最新的EXIN ISMP免費考試真題

問題1

What is a key item that must be kept in mind when designing an enterprise-wide information security program?

A. Determine controls in the light of specific risks an organization is facing

B. When defining controls follow an approach and framework that is consistent with organizational culture

C. Put an enterprise-wide network and Host-Based Intrusion Detection and Prevention System (Host-Based IDPS) into place as soon as possible

D. Put an incident management and log file analysis program in place immediately

正確答案: A

問題2

A security manager just finished the final copy of a risk assessment. This assessment contains a list of identified risks and she has to determine how to treat these risks.
What is the best option for the treatment of risks?

A. Design appropriate controls to reduce the risk

B. Remediate the risk regardless of cost

C. Begin risk remediation immediately as the organization is currently at risk

D. Decide the criteria for determining if the risk can be accepted

正確答案: D

問題3

A risk manager is asked to perform a complete risk assessment for a company.
What is the best method to identify most of the threats to the company?

A. Send a checklist for threat identification to all staff involved in information security

B. Have a brainstorm with representatives of all stakeholders

C. Interview top management

正確答案: B

問題4

The handling of security incidents is done by the incident management process under guidelines of information security management. These guidelines call for several types of mitigation plans.
Which mitigation plan covers short-term recovery after a security incident has occurred?

A. The disaster recovery plan

B. The incident response plan

C. The Business Continuity Plan (BCP)

D. The risk treatment plan

正確答案: B

最新的EXIN Information Security Management Professional based on ISO/IEC 27001 - ISMP免費考試真題

聯系我們

站內鏈接

最新更新