Susan sends an email to Paul. Who determines the meaning and the value of information in this email?

• A.Susan, the sender of the information.
• B.Paul, therecipient of the information.
• C.Paul and Susan, the sender and the recipient of the information.

Comment: *

Name: *

Email: *

Verification: *

Once they made sure that the attackers do not have access in their system, the security administrators decided to proceed with the forensic analysis. They concluded that their access security system was not designed tor threat detection, including the detection of malicious files which could be the cause of possible future attacks.
Based on these findings. Texas H$H inc, decided to modify its access security system to avoid future incidents and integrate an incident management policy in their Information security policy that could serve as guidance for employees on how to respond to similar incidents.
Based on the scenario above, answer the following question:
Which situation described in scenario 7 Indicates that Texas H&H Inc. implemented a detective control?

• A.Texas H&H Inc. tested its system for malicious activity and checked cloud based email settings
• B.Texas H&H Inc. hired an expert to conduct a forensic analysis
• C.Texas H&H Inc. integrated the incident management policy in Its information security policy

Comment: *

Name: *

Email: *

Verification: *

What is the main purpose of Annex A 7.1 Physical security perimeters of ISO/IEC 27001?

• A.To prevent unauthorized physical access, damage, and interference to the organization's information and other associated assets
• B.To maintain the confidentiality of information that is accessible by personnel or external parties
• C.To ensure access to information and other associated assets is defined and authorized

Comment: *

Name: *

Email: *

Verification: *

Who should be involved, among others, in the draft, review, and validation of information security procedures?

• A.The employees in charge of ISMS operation
• B.An external expert
• C.The information security committee

Comment: *

Name: *

Email: *

Verification: *

An organization that is implementing the ISMS based on ISO/IEC 27001 has defined and communicated secure system architecture and engineering principles. However, there is no documented information related to these principles. Is this acceptable?

• A.Yes, the standard requires organizations to only communicate secure system architecture and engineering principles
• B.Yes, documented information related to secure system architecture and engineering principles is not directly required by the standard
• C.No, documenting secure system architecture and engineering principles is required by the standard

Comment: *

Name: *

Email: *

Verification: *