Online Access Free ISO-IEC-27035-Lead-Incident-Manager Practice Test

How is the impact of an information security event assessed?

• A.By determining if the event is an information security incident
• B.By identifying the assets affected by the event
• C.By evaluating the effect on the confidentiality, integrity, and availability of information

How should vulnerabilities lacking corresponding threats be handled?

• A.They still require controls and should be promptly addressed
• B.They should be disregarded as they pose no risk
• C.They may not require controls but should be analyzed and monitored for changes

Which team has a broader cybersecurity role, including incident response, monitoring, and overseeing general operations?

• A.Computer Security Incident Response Team (CSIRT)
• B.Security Operations Center (SOC)
• C.Computer Emergency Response Team (CERT)

What role do indicators of compromise play in incident management?

• A.They uncover evidence of malicious activities
• B.They assess the scope of isolation measures
• C.They facilitate the forensic analysis process

What is a key responsibility of the incident response team?

• A.Maintaining physical security infrastructure
• B.Investigating and managing cybersecurity incidents
• C.Performing vulnerability scans and penetration testing