Two friends want to exchange a confidential document. It is important that eavesdroppers cannot see this information. Furthermore the receiver should be able to validate the sender and that the information is not altered during transport. Both friends have a…

After a thorough risk analysis and the identification of appropriate security controls, the management team decides that for one specific threat the impact should be covered by insurance. Which kind of risk treatment control is described here? A. Accept B.…

An employee detects abnormal behavior of her desktop computer. After reporting to the system administrator and a first investigation, the system administrators decide to get some help from the Computer emergency response Team (CERT). Which type of escalation is described…

What is the physical equivalent of the logical information security measure Intrusion Detection System (IDS)? A. Cameras B. Cooling C. Fire extinguishers D. UPS

An employee is about to lose his job and decides to delete as many documents as possible from the network storage server. In which main threat category does this threat belong? A. Disgruntled employee B. Intentional human threat C. Social…

What are the two main types of damage, resulting from incidents? A. Direct and indirect damage B. Financial and emotional damage C. Visible and invisible damage

The term ‘big data’ is commonly used. However data itself has less (or no) value for an organization. Which process adds value to the data and turns data into ‘information’? A. Analysis B. Archiving C. Back-up D. Duplication

Of which concept is ‘measures taken to safeguard an information system from attacks’ the definition? A. Risk analysis B. Risk management C. Security controls

An information security incident has several stages which together are known as the incident cycle. At different stages within this cycle different kinds of security measures are applied. At which stage of the incident cycle is the Intrusion detection system…

What is accomplished if reports are assigned the appropriate grading? A. The costs for automating are easier to charge to the responsible departments. B. A determination can be made as to which report should be printed first and which one…