ISO-IEC-LI 試験問題を無料オンラインアクセス

What does the Information Security Policy describe?

• A.which InfoSec-controls have been selected and taken
• B.which Information Security-procedures are selected
• C.how the InfoSec-objectives will be reached
• D.what the implementation-planning of the information security management system is

In the context of contact with special interest groups, any information-sharing agreements should identify requirements for the protection of _________ information.

• A.Availability
• B.Authorization
• C.Confidential
• D.Authentic

True or False: Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered

• A.True
• B.False

What is the best description of a risk analysis?

• A.A risk analysis helps to estimate the risks and develop the appropriate security measures.
• B.A risk analysis calculates the exact financial consequences of damages.
• C.A risk analysis is a method of mapping risks without looking at company processes.

What do employees need to know to report a security incident?

• A.How to report an incident and to whom.
• B.Who is responsible for the incident and whether it was intentional.
• C.Whether the incident has occurred before and what was the resulting damage.
• D.The measures that should have been taken to prevent the incident in the first place.