Information Security Management Professional based on ISO/IEC 27001 (ISMP) Free Practice Test

Question 1

What is the best way to start setting the information security controls?

A. Resort back to the default factory standards

B. Implement the security measures as prescribed by a risk analysis tool

C. Use a standard security baseline

Correct Answer: C

Question 2

A security manager for a large company has the task to achieve physical protection for corporate data stores.
Through which control can physical protection be achieved?

A. Using a firewall to prevent access to the network infrastructure

B. Having visitors sign in and out of the corporate datacenter

C. Using access control lists to prevent logical access to organizational infrastructure

D. Using key access controls for employees needing access

Correct Answer: D

Question 3

A company's webshop offers prospects and customers the possibility to search the catalog and place orders around the clock. In order to satisfy the needs of both customer and business several requirements have to be met. One of the criteria is data classification.
What is the most important classification aspect of the unit price of an object in a 24h webshop?

A. Availability

B. Confidentiality

C. Integrity

Correct Answer: A

Question 4

The Board of Directors of an organization is accountable for obtaining adequate assurance.
Who should be responsible for coordinating the information security awareness campaigns?

A. The user

B. The operational manager

C. The Board of Directors

D. The security manager

Correct Answer: D

Welcome to TestSimulate

EXIN Information Security Management Professional based on ISO/IEC 27001 (ISMP) Free Practice Test