ISFS 試験問題を無料オンラインアクセス

Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do?

• A.Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.
• B.Issue a ban on the provision of personal information.
• C.Appoint a person responsible for supporting managers in adhering to the policy.
• D.Make the employees responsible for submitting their personal data.

There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good. What is an example of the indirect damage caused by this fire?

• A.Burned documents
• B.Melted backup tapes
• C.Water damage due to the fire extinguishers
• D.Burned computer systems

Which type of malware builds a network of contaminated computers?

• A.Trojan
• B.Logic Bomb
• C.Storm Worm or Botnet
• D.Virus

Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

• A.ISO/IEC 27002:2005
• B.Intellectual Property Rights
• C.ISO/IEC 27001:2005
• D.Personal data protection legislation

What is a risk analysis used for?

• A.A risk analysis is used in conjunction with security measures to reduce risks to an acceptable level.
• B.A risk analysis is used to ensure that security measures are deployed in a cost-effective and timely fashion.
• C.A risk analysis is used to express the value of information for an organization in monetary terms.
• D.A risk analysis is used to clarify to management their responsibilities.