Scenario 6: Skyver offers worldwide shipping of electronic products, including gaming consoles, flat-screen TVs. computers, and printers. In order to ensure information security, the company has decidedto implement an information security management system (ISMS) based on the requirements of ISO/IEC 27001.
Colin, the company's best information security expert, decided to hold a training and awareness session for the personnel of the company regarding the information security challenges and other information security-related controls. The session included topics such as Skyver's information security approaches and techniques for mitigating phishing and malware.
One of the participants in the session is Lisa, who works in the HR Department. Although Colin explains the existing Skyver's information security policies and procedures in an honest and fair manner, she finds some of the issues being discussed too technical and does not fully understand the session. Therefore, in a lot of cases, she requests additional help from the trainer and her colleagues Based on scenario 6. Lisa found some of the issues being discussed in the training and awareness session too technical, thus not fully understanding the session. What does this indicate?

• A.Lisa did not take actions to acquire the necessary competence
• B.The effectiveness of the training and awareness session was not evaluated
• C.Skyver did not determine differing team needs in accordance to the activities they perform and the intended results

Comment: *

Name: *

Email: *

Verification: *

Based on scenario 5, what can be considered as a residual risk to Socket Inc.?

• A.The use of passwords with at least 12 characters containing a mixture of uppercase and lowercase letters, symbols, and numbers
• B.Users with access to cloud storage files are segregated on a separate network
• C.Files arc decrypted once the user is authenticated

Comment: *

Name: *

Email: *

Verification: *

What should be used to protect data on removable media ifdata confidentiality or integrity are important considerations?

• A.a password
• B.backup on another removable medium
• C.cryptographic techniques
• D.logging

Comment: *

Name: *

Email: *

Verification: *

What is an example of a non-human threat to the physical environment?

• A.Corrupted file
• B.Storm
• C.Fraudulent transaction
• D.Virus

Comment: *

Name: *

Email: *

Verification: *

Question:
Which of the following statements best represents The Open Security Architecture (OSA) framework?

• A.A framework that explains the functionality and technical controls of security, presenting a holistic view of crucial security concerns
• B.A framework that assists organizations in determining the objectives of developing their security architecture, focusing on the initial stages of security architecture
• C.A framework that helps organize enterprise architecture artifacts, including documents, specifications, and models, by considering the impact of these artifacts on various stakeholders

Comment: *

Name: *

Email: *

Verification: *