ISO-IEC-LI 무료 덤프문제 온라인 액세스

Which of the following measures is a preventive measure?

• A.Putting sensitive information in a safe
• B.Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk
• C.Shutting down all internet traffic after a hacker has gained access to the company systems
• D.Installing a logging system that enables changes in a system to be recognized

Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?

• A.The costs for automating are easier to charge to the responsible departments.
• B.Reports can be developed more easily and with fewer errors.
• C.A determination can be made as to which report should be printed first and which ones can wait a little longer.
• D.Everyone can easily see how sensitive the reports' contents are by consulting the grading label.

You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of threats and risks.
What is the relation between a threat, risk and risk analysis?

• A.A risk analysis is used to remove the risk of a threat.
• B.A risk analysis identifies threats from the known risks.
• C.A risk analysis is used to clarify which threats are relevant and what risks they involve.
• D.Risk analyses help to find a balance between threats and risks.

ISO 27002 provides guidance in the following area

• A.Framework for an overall security and compliance program
• B.Information handling recommendations
• C.Detailed lists of required policies and procedures
• D.PCI environment scoping

Physical labels and ________ are two common forms of labeling which are mentioned in ISO 27002.

• A.teradata
• B.bridge
• C.metadata