ISMP 試験問題を無料オンラインアクセス

It is important that an organization is able to prove compliance with information standards and legislation. One of the most important areas is documentation concerning access management. This process contains a number of activities including granting rights, monitoring identity status, logging, tracking access and removing rights. Part of these controls are audit trail records which may be used as evidence for both internal and external audits.
What component of the audit trail is the most important for an external auditor?

• A.Log review, consolidation and management
• B.System-specific policies for business systems
• C.Access criteria and access control mechanisms

What is the best way to start setting the information security controls?

• A.Use a standard security baseline
• B.Resort back to the default factory standards
• C.Implement the security measures as prescribed by a risk analysis tool

What is the main reason to use a firewall to separate two parts of your internal network?

• A.To enable the installation of an Intrusion Detection System
• B.To separate areas with different confidentiality requirements
• C.To decrease network loads
• D.To control traffic intensity between two network segments

A risk manager is asked to perform a complete risk assessment for a company.
What is the best method to identify most of the threats to the company?

• A.Send a checklist for threat identification to all staff involved in information security
• B.Have a brainstorm with representatives of all stakeholders
• C.Interview top management

Zoning is a security control to separate physical areas with different security levels. Zones with higher security levels can be secured by more controls. The facility manager of a conference center is responsible for security.
What combination of business functions should be combined into one security zone?

• A.Computer room and storage facility
• B.Boardroom and general office space
• C.Meeting rooms and Human Resource rooms
• D.Lobby and public restaurant