Question 1

An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

Accepted Answer

ISO-27004 is specifically designed to provide guidelines for monitoring, measuring, analyzing, and evaluating the effectiveness of an Information Security Management System (ISMS).

Question 2

Risk is defined as:

Accepted Answer

Risk is defined as the probability of an event occurring multiplied by the consequences of that event.

Question 3

A global retail organization is looking to implement a consistent Disaster Recovery and Business Continuity Process across all of its business units. Which of the following standards and guidelines can BEST address this organization's need?

Accepted Answer

ISO-22301 is a standard for Business Continuity Management Systems, providing a framework for establishing, implementing, maintaining, and improving business continuity, making it suitable for disaster recovery and business continuity processes.

Question 4

A Security Operations Centre (SOC) manager is informed that a database containing highly sensitive corporate strategy information is under attack. Information has been stolen and the database server was disconnected. Who must be informed of this incident?

Accepted Answer

The data owner must be informed because they are responsible for the data and need to take appropriate actions to mitigate the impact and prevent future incidents.

Question 5

You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?

Accepted Answer

The Chief Executive Officer (CEO) has the highest level of authority and influence in an organization, which can ensure the policy is adopted and implemented effectively across all departments.

Question 6

An organization has defined a set of standard security controls.  This organization has also defined the circumstances and conditions in which they must be applied. What is the NEXT logical step in applying the controls in the organization?

Accepted Answer

An asset classification is the next logical step in applying the controls in the organization because it helps to identify the assets that are most critical to the organization and need to be protected.

Question 7

The exposure factor of a threat to your organization is defined by?

Accepted Answer

The exposure factor is the percentage of loss that an organization would experience if a specific threat were to occur.

Question 8

What two methods are used to assess risk impact?

Accepted Answer

Quantitative and qualitative methods are used to assess risk impact by measuring it in numerical terms and evaluating it based on subjective criteria, respectively.

Question 9

A security manager regualrly checks work areas after buisness hours for security violations; such as unsecured files or unattended computers with active sessions. This activity BEST demonstrates what part of a security program?

Accepted Answer

This activity is part of compliance management as it involves ensuring that employees adhere to security policies and procedures, such as securing files and logging off computers.

Question 10

An organization licenses and uses personal information for business operations, and a server containing that information has been compromised. What kind of law would require notifying the owner or licensee of this incident?

Accepted Answer

Data breach disclosure laws require organizations to notify affected individuals and sometimes regulatory bodies when personal information is compromised in a security breach.

Question 11

A global retail company is creating a new compliance management process.  Which of the following regulations is of MOST importance to be tracked and managed by this process?

Accepted Answer

PCI-DSS is crucial for a retail company as it deals with the security of credit card transactions, which is a core aspect of retail operations.

Question 12

A security manager has created a risk program. Which of the following is a critical part of ensuring the program is successful?

Accepted Answer

A risk program governance structure is critical as it establishes the framework, roles, responsibilities, and processes necessary to manage and oversee the risk program effectively.

Question 13

In which of the following cases, would an organization be more prone to risk acceptance vs. risk mitigation?

Accepted Answer

When an organization's risk tolerance is high, it is more likely to accept risks rather than mitigate them, as they are more comfortable with potential negative outcomes.

Question 14

A company wants to fill a Chief Information Security Officer position in the organization. They need to define and implement a more holistic security program. Which of the following qualifications and experience would be MOST desirable to find in a candidate?

Accepted Answer

A candidate with industry certifications, technical knowledge, and program management skills is most desirable for implementing a holistic security program, as it requires both technical expertise and the ability to manage and integrate security initiatives across the organization.

Question 15

According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

Accepted Answer

Defining the Information Security Policy is the first step as it sets the direction and scope for the entire Information Security Management System (ISMS) and guides subsequent actions.

Question 16

An organization's firewall technology needs replaced. A specific technology has been selected that is less costly than others and lacking in some important capabilities. The security officer has voiced concerns about sensitive data breaches but the decision is made to purchase. What does this selection indicate?

Accepted Answer

The decision to purchase a less costly firewall with fewer capabilities, despite concerns about data breaches, indicates a high risk tolerance environment. The organization is willing to accept higher risks to save costs.

Question 17

Ensuring that the actions of a set of people, applications and systems follow the organization's rules is BEST described as:

Accepted Answer

Compliance management involves ensuring that actions adhere to the organization's rules and regulations.

Question 18

You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the

Accepted Answer

The relative likelihood of an event refers to the probability of a risk occurring, which is what is being compared in the scenario.

Question 19

A global health insurance company is concerned about protecting confidential information.  Which of the following is of MOST concern to this organization?

Accepted Answer

Compliance with patient data protection regulations is most critical for a health insurance company as it deals with sensitive health information, which is subject to strict privacy laws in many countries.

Question 20

Which of the following international standards can be BEST used to define a Risk Management process in an organization?

Accepted Answer

ISO-27005 is specifically designed to provide guidelines for information security risk management, making it the best choice for defining a Risk Management process in an organization.

Exam 1: EC-Council Certified Incident Handler