Online Access Free ISMP Exam Questions

The ambition of the security manager is to certify the organization against ISO/IEC 27001.
What is an activity in the certification program?

• A.Produce a Statement of Applicability based on risk assessments
• B.Formulate the security requirements in the outsourcing contracts
• C.Perform a risk assessment of the secure internet connectivity architecture of the datacenter
• D.Implement the security baselines in Secure Systems Development Life Cycle (SecSDLC)

It is important that an organization is able to prove compliance with information standards and legislation. One of the most important areas is documentation concerning access management. This process contains a number of activities including granting rights, monitoring identity status, logging, tracking access and removing rights. Part of these controls are audit trail records which may be used as evidence for both internal and external audits.
What component of the audit trail is the most important for an external auditor?

• A.Log review, consolidation and management
• B.System-specific policies for business systems
• C.Access criteria and access control mechanisms

The information security architect of a large service provider advocates an open design of the security architecture, as opposed to a secret design.
What is her main argument for this choice?

• A.Open designs are easily configured.
• B.Open designs have more functionality.
• C.Open designs are tested extensively.

Who should be asked to check compliance with the information security policy throughout the company?

• A.Internal audit department
• B.The same company that checks the yearly financial statement
• C.External forensics investigators

The information security manager is writing the Information Security Management System (ISMS) documentation. The controls that are to be implemented must be described in one of the phases of the Plan-Do- Check-Act (PDCA) cycle of the ISMS.
In which phase should these controls be described?

• A.Check
• B.Do
• C.Plan
• D.Act