Online Access Free ISOIEC20000LI Exam Questions

What action should UX Software take to mitigate residual risks? Refer to scenario 4.

• A.UX Software should evaluate, calculate, and document the value of risk reduction following risk treatment
• B.UX Software should immediately implement new controls to treat all residual risks
• C.UX Software should accept the residual risks only above the acceptance level

Why is the power/interest matrix used for?

• A.Define the information security and physical boundaries
• B.identify business requirements
• C.Determine and manage interested parties

Who should be involved, among others, in the draft, review, and validation of information security procedures?

• A.The information security committee
• B.An external expert
• C.The employees in charge of ISMS operation

Based on scenario 9. the top management decided to accept the risk related to a nonconformity to control 5.17 Authentication informal ion. is this acceptable?

• A.Acceptable, as the company properly informed the internal audit that they decided to accept the risk
• B.Unacceptable, the company should have provided justification for accepting the risks and documented it
• C.Acceptable, the company analyzed the implementation costs and accepted the risk

The application used by an organization has a complicated user interface. What does the complicated user interface represent in this case?

• A.A type of threat, since it may result in an unwanted incident
• B.An intrinsic vulnerability, since it is a characteristic of the asset
• C.An extrinsic vulnerability, since it is fin external factor that impacts the asset