ISMP：最新的EXIN認證ISMP考題，Information Security Management Professional based on ISO/IEC 27001認證

問題1
What is the main reason to use a firewall to separate two parts of your internal network?

A. To separate areas with different confidentiality requirements

B. To control traffic intensity between two network segments

C. To enable the installation of an Intrusion Detection System

D. To decrease network loads

正確答案: A

問題2
Recovery Time Objective (RTO) and Recovery Point Objective (RPO) are key terms in business continuity management (BCM). Reducing loss of data is one of the focus areas of a BCM policy.
What requirement is in the data recovery policy to realize minimal data loss?

A. Reduce RTO

B. Maximize RPO

C. Reduce the time between RTO and RPO

D. Reduce RPO

正確答案: D

問題3
Who should be asked to check compliance with the information security policy throughout the company?

A. Internal audit department

B. The same company that checks the yearly financial statement

C. External forensics investigators

正確答案: C

問題4
The security manager of a global company has decided that a risk assessment needs to be completed across the company.
What is the primary objective of the risk assessment?

A. Identify, quantify and prioritize the scope of this risk assessment

B. Identify, quantify and prioritize each of the business-critical assets residing on the corporate infrastructure

C. Identify, quantify and prioritize risks against criteria for risk acceptance

D. Identify, quantify and prioritize which controls are going to be used to mitigate risk

正確答案: C

最新的EXIN Information Security Management Professional based on ISO/IEC 27001 - ISMP免費考試真題

專業認證

品質保證

輕松通過

免費試用