Free EXIN ISMP Exam Dumps Questions & Answers

What is the best way to start setting the information security controls?

• A.  Implement the security measures as prescribed by a risk analysis tool
• B.  Use a standard security baseline
• C.  Resort back to the default factory standards

An information security officer is asked to write a retention policy for a financial system. She is aware of the fact that some data must be kept for a long time and other data must be deleted.
Where should she look for guidelines first?

• A.  In legislation
• B.  In finance management procedures
• C.  In company policies

Zoning is a security control to separate physical areas with different security levels. Zones with higher security levels can be secured by more controls. The facility manager of a conference center is responsible for security.
What combination of business functions should be combined into one security zone?

• A.  Meeting rooms and Human Resource rooms
• B.  Lobby and public restaurant
• C.  Boardroom and general office space
• D.  Computer room and storage facility

An employee has worked on the organizational risk assessment. The goal of the assessment is not to bring residual risks to zero, but to bring the residual risks in line with an organization's risk appetite.
When has the risk assessment program accomplished its primary goal?

• A.  Once the transference of the risk is complete
• B.  Once the controls are implemented
• C.  When the risk analysis is completed
• D.  When decision makers have been informed of uncontrolled risks and proper authority groups decide to leave the risks in place

A security architect argues with the internal fire prevention team about the statement in the information security policy, that doors to confidential areas should be locked at all times. The emergency response team wants to access to those areas in case of fire.
What is the best solution to this dilemma?

• A.  The doors should stay closed in case of fire to prevent access to confidential areas.
• B.  The doors will automatically open in case of fire.
• C.  The security architect will be informed when there is a fire.