ISMP 무료 덤프문제 온라인 액세스

When should information security controls be considered?

• A.At the kick-off meeting
• B.After the risk assessment
• C.As part of the scoping meeting
• D.During the risk assessment work

The handling of security incidents is done by the incident management process under guidelines of information security management. These guidelines call for several types of mitigation plans.
Which mitigation plan covers short-term recovery after a security incident has occurred?

• A.The Business Continuity Plan (BCP)
• B.The disaster recovery plan
• C.The risk treatment plan
• D.The incident response plan

A protocol to investigate fraud by employees is being designed.
Which measure can be part of this protocol?

• A.Seize and investigate the private laptop of the employee
• B.Put a phone tap on the employee's business phone
• C.Investigate the contents of the workstation of the employee
• D.Investigate the private mailbox of the employee

A security architect argues with the internal fire prevention team about the statement in the information security policy, that doors to confidential areas should be locked at all times. The emergency response team wants to access to those areas in case of fire.
What is the best solution to this dilemma?

• A.The security architect will be informed when there is a fire.
• B.The doors will automatically open in case of fire.
• C.The doors should stay closed in case of fire to prevent access to confidential areas.

What is a risk treatment strategy?

• A.Risk acceptance
• B.Mobile updates
• C.Risk exclusion
• D.Software installation