Pass ISMP Brain Dump Updated Certification Sample Questions [Q15-Q39]

Rate this post

Pass ISMP Brain Dump Updated Certification Sample Questions

Online ISMP Test Brain Dump Question and Test Engine

QUESTION 15
What is a risk treatment strategy?

Mobile updates

Risk acceptance

Risk exclusion

Software installation

QUESTION 16
The information security architect of a large service provider advocates an open design of the security architecture, as opposed to a secret design.
What is her main argument for this choice?

Open designs are easily configured.

Open designs have more functionality.

Open designs are tested extensively.

QUESTION 17
Security monitoring is an important control measure to make sure that the required security level is maintained. In order to realize 24/7 availability of the service, this service is outsourced to a partner in the cloud.
What should be an important control in the contract?

The network communication channel is secured by using encryption.

The third party is certified against ISO/IEC 27001.

The third party is certified for adhering to privacy protection controls.

Your IT auditor has the right to audit the external party’s service management processes.

QUESTION 18
A risk manager is asked to perform a complete risk assessment for a company.
What is the best method to identify most of the threats to the company?

Have a brainstorm with representatives of all stakeholders

Interview top management

Send a checklist for threat identification to all staff involved in information security

QUESTION 19
The handling of security incidents is done by the incident management process under guidelines of information security management. These guidelines call for several types of mitigation plans.
Which mitigation plan covers short-term recovery after a security incident has occurred?

The Business Continuity Plan (BCP)

The disaster recovery plan

The incident response plan

The risk treatment plan

QUESTION 20
In a company a personalized smart card is used for both physical and logical access control.
What is the main purpose of the person’s picture on the smart card?

To authenticate the owner of the card

To authorize the owner of the card

To identify the role of the card owner

To verify the iris of the card owner

QUESTION 21
What is the best way to start setting the information security controls?

Resort back to the default factory standards

Use a standard security baseline

Implement the security measures as prescribed by a risk analysis tool

QUESTION 22
An information security officer is asked to write a retention policy for a financial system. She is aware of the fact that some data must be kept for a long time and other data must be deleted.
Where should she look for guidelines first?

In company policies

In finance management procedures

In legislation

QUESTION 23
What is the main reason to use a firewall to separate two parts of your internal network?

To control traffic intensity between two network segments

To decrease network loads

To enable the installation of an Intrusion Detection System

To separate areas with different confidentiality requirements

QUESTION 24
A security architect argues with the internal fire prevention team about the statement in the information security policy, that doors to confidential areas should be locked at all times. The emergency response team wants to access to those areas in case of fire.
What is the best solution to this dilemma?

The security architect will be informed when there is a fire.

The doors should stay closed in case of fire to prevent access to confidential areas.

The doors will automatically open in case of fire.

QUESTION 25
Who should be asked to check compliance with the information security policy throughout the company?

Internal audit department

External forensics investigators

The same company that checks the yearly financial statement

QUESTION 26
A security manager for a large company has the task to achieve physical protection for corporate data stores.
Through which control can physical protection be achieved?

Having visitors sign in and out of the corporate datacenter

Using a firewall to prevent access to the network infrastructure

Using access control lists to prevent logical access to organizational infrastructure

Using key access controls for employees needing access

Loading …