ISMP試験無料問題集（31題）「EXIN Information Security Management Professional based on ISO/IEC 27001 認定」

出題：1

Recovery Time Objective (RTO) and Recovery Point Objective (RPO) are key terms in business continuity management (BCM). Reducing loss of data is one of the focus areas of a BCM policy.
What requirement is in the data recovery policy to realize minimal data loss?

A. Maximize RPO

B. Reduce RPO

C. Reduce RTO

D. Reduce the time between RTO and RPO

正解：B 解答を投票する

出題：2

What is a key item that must be kept in mind when designing an enterprise-wide information security program?

A. When defining controls follow an approach and framework that is consistent with organizational culture

B. Put an enterprise-wide network and Host-Based Intrusion Detection and Prevention System (Host-Based IDPS) into place as soon as possible

C. Put an incident management and log file analysis program in place immediately

D. Determine controls in the light of specific risks an organization is facing

正解：D 解答を投票する

出題：3

Who should be asked to check compliance with the information security policy throughout the company?

A. Internal audit department

B. External forensics investigators

C. The same company that checks the yearly financial statement

正解：B 解答を投票する

出題：4

A security manager just finished the final copy of a risk assessment. This assessment contains a list of identified risks and she has to determine how to treat these risks.
What is the best option for the treatment of risks?

A. Design appropriate controls to reduce the risk

B. Decide the criteria for determining if the risk can be accepted

C. Remediate the risk regardless of cost

D. Begin risk remediation immediately as the organization is currently at risk

正解：B 解答を投票する

ISMP試験無料問題集「EXIN Information Security Management Professional based on ISO/IEC 27001 認定」