Exin ISMP Exam Practice Test Instant Access

Question 1

In a company a personalized smart card is used for both physical and logical access control.

What is the main purpose of the person's picture on the smart card?

ATo authenticate the owner of the card

BTo authorize the owner of the card

CTo identify the role of the card owner

DTo verify the iris of the card owner

Answer : A

Question 2

The information security manager is writing the Information Security Management System (ISMS) documentation. The controls that are to be implemented must be described in one of the phases of the Plan-Do-

Check-Act (PDCA) cycle of the ISMS.

In which phase should these controls be described?

APlan

BDo

CCheck

DAct

Answer : A

Question 3

What is a risk treatment strategy?

AMobile updates

BRisk acceptance

CRisk exclusion

DSoftware installation

Answer : B

Question 4

Who should be asked to check compliance with the information security policy throughout the company?

AInternal audit department

BExternal forensics investigators

CThe same company that checks the yearly financial statement

Answer : B

Question 5

An information security officer is asked to write a retention policy for a financial system. She is aware of the fact that some data must be kept for a long time and other data must be deleted.

Where should she look for guidelines first?

AIn company policies

BIn finance management procedures

CIn legislation

Answer : C

Question 6

What is the best way to start setting the information security controls?

AImplement the security measures as prescribed by a risk analysis tool

BResort back to the default factory standards

CUse a standard security baseline

Answer : C

Question 7

The ambition of the security manager is to certify the organization against ISO/IEC 27001.

What is an activity in the certification program?

AFormulate the security requirements in the outsourcing contracts

BImplement the security baselines in Secure Systems Development Life Cycle (SecSDLC)

CPerform a risk assessment of the secure internet connectivity architecture of the datacenter

DProduce a Statement of Applicability based on risk assessments

Answer : D

Exin Information Security Management Professional based on ISO/IEC 27001 ISMP Exam Practice Test