Free EX0-105 Questions for EXIN Information Security Foundation based on ISO/IEC 27002 EX0-105 Exam as PDF & Practice Test Engine

Exam Code/Number: EX0-105
Exam Name/Title: Information Security Foundation based on ISO/IEC 27002
Certification Provider: EXIN
Corresponding Certification: EXIN Inc Certification

Exam Questions: 128
Updated On: Aug 13, 2026

Question #1

What is the definition of the Annual Loss Expectancy?

A. The Annual Loss Expectancy is the average damage calculated by insurance companies for businesses in a country.

B. The Annual Loss Expectancy is the amount of damage that can occur as a result of an incident during the year.

C. The Annual Loss Expectancy is the size of the damage claims resulting from not having carried out risk analyses effectively.

D. The Annual Loss Expectancy is the minimum amount for which an organization must insure itself.

Discussion 0

Correct Answer: B Vote an answer

Question #2

You are a consultant and are regularly hired by the Ministry of Defense to perform analyses.
Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?

A. Confidentiality

B. Integrity

C. Availability

Discussion 0

Correct Answer: A Vote an answer

Question #3

Which measure assures that valuable information is not left out available for the taking?

A. Infra-red detection

B. Clear desk policy

C. Access passes

Discussion 0

Correct Answer: B Vote an answer

Question #4

You are the owner of SpeeDelivery courier service. Because of your companys growth you have to think about information security. You know that you have to start creating a policy. Why is it so important to have an information security policy as a starting point?

A. The information security policy establishes who is responsible for which area of information security.

B. The information security policy supplies instructions for the daily practice of information security.

C. The information security policy establishes which devices will be protected.

D. The information security policy gives direction to the information security efforts.

Discussion 0

Correct Answer: D Vote an answer

Question #5

What is the most important reason for applying segregation of duties?

A. Segregation of duties makes it clear who is responsible for what.

B. Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.

C. Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.

D. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

Discussion 0

Correct Answer: D Vote an answer

Question #6

My user profile specifies which network drives I can read and write to. What is the name of the type of logical access management wherein my access and rights are determined centrally?

A. Mandatory Access Control (MAC)

B. Discretionary Access Control (DAC)

C. Public Key Infrastructure (PKI)

Discussion 0

Correct Answer: A Vote an answer

Question #7

You are the first to arrive at work in the morning and notice that the CD ROM on which you saved contracts yesterday has disappeared. You were the last to leave yesterday. When should you report this information security incident?

A. This incident should be reported immediately.

B. You should wait a few days before reporting this incident. The CD ROM can still reappear and, in that case, you will have made a fuss for nothing.

C. You should first investigate this incident yourself and try to limit the damage.

Discussion 0

Correct Answer: A Vote an answer

Question #8

You have an office that designs corporate logos. You have been working on a draft for a large client. Just as you are going to press the <save> button, the screen goes blank. The hard disk is damaged and cannot be repaired. You find an early version of the design in your mail folder and you reproduce the draft for the customer. What is such a measure called?

A. Reductive measure

B. Corrective measure

C. Preventive measure

Discussion 0

Correct Answer: B Vote an answer

Question #9

What is the goal of an organization's security policy?

A. To provide direction and support to information security

B. To document all procedures required to maintain information security

C. To document all incidents that threaten the reliability of information

D. To define all threats to and measures for ensuring information security

Discussion 0

Correct Answer: A Vote an answer

Free EX0-105 Questions for EXIN Information Security Foundation based on ISO/IEC 27002 EX0-105 Exam as PDF & Practice Test Engine

Download Free EXIN EX0-105 Demo