ISO 27000 Foundation Certification Information Security Incident Management 2

Question 1

What is a vulnerability as defined in the ISO 27000 vocabulary?

Accepted Answer

A weakness of an asset or control that can be exploited by one or more threats

Answer

ISO 27000 defines a vulnerability as a weakness of an asset or control that can be exploited by one or more threats, representing a potential entry point for harm.

Question 2

What is the primary role of a Computer Security Incident Response Team (CSIRT)?

Accepted Answer

To coordinate and manage the organization's response to information security incidents

Answer

A CSIRT is specifically established to coordinate and execute responses to information security incidents, ensuring a structured and effective handling process.

Question 3

How should digital evidence collected during an incident investigation be handled?

Accepted Answer

Preserved in a manner that maintains its integrity and admissibility

Answer

Evidence must be collected and preserved according to forensic best practices to maintain its integrity and ensure it remains admissible in legal proceedings if required.

Question 4

Which phase of incident management involves removing the threat and restoring systems to normal operation?

Accepted Answer

Eradication and Recovery

Answer

The eradication and recovery phase involves removing malware, closing vulnerabilities, and restoring affected systems to their normal, trusted operational state.

Question 5

What is an escalation procedure in the context of incident management?

Accepted Answer

A defined path for elevating an incident to higher management or specialists when needed

Answer

Escalation procedures define when and how an incident should be elevated to higher authority or specialized teams when it exceeds the current responder's ability or authority to handle it.

ISO 27000 Foundation Certification Practice Test

ISO 27000 Foundation Certification Practice Test

ISO 27000 Foundation Certification Information Security Incident Management 2