QUESTION 17
Which of the following is a possible event that can have a disruptive effect on the reliability of information?

QUESTION 18
Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

QUESTION 19
Who is authorized to change the classification of a document?

QUESTION 20
CEO sends a mail giving his views on the status of the company and the company’s future strategy and the CEO’s vision and the employee’s part in it. The mail should be classified as

QUESTION 21
What is the standard definition of ISMS?

QUESTION 22
What would be the reference for you to know who should have access to data/document?

QUESTION 23
You have a hard copy of a customer design document that you want to dispose off. What would you do

QUESTION 24
Often, people do not pick up their prints from a shared printer. How can this affect the confidentiality of information?

QUESTION 25
What controls can you do to protect sensitive data in your computer when you go out for lunch?

QUESTION 26
What is the worst possible action that an employee may receive for sharing his or her password or access with others?

QUESTION 27
Changes to the information processing facilities shall be done in controlled manner.

QUESTION 28
In acceptable use of Information Assets, which is the best practice?

QUESTION 29
As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

QUESTION 30
How are data and information related?

QUESTION 31
What is the name of the system that guarantees the coherence of information security in the organization?

QUESTION 32
Which of the following statements are correct for Clean Desk Policy?

QUESTION 33
A fire breaks out in a branch office of a health insurance company. The personnel are transferred to neighboring branches to continue their work.
Where in the incident cycle is moving to a stand-by arrangements found?

QUESTION 34
What is social engineering?

QUESTION 35
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.

QUESTION 36
A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?

QUESTION 37
What is the goal of classification of information?

QUESTION 38
Availability means