ISMP 試験問題を無料オンラインアクセス

The handling of security incidents is done by the incident management process under guidelines of information security management. These guidelines call for several types of mitigation plans.
Which mitigation plan covers short-term recovery after a security incident has occurred?

• A.The incident response plan
• B.The Business Continuity Plan (BCP)
• C.The risk treatment plan
• D.The disaster recovery plan

An information security officer is asked to write a retention policy for a financial system. She is aware of the fact that some data must be kept for a long time and other data must be deleted.
Where should she look for guidelines first?

• A.In legislation
• B.In company policies
• C.In finance management procedures

An experienced security manager is well aware of the risks related to communication over the internet. She also knows that Public Key Infrastructure (PKI) can be used to keep e-mails between employees confidential.
Which is the main risk of PKI?

• A.The certificate is invalid because it is on a Certificate Revocation List.
• B.The Certificate Authority (CA) is hacked.
• C.The users lose their public keys.
• D.The HR department wants to be a Registration Authority (RA).

In a company the IT strategy is migrating towards a Service Oriented Architecture (SOA) so that migrating to the cloud is better feasible in the future. The security architect is asked to make a first draft of the security architecture.
Which elements should the security architect draft?

• A.Management and control of the security services
• B.Which security services are provided and in which supporting architectures are they defined
• C.The information security policy, the risk assessment and the controls in the security services

A security architect argues with the internal fire prevention team about the statement in the information security policy, that doors to confidential areas should be locked at all times. The emergency response team wants to access to those areas in case of fire.
What is the best solution to this dilemma?

• A.The doors will automatically open in case of fire.
• B.The security architect will be informed when there is a fire.
• C.The doors should stay closed in case of fire to prevent access to confidential areas.