ISMP 무료 덤프문제 온라인 액세스

When should information security controls be considered?

• A.After the risk assessment
• B.During the risk assessment work
• C.At the kick-off meeting
• D.As part of the scoping meeting

Security monitoring is an important control measure to make sure that the required security level is maintained. In order to realize 24/7 availability of the service, this service is outsourced to a partner in the cloud.
What should be an important control in the contract?

• A.The third party is certified for adhering to privacy protection controls.
• B.The third party is certified against ISO/IEC 27001.
• C.The network communication channel is secured by using encryption.
• D.Your IT auditor has the right to audit the external party's service management processes.

A protocol to investigate fraud by employees is being designed.
Which measure can be part of this protocol?

• A.Investigate the contents of the workstation of the employee
• B.Investigate the private mailbox of the employee
• C.Put a phone tap on the employee's business phone
• D.Seize and investigate the private laptop of the employee

A security architect argues with the internal fire prevention team about the statement in the information security policy, that doors to confidential areas should be locked at all times. The emergency response team wants to access to those areas in case of fire.
What is the best solution to this dilemma?

• A.The security architect will be informed when there is a fire.
• B.The doors will automatically open in case of fire.
• C.The doors should stay closed in case of fire to prevent access to confidential areas.

The information security manager is writing the Information Security Management System (ISMS) documentation. The controls that are to be implemented must be described in one of the phases of the Plan-Do- Check-Act (PDCA) cycle of the ISMS.
In which phase should these controls be described?

• A.Act
• B.Do
• C.Plan
• D.Check