GAQM Exam ISO27-13-001 Topic 9 Question 76 Discussion

Actual exam question for GAQM's ISO27-13-001 exam

Question #: 76
Topic #: 9

[All ISO27-13-001 Questions]

In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:

AReport suspected or known incidents upon discovery through the Servicedesk

BPreserve evidence if necessary

CCooperate with investigative personnel during investigation if needed

DMake the information security incident details known to all employees

Show Suggested Answer

Suggested Answer: B, C

by Dana at Jun 28, 2024, 11:09 AM

Limited Time Offer

25%

Off

Get Premium ISO27-13-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Micheal

1 days ago

Haha, making the incident known to all employees? That's like putting up a 'Hack Me' sign. Definitely not the right approach.

upvoted 0 times

...

Melvin

4 days ago

This is a classic incident response question. Option B is the most important - preserving evidence is crucial for the investigation.

upvoted 0 times

...

Chara

8 days ago

I agree, option D goes against the principles of incident response. We should only share details with authorized personnel.

upvoted 0 times

...

Nieves

13 days ago

But making the information security incident details known to all employees could cause panic and compromise the investigation.

upvoted 0 times

...

Paulina

15 days ago

I disagree, I believe the answer is A.

upvoted 0 times

...

Lynna

15 days ago

Option D is clearly the wrong answer. Sharing incident details with all employees would be a big security risk.

upvoted 0 times

...

Nieves

18 days ago

I think the answer is D.

upvoted 0 times

...