In 2026, no internet connection should mean no progress. The online test engine for the EXIN Information Security Foundation based on ISO/IEC 27001 exam keeps working offline after download, so your 80 practice questions travel anywhere you do.
EXIN ISFS Exam Overview:
| Certification Vendor: | EXIN |
|---|---|
| Exam Name: | EXIN Information Security Foundation based on ISO/IEC 27001 |
| Exam Number: | ISFS (also referenced as EX0-105) |
| Exam Format: | Multiple-choice questions, Closed-book exam |
| Exam Duration: | 60 minutes |
| Exam Price: | USD 176–295 (varies by region/voucher) |
| Certificate Validity Period: | Lifetime / No expiration |
| Available Languages: | Japanese, English, Portuguese, Chinese, German, Spanish, Dutch |
| Passing Score: | 65% (26/40) |
| Real Exam Qty: | 40 |
| Related Certifications: | EXIN Information Security Management Professional (ISMP) EXIN Information Security Management Expert (ISME) |
| Recommended Training: | Foundations of Information Security (Van Haren Publishing) EXIN Accredited Training Providers |
| Exam Registration: | Official EXIN Registration |
| Sample Questions: | ![]() |
| Exam Way: | Online remote proctored or at accredited test centers |
| Pre Condition: | No formal prerequisites required |
| Official Syllabus URL: | https://www.exin.com/certifications/information-security-foundation-based-iso-iec-27001-exam |
EXIN ISFS Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Information and Security | 27.5% | - Confidentiality, Integrity, Availability (CIA) - Information protection in organizations - Concepts relating to information |
| Topic 2: Legislation and Compliance | 7.5% | - Relevant laws and regulations - ISMS implementation and maintenance - ISO/IEC 27001 and 27002 standards |
| Topic 3: Threats and Risks | 12.5% | - Risk management process - Risk assessment and treatment - Types of threats and vulnerabilities |
| Topic 4: Security Controls | 52.5% | - Operational controls - Technical/IT controls - Organizational controls - Physical controls - Control categories overview - People controls |
Studying for the EXIN Information Security Foundation based on ISO/IEC 27001 Exam: Answers
The EXIN Information Security Foundation based on ISO/IEC 27001 exam requires a score of 65% (26/40) to pass, and the official registration fee is USD 176–295 (varies by region/voucher). Because the fee is significant, preparing thoroughly the first time is the practical choice.
Every session in the test engine is scored and broken down, so you see clearly which topics you handle well and which ones keep costing you points. That picture tells you where your remaining study time belongs — a far better guide than rereading everything evenly.
The EXIN Information Security Foundation based on ISO/IEC 27001 exam contains 40 questions, and you will have 60 minutes minutes to complete them. Practicing within the same limits builds the pacing the real exam demands.
No formal prerequisites required
You can confirm the current eligibility requirements on the official ISFS exam page before you register.
This package includes 80 practice questions for the EXIN Information Security Foundation based on ISO/IEC 27001 exam. Every answer is verified by an experienced team of experts, so you can trust what you study.
You can register for the EXIN Information Security Foundation based on ISO/IEC 27001 exam through the official channels:
Yes. Once downloaded, the online test engine keeps running without an internet connection, on Windows, Mac, Android, or iOS. That means practice continues on flights, in waiting rooms, and anywhere else your day takes you — your ISFS preparation never has to pause for a missing signal.
The EXIN Information Security Foundation based on ISO/IEC 27001 practice questions are organized around the official exam objectives. Key topics include:
- Threats and Risks (12.5%)
- Information and Security (27.5%)
- Legislation and Compliance (7.5%)
Comparing your practice scores against these topics shows you where the next session should go.
Many candidates combine practice questions with official training. Recommended options include:
EXIN Information Security Foundation based on ISO/IEC 27001 Sample Questions:
You have an office that designs corporate logos. You have been working on a draft for a large client. Just as you are going to press the <save> button, the screen goes blank. The hard disk is damaged and cannot be repaired. You find an early version of the design in your mail folder and you reproduce the draft for the customer. What is such a measure called?
- A. Preventive measure
- B. Reductive measure
- C. Corrective measure
Correct Answer: C 🗳️
What is an example of a good physical security measure?
- A. All employees and visitors carry an access pass.
- B. Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.
- C. Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.
Correct Answer: A 🗳️
What is the greatest risk for an organization if no information security policy has been defined?
- A. Too many measures are implemented.
- B. If everyone works with the same account, it is impossible to find out who worked on what.
- C. Information security activities are carried out by only a few people.
- D. It is not possible for an organization to implement information security in a consistent manner.
Correct Answer: D 🗳️
Some threats are caused directly by people, others have a natural cause. What is an example of an intentional human threat?
- A. Loss of a USB stick
- B. Flood
- C. Lightning strike
- D. Arson
Correct Answer: D 🗳️
Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do?
- A. Make the employees responsible for submitting their personal data.
- B. Appoint a person responsible for supporting managers in adhering to the policy.
- C. Issue a ban on the provision of personal information.
- D. Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.
Correct Answer: D 🗳️
Viewing page 1 out of 16 pages.
Viewing questions 1-5 out of 80 questions.








