Free ISFS Questions for EXIN Information Security Foundation based on ISO/IEC 27001 ISFS Exam as PDF & Practice Test Engine

Exam Code/Number: ISFS
Exam Name/Title: Information Security Foundation based on ISO/IEC 27001
Certification Provider: EXIN
Corresponding Certification: Exin Certification

Exam Questions: 80
Updated On: Jun 21, 2026

Question #1

What is an example of a physical security measure?

A. An access control policy with passes that have to be worn visibly

B. The encryption of confidential information

C. Special fire extinguishers with inert gas, such as Argon

D. A code of conduct that requires staff to adhere to the clear desk policy, ensuring that confidential information is not left visibly on the desk at the end of the work day

Discussion 0

Correct Answer: C Vote an answer

Question #2

An airline company employee notices that she has access to one of the company's applications that she has not used before. Is this an information security incident?

A. Yes

B. No

Discussion 0

Correct Answer: B Vote an answer

Question #3

What is an example of a good physical security measure?

A. Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

B. All employees and visitors carry an access pass.

C. Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.

Discussion 0

Correct Answer: B Vote an answer

Question #4

You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password. What kind of threat is this?

A. Natural threat

B. Organizational threat

C. Social Engineering

Discussion 0

Correct Answer: C Vote an answer

Question #5

Why is compliance important for the reliability of the information?

A. Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.

B. When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.

C. When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.

D. By meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.

Discussion 0

Correct Answer: D Vote an answer

Question #6

There is a network printer in the hallway of the company where you work. Many employees dont pick up their printouts immediately and leave them in the printer. What are the consequences of this to the reliability of the information?

A. The integrity of the information is no longer guaranteed.

B. The availability of the information is no longer guaranteed.

C. The confidentiality of the information is no longer guaranteed.

Discussion 0

Correct Answer: C Vote an answer

Question #7

You are the first to arrive at work in the morning and notice that the CD ROM on which you saved contracts yesterday has disappeared. You were the last to leave yesterday. When should you report this information security incident?

A. This incident should be reported immediately.

B. You should wait a few days before reporting this incident. The CD ROM can still reappear and, in that case, you will have made a fuss for nothing.

C. You should first investigate this incident yourself and try to limit the damage.

Discussion 0

Correct Answer: A Vote an answer

Question #8

You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?

A. A code of conduct is a standard part of a labor contract.

B. A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.

C. A code of conduct specifies how employees are expected to conduct themselves and is the same for all companies.

Discussion 0

Correct Answer: B Vote an answer

Free ISFS Questions for EXIN Information Security Foundation based on ISO/IEC 27001 ISFS Exam as PDF & Practice Test Engine

Download Free EXIN ISFS Demo