ISFS 무료 덤프문제 온라인 액세스

You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?

• A.Risk avoiding
• B.Risk bearing
• C.Risk neutral

What is the objective of classifying information?

• A.Displaying on the document who is permitted access
• B.Defining different levels of sensitivity into which information may be arranged
• C.Creating a label that indicates how confidential the information is
• D.Authorizing the use of an information system

What is a risk analysis used for?

• A.A risk analysis is used to clarify to management their responsibilities.
• B.A risk analysis is used in conjunction with security measures to reduce risks to an acceptable level.
• C.A risk analysis is used to express the value of information for an organization in monetary terms.
• D.A risk analysis is used to ensure that security measures are deployed in a cost-effective and timely fashion.

A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the companys staff. Which kind of security measure could have prevented this?

• A.A technical security measure
• B.A physical security measure
• C.An organizational security measure

A well executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives. What is not one of the four main objectives of a risk analysis?

• A.Establishing a balance between the costs of an incident and the costs of a security measure
• B.Identifying assets and their value
• C.Determining the costs of threats
• D.Determining relevant vulnerabilities and threats