Free EXIN ISMP Exam Dumps Questions & Answers

What is a risk treatment strategy?

• A.Software installation
• B.Mobile updates
• C.Risk exclusion
• D.Risk acceptance

What is the best way to start setting the information security controls?

• A.Use a standard security baseline
• B.Implement the security measures as prescribed by a risk analysis tool
• C.Resort back to the default factory standards

Security monitoring is an important control measure to make sure that the required security level is maintained. In order to realize 24/7 availability of the service, this service is outsourced to a partner in the cloud.
What should be an important control in the contract?

• A.The network communication channel is secured by using encryption.
• B.Your IT auditor has the right to audit the external party's service management processes.
• C.The third party is certified against ISO/IEC 27001.
• D.The third party is certified for adhering to privacy protection controls.

A security architect argues with the internal fire prevention team about the statement in the information security policy, that doors to confidential areas should be locked at all times. The emergency response team wants to access to those areas in case of fire.
What is the best solution to this dilemma?

• A.The security architect will be informed when there is a fire.
• B.The doors should stay closed in case of fire to prevent access to confidential areas.
• C.The doors will automatically open in case of fire.

The information security manager is writing the Information Security Management System (ISMS) documentation. The controls that are to be implemented must be described in one of the phases of the Plan-Do- Check-Act (PDCA) cycle of the ISMS.
In which phase should these controls be described?

• A.Act
• B.Plan
• C.Do
• D.Check