Exin ISMP Quiz 1 Topic 1 Questions 1-5

Question: 1

The information security manager is writing the Information Security Management System (ISMS) documentation. The controls that are to be implemented must be described in one of the phases of the Plan-Do-

Check-Act (PDCA) cycle of the ISMS.

In which phase should these controls be described?

APlan

BDo

CCheck

DAct

Show Answer

Question: 2

Zoning is a security control to separate physical areas with different security levels. Zones with higher security levels can be secured by more controls. The facility manager of a conference center is responsible for security.

What combination of business functions should be combined into one security zone?

ABoardroom and general office space

BComputer room and storage facility

CLobby and public restaurant

DMeeting rooms and Human Resource rooms

Show Answer

Question: 3

What is a key item that must be kept in mind when designing an enterprise-wide information security program?

AWhen defining controls follow an approach and framework that is consistent with organizational culture

BDetermine controls in the light of specific risks an organization is facing

CPut an enterprise-wide network and Host-Based Intrusion Detection and Prevention System (Host-Based IDPS) into place as soon as possible

DPut an incident management and log file analysis program in place immediately

Show Answer

Question: 4

A protocol to investigate fraud by employees is being designed.

Which measure can be part of this protocol?

ASeize and investigate the private laptop of the employee

BInvestigate the contents of the workstation of the employee

CInvestigate the private mailbox of the employee

DPut a phone tap on the employee's business phone

Show Answer

Question: 5

An information security officer is asked to write a retention policy for a financial system. She is aware of the fact that some data must be kept for a long time and other data must be deleted.

Where should she look for guidelines first?

AIn company policies

BIn finance management procedures

CIn legislation

Show Answer

Exin ISMP Quiz:1 Topic:1 Questions:1-5