GAQM ISO27-13-001 問題集

質問 1：
Integrity of data means
A. Data should be accessed by only the right people
B. Data should be viewable at all times
C. Accuracy and completeness of the data
正解：C

質問 2：
In which order is an Information Security Management System set up?
A. Establishment, implementation, operation, maintenance
B. Implementation, operation, maintenance, establishment
C. Establishment, operation, monitoring, improvement
D. Implementation, operation, improvement, maintenance
正解：A

質問 3：
In acceptable use of Information Assets, which is the best practice?
A. Interfering with or denying service to any user other than the employee's host
B. Playing any computer games during office hours
C. Access to information and communication systems are provided for business purpose only
D. Accessing phone or network transmissions, including wireless or wifi transmissions
正解：C

質問 4：
What is the difference between a restricted and confidential document?
A. Restricted - to be shared among named individuals
Confidential - to be shared among an authorized group
B. Restricted - to be shared among named individuals
Confidential - to be shared with friends and family
C. Restricted - to be shared among named individuals
Confidential - to be shared across the organization only
D. Restricted - to be shared among an authorized group
Confidential - to be shared among named individuals
正解：A

質問 5：
In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:
A. Cooperate with investigative personnel during investigation if needed
B. Report suspected or known incidents upon discovery through the Servicedesk
C. Preserve evidence if necessary
D. Make the information security incident details known to all employees
正解：D

質問 6：
After a devastating office fire, all staff are moved to other branches of the company. At what moment in the incident management process is this measure effectuated?
A. Between detection and classification
B. Between classification and escalation
C. Between recovery and normal operations
D. Between incident and damage
正解：D

質問 7：
CEO sends a mail giving his views on the status of the company and the company's future strategy and the CEO's vision and the employee's part in it. The mail should be classified as
A. Public Mail
B. Restricted Mail
C. Internal Mail
D. Confidential Mail
正解：C

質問 8：
Who is responsible for Initial asset allocation to the user/custodian of the assets?
A. Asset Owner
B. Asset Practitioner
C. Asset Manager
D. Asset Stakeholder
正解：A