EXIN,Inc EX0-105 Exam Training - Questions and Answers

EXIN,Inc
EXAM EX0-105
Q & A: 68
Information Security Foundation based on ISO/IEC 27002
http://www.passpeak.com/EX0-105.html
http://www.passpeak.com/pdf/EX0-105.pdf
Question: 1
Midwest Insurance controls access to its offices with a passkey system.
A. Corrective
B. Detective
C. Preventive
D. Repressive
Answer: C
Question: 2
What is not a criteria in the review process where it is determined whether segregation of duties is applicable for an employee?
A. In which decision *** processes the person in question is involved.
B. In which control processes the person in question is involved.
C. At which locations the person in question is active.
Answer: C
Question: 3
Physical security must protect a company for anyone to easily access the company assets. This is illustrated by thinking in terms of series of protection rings.
A. Building
B. Object
C. Outer ring
D. Working space
Answer: A
Question: 4
What is the physical equivalent of the logical information security measure Intrusion Detection System (IDS)?
A. Cameras
B. Cooling
C. Fire extinguishers
D. UPS
Answer: A
Question: 5
There are three types of human threats: Intentional human threats, Unintentional human threats and a third human threat.
A. Acts of stupidity
B. Social engineering
C. Technical human threats
Answer: B
Question: 6
What is the most important reason for applying segregation of duties?
A. Segregation of duties makes it clear who is responsible for what.
B. Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
C. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.
D. Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.
Answer: C