Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil EC-Council CCISO Exam - Topic 3 Question 81 Discussion

When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?
C) ISO 27004
A) ISO 27001
B) PRINCE2
D) ITILv3

Eccouncil EC-Council CCISO Exam - Topic 3 Question 81 Discussion

Actual exam question for Eccouncil's EC-Council CCISO Exam exam
Question #: 81
Topic #: 3
[All EC-Council CCISO Exam Questions]

When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Toi at Apr 29, 2024, 05:05 AM

Limited Time Offer

25%

Off

Get Premium EC-Council CCISO Exam Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Alishia
9 months ago
ISO 27004? Really? I’m not so sure about that one.
upvoted 0 times
...
Marylou
9 months ago
Wait, I thought ITILv3 was the go-to for this kind of stuff?
upvoted 0 times
...
Geoffrey
10 months ago
PRINCE2 is more about project management, not security metrics.
upvoted 0 times
...
Bette
10 months ago
I think ISO 27004 is more relevant for measuring effectiveness.
upvoted 0 times
...
Adelle
10 months ago
Definitely ISO 27001 for security metrics!
upvoted 0 times
...
Ahmed
10 months ago
I could be wrong, but I thought PRINCE2 was more project management focused, so it probably wouldn't apply here.
upvoted 0 times
...
Dion
11 months ago
I'm not entirely sure, but I feel like ISO 27004 is specifically designed for measuring the effectiveness of security management systems.
upvoted 0 times
...
Precious
11 months ago
I remember practicing a question about frameworks, and I think ITILv3 was more about service management, not security metrics.
upvoted 0 times
...
Janine
11 months ago
I think ISO 27001 is more about establishing an ISMS, but ISO 27004 might be the one focused on metrics.
upvoted 0 times
...
Solange
11 months ago
I'm leaning towards ISO 27004 as well. That framework is designed to provide guidance on metrics and measurement for information security, so it makes sense that it would be the most likely choice for this question.
upvoted 0 times
...
Franchesca
11 months ago
Okay, let me think this through. ISO 27001 is the standard, but ISO 27004 is the framework for measuring the effectiveness of the ISMS, so that's probably the best answer here.
upvoted 0 times
...
Natalie
11 months ago
Hmm, I'm a bit unsure on this one. I know ISO 27001 is the standard for information security management, but I'm not sure if that would be the best metric framework. Maybe ISO 27004 is the way to go?
upvoted 0 times
...
Devorah
11 months ago
I'm pretty sure the answer is ISO 27004, as that framework specifically covers metrics and measurement for information security management systems.
upvoted 0 times
...
Alex
11 months ago
I'm a little confused by the options here. Reformatting the hard drive or deleting the partition seem way too extreme just to clear out some temporary files. I think I'll go with the Disk Cleanup utility - that sounds like the most straightforward solution.
upvoted 0 times
...
Lakeesha
11 months ago
I think the key here is to focus on measuring the impact of the Sales Cloud implementation, so I'd lean towards options C or D. Establishing KPIs or evaluating user adoption seem like the most direct ways to assess the impact.
upvoted 0 times
...
Starr
11 months ago
This one seems pretty straightforward. I'm pretty sure the answer is D - the SMTP host receiving from the sender.
upvoted 0 times
...
Mila
11 months ago
I'm pretty confident about this one. The GDPR is all about data protection, so I think the supervisory authority's task would be to monitor and enforce the application of the GDPR.
upvoted 0 times
...
Tiffiny
1 year ago
I bet the person who wrote this question is the same one who thought 'Have you tried turning it off and on again?' was a valid security solution.
upvoted 0 times
Maybelle
1 year ago
D) ITILv3
upvoted 0 times
...
Allene
1 year ago
C) ISO 27004
upvoted 0 times
...
Estrella
1 year ago
A) ISO 27001
upvoted 0 times
...
...
Erasmo
1 year ago
PRINCE2? As if project management has anything to do with measuring an ISMS. Someone's been watching too many spy movies.
upvoted 0 times
...
Irving
1 year ago
ISO 27001 is a good framework, but it's more about setting up the ISMS, not measuring its effectiveness. I'd go with ISO 27004.
upvoted 0 times
Delisa
1 year ago
PRINCE2 and ITILv3 are more project management focused, not specifically for measuring ISMS effectiveness.
upvoted 0 times
...
Leatha
1 year ago
I agree, ISO 27004 provides a better framework for measuring the effectiveness of an ISMS.
upvoted 0 times
...
Magnolia
1 year ago
ISO 27001 is a good starting point, but ISO 27004 is more focused on measuring effectiveness.
upvoted 0 times
...
...
Paz
1 year ago
I'm not sure, but I think ISO 27004 could also be a possible metric framework for measuring ISMS effectiveness.
upvoted 0 times
...
Lettie
1 year ago
ITIL v3? Really? I think someone's been spending too much time in the IT service management world and not enough in information security.
upvoted 0 times
Callie
1 year ago
ISO 27001 is the most likely metric framework for measuring ISMS effectiveness.
upvoted 0 times
...
Sherell
1 year ago
D) ITILv3
upvoted 0 times
...
Rosenda
1 year ago
C) ISO 27004
upvoted 0 times
...
Shenika
1 year ago
A) ISO 27001
upvoted 0 times
...
Lynette
1 year ago
C) ISO 27004
upvoted 0 times
...
Virgie
1 year ago
A) ISO 27001
upvoted 0 times
...
...
Vanesa
1 year ago
ISO 27004 seems like the obvious choice here. It's specifically designed for measuring the effectiveness of an ISMS.
upvoted 0 times
...
Quentin
1 year ago
I agree with Willie, ISO 27001 is specifically designed for Information Security Management Systems.
upvoted 0 times
...
Willie
1 year ago
I think the most likely metric framework would be ISO 27001.
upvoted 0 times
...

Save Cancel