ISMP Exam Questions and Answers | Exam-Dumps (Page: 2)

QUESTION: 6

A risk manager is asked to perform a complete risk assessment for a company.
What is the best method to identify most of the threats to the company?

Have a brainstorm with representatives of all stakeholders
Interview top management
Send a checklist for threat identification to all staff involved in information security

Answer(s): A

Reveal Solution Next Question

It is important that an organization is able to prove compliance with information standards and legislation. One of the most important areas is documentation concerning access management. This process contains a number of activities including granting rights, monitoring identity status, logging, tracking access and removing rights. Part of these controls are audit trail records which may be used as evidence for both internal and external audits.
What component of the audit trail is the most important for an external auditor?

Access criteria and access control mechanisms
Log review, consolidation and management
System-specific policies for business systems

Answer(s): A

Reveal Solution Next Question

QUESTION: 8

What is the main reason to use a firewall to separate two parts of your internal network?

To control traffic intensity between two network segments
To decrease network loads
To enable the installation of an Intrusion Detection System
To separate areas with different confidentiality requirements

Answer(s): D

Reveal Solution Next Question

QUESTION: 9

A company's webshop offers prospects and customers the possibility to search the catalog and place orders around the clock. In order to satisfy the needs of both customer and business several requirements have to be met. One of the criteria is data classification.
What is the most important classification aspect of the unit price of an object in a 24h webshop?

Confidentiality
Integrity
Availability

Answer(s): C

Reveal Solution Next Question

QUESTION: 10

In a company the IT strategy is migrating towards a Service Oriented Architecture (SOA) so that migrating to the cloud is better feasible in the future. The security architect is asked to make a first draft of the security architecture.
Which elements should the security architect draft?

Management and control of the security services
The information security policy, the risk assessment and the controls in the security services
Which security services are provided and in which supporting architectures are they defined

Answer(s): C

Reveal Solution Next Question

EXIN ISMP Exam (page: 2)
EXIN Information Security Management Professional based on ISO/IEC 27001
Updated on: 12-Feb-2026

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

QUESTION: 10

EXIN ISMP Exam (page: 2) EXIN Information Security Management Professional based on ISO/IEC 27001 Updated on: 12-Feb-2026

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

QUESTION: 10

EXIN ISMP Exam (page: 2)
EXIN Information Security Management Professional based on ISO/IEC 27001
Updated on: 12-Feb-2026