Exin ISMP Information Security Management Professional based on ISO/IEC 27001 Exam Exam Practice Test Questions

• Question 1

  Security monitoring is an important control measure to make sure that the required security level is maintained. In order to realize 24/7 availability of the service, this service is outsourced to a partner in the cloud.What should be an important control in the contract?

  • The network communication channel is secured by using encryption.
    
  • The third party is certified against ISO/IEC 27001.
    
  • The third party is certified for adhering to privacy protection controls.
    
  • Your IT auditor has the right to audit the external party's service management processes.
    

  Show Answer Answer: 4 Next

• Question 2

  A security architect argues with the internal fire prevention team about the statement in the information security policy, that doors to confidential areas should be locked at all times. The emergency response team wantsto access to those areas in case of fire.What is the best solution to this dilemma?

  • The security architect will be informed when there is a fire.
    
  • The doors should stay closed in case of fire to prevent access to confidential areas.
    
  • The doors will automatically open in case of fire.
    

  Show Answer Answer: 3 Next

• Question 3

  A protocol to investigate fraud by employees is being designed.Which measure can be part of this protocol?

  • Seize and investigate the private laptop of the employee
    
  • Investigate the contents of the workstation of the employee
    
  • Investigate the private mailbox of the employee
    
  • Put a phone tap on the employee's business phone
    

  Show Answer Answer: 2 Next

• Question 4

  A security manager just finished the final copy of a risk assessment. This assessment contains a list of identified risks and she has to determine how to treat these risks.What is the best option for the treatment of risks?

  • Begin risk remediation immediately as the organization is currently at risk
    
  • Decide the criteria for determining if the risk can be accepted
    
  • Design appropriate controls to reduce the risk
    
  • Remediate the risk regardless of cost
    

  Show Answer Answer: 2 Next

• Question 5

  In a company the IT strategy is migrating towards a Service Oriented Architecture (SOA) so that migrating to the cloud is better feasible in the future. The security architect is asked to make a first draft of the securityarchitecture.Which elements should the security architect draft?

  • Management and control of the security services
    
  • The information security policy, the risk assessment and the controls in the security services
    
  • Which security services are provided and in which supporting architectures are they defined
    

  Show Answer Answer: 3 Next