Stale questions are worse than no questions. EXIN experts at Real4Prep check the EXIN Information Security Foundation based on ISO/IEC 27002 collection every day, adding what is current and cutting what is not, and your 2026 purchase includes 365 days of those updates for free.
EXIN EX0-105 Exam Overview:
| Certification Vendor: | EXIN |
|---|---|
| Exam Name: | Information Security Foundation based on ISO/IEC 27002 |
| Exam Number: | EX0-105 |
| Exam Price: | USD 200 (varies by country and test center) |
| Related Certifications: | ISO/IEC 27001 Foundation EXIN Information Security Management Professional EXIN Cyber and IT Security certifications |
| Real Exam Qty: | 40 |
| Available Languages: | English, Spanish, Portuguese, German, Dutch, French |
| Certificate Validity Period: | Lifetime (no expiration) |
| Passing Score: | 65% |
| Exam Duration: | 60 minutes |
| Exam Format: | Multiple choice |
| Sample Questions: |  |
| Exam Way: | Online proctored exam or authorized EXIN test center |
| Pre Condition: | No formal prerequisites required; basic IT knowledge recommended |
| Official Syllabus URL: | https://www.exin.com/certifications/information-security/ |
EXIN EX0-105 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: ISO/IEC 27002 Controls Overview | - Physical and environmental security controls - Security policy and organization of information security - Human resource security and awareness - Access control and identity management |
| Topic 2: Operational Security Practices | - Communication and compliance requirements - Incident management and response - Business continuity and disaster recovery |
| Topic 3: Information Security Fundamentals | - Security principles and risk concepts - Threats, vulnerabilities, and impacts - Confidentiality, Integrity, Availability (CIA triad) |
| Topic 4: Risk Management and Security Measures | - Security control selection and implementation - Monitoring and improvement of security controls - Risk assessment and treatment |
EX0-105 Exam Essentials: Frequently Asked Questions
EXIN Information Security Foundation based on ISO/IEC 27002 is an official EXIN certification exam, listed under the code EX0-105. Clearing it earns the EXIN Inc Certification certification, a Foundation-level credential. It also ties into EXIN Information Security Management Professional, ISO/IEC 27001 Foundation, EXIN Cyber and IT Security certifications, which makes it a useful anchor for a longer certification plan. For employers, the value is simple: the vendor itself has verified what you know.
You will work through 40 questions in 60 minutes on the EXIN Information Security Foundation based on ISO/IEC 27002 exam. The content is only half the battle; the clock is the other half. Train both at once: set the Real4Prep test engine to full timed mode, practice skipping and returning to stubborn items, and repeat until finishing with minutes to spare feels normal rather than lucky.
Passing EXIN Information Security Foundation based on ISO/IEC 27002 requires 65%, and the official registration fee is USD 200 (varies by country and test center). Remember that a retake bills the same USD 200 (varies by country and test center) all over again, so winging it is the most expensive strategy on the table. A better approach: benchmark yourself with the Real4Prep practice tests first, and schedule the real exam only once your scores sit comfortably and consistently above the requirement.
No formal prerequisites required; basic IT knowledge recommended
Requirements do evolve, so before you spend a registration fee, verify the current conditions on the official exam page.
Yes. The free demo on this page contains a portion of the complete EXIN Information Security Foundation based on ISO/IEC 27002 question set, enough to judge the accuracy and the clarity of the explanations for yourself. After purchase, updates are free for 365 days, and once your product expires you can extend the update service at a 50% discount.
Real4Prep provides a 100% money-back guarantee with clearly stated conditions. Take the EXIN Information Security Foundation based on ISO/IEC 27002 exam within 60 days of purchase; if you fail, you may claim a full refund, as long as the exam matches your product. Exams taken within 3 days of purchase are not eligible, and neither are products that were downloaded but never used, free materials, or expired orders; the candidate name must match the payer name. File the claim with a scanned enrollment slip and the official Score Report PDF within 2 days of the exam, and it is processed within 7 days. If you would rather exchange than refund, you can receive two other exam products of equal value free of charge and keep the update service on your original purchase.
Delivery is immediate: your purchase is downloadable right away and automatically emailed to you within one minute of successful payment. If nothing arrives within 2 hours, check your spam folder and contact customer service. You may install the software on as many computers as you wish.
The official EXIN Information Security Foundation based on ISO/IEC 27002 syllabus comprises 4 domains. The heaviest hitters are Information Security Fundamentals, ISO/IEC 27002 Controls Overview, and Risk Management and Security Measures. The complete outline sits above on this page; walk it top to bottom and mark every line you could not teach to someone else.
EXIN Information Security Foundation based on ISO/IEC 27002 Sample Questions:
Why is sensitive information graded?
- A. To improve awareness of employees
- B. To permit the recipient to archive received information
- C. To determine how the information should be processed
- D. To determine the applicable back-up scheme
Correct Answer: C 🗳️
Two friends want to exchange a confidential document by e-mail. They decide to use cryptography to protect the confidentiality of the document. To be able to encrypt alid decrypt the document they first exchange the key that is both used for encryption and decryption by phone.
What type of encryption system is used by the two friends?
- A. Symmetrical system
- B. Public Key Infrastructure (PKI)
- C. Asymmetrical system
Correct Answer: A 🗳️
Susan sends an email to Paul. Who determines the meaning and the value of information in this email?
- A. Susan, the sender of the information.
- B. Paul and Susan, the sender and the recipient of the information.
- C. Paul, the recipient of the information.
Correct Answer: C 🗳️
Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do?
- A. Issue a ban on the provision of personal information.
- B. Appoint a person responsible for supporting managers in adhering to the policy.
- C. Make the employees responsible for submitting their personal data.
- D. Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.
Correct Answer: D 🗳️
The company Midwest Insurance has taken many measures to protect its information. It uses an
Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?
- A. Encryption of information
- B. The use of tokens to gain access to information systems
- C. Validation of input and output data in applications
- D. Information Security Management System
Correct Answer: D 🗳️
Viewing page 1 out of 26 pages.
Viewing questions 1-5 out of 128 questions.
