可以读写哪些网络驱动器。在这种逻辑访问管理类型中，我的访问权限是集中确定的，这种类型的名称是什么？

Q14. An airline company employee notices that she has access to one of the company’s applications that she has not used before. Is this an information security incident?

Q15. 什么行为是人类的无意威胁？

Q16. An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of the clients is earlier than the start date. What type of measure could prevent this error?

Q17. Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?

Q18. 史密斯咨询公司的信息安全经理（ISM）介绍了以下确保信息安全的措施：
-明确网络的安全要求。
-建立一个测试环境，用于测试来自数据库的报告。
-为员工的各种功能分配相应的访问权限。
–
大楼采用 RFID 出入证。这些措施中哪一项不是技术措施？

Q19. A couple of years ago you started your company which has now grown from 1 to 20 employees.
Your companys information is worth more and more and gone are the days when you could keep it all in hand yourself. You are aware that you have to take measures, but what should they be?
You hire a consultant who advises you to start with a qualitative risk analysis. What is a qualitative risk analysis?

Q20. In the organization where you work, information of a very sensitive nature is processed. Management is legally obliged to implement the highest-level security measures. What is this kind of risk strategy called?

Q21. You own a small company in a remote industrial areA. Lately, the alarm regularly goes off in the middle of the night. It takes quite a bit of time to respond to it and it seems to be a false alarm every time. You decide to set up a hidden camerA. What is such a measure called?

Q22. 贵组织有一间可容纳 25 个工作站的办公室。这些工作站都配备齐全并投入使用。由于重组，增加了 10 个额外的工作站，其中 5 个工作站每天 24 小时用于呼叫中心。5 个工作站必须始终可用。为了确保这一点，必须采取哪些实体安全措施？

Q23. A couple of years ago you started your company which has now grown from 1 to 20 employees. Your companys information is worth more and more and gone are the days when you could keep it all in hand yourself. You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis. What is a qualitative risk analysis?

Q24. 以下哪项措施属于纠正措施？

Q25. What is an example of a security incident?

Q26. 您工作的公司走廊里有一台网络打印机。许多员工没有立即取回打印的文件，而是把它们留在打印机里。这会对信息的可靠性造成什么影响？

Q27. You are the first to arrive at work in the morning and notice that the CD ROM on which you saved contracts yesterday has disappeared. You were the last to leave yesterday. When should you report this information security incident?