Exin ISMP Exam Questions Instant Access - No Installation Required

Question 1

An employee has worked on the organizational risk assessment. The goal of the assessment is not to bring residual risks to zero, but to bring the residual risks in line with an organization's risk appetite.

When has the risk assessment program accomplished its primary goal?

AOnce the controls are implemented

BOnce the transference of the risk is complete

CWhen decision makers have been informed of uncontrolled risks and proper authority groups decide to leave the risks in place

DWhen the risk analysis is completed

Answer : C

Question 2

Who should be asked to check compliance with the information security policy throughout the company?

AInternal audit department

BExternal forensics investigators

CThe same company that checks the yearly financial statement

Answer : B

Question 3

Which security item is designed to take collections of data from multiple computers?

AFirewall

BHost-Based Intrusion Detection and Prevention System (Host-Based IDPS)

CNetwork-Based Intrusion Detection and Prevention System (Network-Based IDPS)

DVirtual Private Network (VPN)

Answer : C

Question 4

The information security architect of a large service provider advocates an open design of the security architecture, as opposed to a secret design.

What is her main argument for this choice?

AOpen designs are easily configured.

BOpen designs have more functionality.

COpen designs are tested extensively.

Answer : C

Question 5

An experienced security manager is well aware of the risks related to communication over the internet. She also knows that Public Key Infrastructure (PKI) can be used to keep e-mails between employees confidential.

Which is the main risk of PKI?

AThe Certificate Authority (CA) is hacked.

BThe certificate is invalid because it is on a Certificate Revocation List.

CThe users lose their public keys.

DThe HR department wants to be a Registration Authority (RA).

Answer : A

Question 6

What is a risk treatment strategy?

AMobile updates

BRisk acceptance

CRisk exclusion

DSoftware installation

Answer : B

Question 7

A security manager for a large company has the task to achieve physical protection for corporate data stores.

Through which control can physical protection be achieved?

AHaving visitors sign in and out of the corporate datacenter

BUsing a firewall to prevent access to the network infrastructure

CUsing access control lists to prevent logical access to organizational infrastructure

DUsing key access controls for employees needing access

Answer : D

Exin Information Security Management Professional based on ISO/IEC 27001 ISMP Exam Questions