ISOIEC20000LI 試験問題を無料オンラインアクセス

According to scenario 6. Alex used terminology and concepts that were not understood by participants. Which principle of effective communication strategy did Alex NOT follow?

• A.Transparency
• B.Credibility
• C.Appropriateness

Some of the issues being discussed in the awareness session were too technical for the participants. What does this situation indicate? Refer to scenario 6.

• A.TradeB did not evaluate the competence of the trainer
• B.TradeB did not determine the type and level of competence needed
• C.Employees are equipped with information security expertise, therefore. they do not represent a potential risk

Diana works as a customer service representative for a large e-commerce company. One day, she accidently modified the order details of a customer without their permission Due to this error, the customer received an incorrect product. Which information security principle was breached in this case7

• A.Integrity
• B.Confidentiality
• C.Availability

Texas H&H Inc. decided to assign an internal expert for their forensic analysis. Is this acceptable? Refer lo scenario 7.

• A.Yes. hiring an external expert for forensic analysis Is a requirement of the standard
• B.No. the company's forensic analysis should be based on the conclusion of Its cloud storage provide investigation
• C.Yes. forensic analysis can be done by cither an internal or external expert

Scenario 6: Skyver offers worldwide shipping of electronic products, including gaming consoles, flat-screen TVs. computers, and printers. In order to ensure information security, the company has decided to implement an information security management system (ISMS) based on the requirements of ISO/IEC 27001.
Colin, the company's best information security expert, decided to hold a training and awareness session for the personnel of the company regarding the information security challenges and other information security- related controls. The session included topics such as Skyver's information security approaches and techniques for mitigating phishing and malware.
One of the participants in the session is Lisa, who works in the HR Department. Although Colin explains the existing Skyver's information security policies and procedures in an honest and fair manner, she finds some of the issues being discussed too technical and does not fully understand the session. Therefore, in a lot of cases, she requests additional help from the trainer and her colleagues What is the difference between training and awareness? Refer to scenario 6.

• A.Training helps transfer a message with the intent of informing, whereas awareness helps change the behavior toward the message
• B.Training helps acquire a skill, whereas awareness helps apply it in practice
• C.Training helps acquire certain skills, whereas awareness develops certain habits and behaviors.