Information Security Foundation based on ISOIEC 27002

Here you have the best Exin EX0-105 practice exam questions

You have 128 total questions to study from
Each page has 5 questions, making a total of 26 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on November 17, 2025
This site is not affiliated with or endorsed by Exin.

Question 1 of 128

You are the owner of the courier company SpeeDelivery. You employ a few people who, while waiting to make a delivery, can carry out other tasks. You notice, however, that they use this time to send and read their private mail and surf the Internet. In legal terms, in which way can the use of the Internet and e-mail facilities be best regulated?

Installing an application that makes certain websites no longer accessible and that filters attachments in e-mails

Drafting a code of conduct for the use of the Internet and e-mail in which the rights and obligations of both the employer and staff are set down

Implementing privacy regulations

Installing a virus scanner

Correct Answer: B

Question 2 of 128

What is an example of a physical security measure?

A code of conduct that requires staff to adhere to the clear desk policy, ensuring that confidential information is not left visibly on the desk at the end of the work day

An access control policy with passes that have to be worn visibly

The encryption of confidential information

Special fire extinguishers with inert gas, such as Argon

Correct Answer: D

Question 3 of 128

What physical security measure is necessary to control access to company information?

Air-conditioning

Username and password

The use of break-resistant glass and doors with the right locks, frames and hinges

Prohibiting the use of USB sticks

Correct Answer: C

Question 4 of 128

Why do organizations have an information security policy?

In order to demonstrate the operation of the Plan-Do-Check-Act cycle within an organization.

In order to ensure that staff do not break any laws.

In order to give direction to how information security is set up within an organization.

In order to ensure that everyone knows who is responsible for carrying out the backup procedures.

Correct Answer: C

Question 5 of 128

You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?

Formulate a policy regarding mobile media (PDAs, laptops, smartphones, USB sticks)

Appoint security personnel

Encrypt the hard drives of laptops and USB sticks

Set up an access control policy

Correct Answer: A