MENU
When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?
Suggested Answer: C
Get Premium 712-50 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
AL
Alishia
11 months ago
ISO 27004? Really? I’m not so sure about that one.
MA
Marylou
11 months ago
Wait, I thought ITILv3 was the go-to for this kind of stuff?
GE
Geoffrey
11 months ago
PRINCE2 is more about project management, not security metrics.
BE
Bette
12 months ago
I think ISO 27004 is more relevant for measuring effectiveness.
AD
Adelle
12 months ago
Definitely ISO 27001 for security metrics!
AH
Ahmed
1 year ago
I could be wrong, but I thought PRINCE2 was more project management focused, so it probably wouldn't apply here.
DI
Dion
1 year ago
I'm not entirely sure, but I feel like ISO 27004 is specifically designed for measuring the effectiveness of security management systems.
PR
Precious
1 year ago
I remember practicing a question about frameworks, and I think ITILv3 was more about service management, not security metrics.
JA
Janine
1 year ago
I think ISO 27001 is more about establishing an ISMS, but ISO 27004 might be the one focused on metrics.
SO
Solange
1 year ago
I'm leaning towards ISO 27004 as well. That framework is designed to provide guidance on metrics and measurement for information security, so it makes sense that it would be the most likely choice for this question.
FR
Franchesca
1 year ago
Okay, let me think this through. ISO 27001 is the standard, but ISO 27004 is the framework for measuring the effectiveness of the ISMS, so that's probably the best answer here.
NA
Natalie
1 year ago
Hmm, I'm a bit unsure on this one. I know ISO 27001 is the standard for information security management, but I'm not sure if that would be the best metric framework. Maybe ISO 27004 is the way to go?
DE
Devorah
1 year ago
I'm pretty sure the answer is ISO 27004, as that framework specifically covers metrics and measurement for information security management systems.
AL
Alex
1 year ago
I'm a little confused by the options here. Reformatting the hard drive or deleting the partition seem way too extreme just to clear out some temporary files. I think I'll go with the Disk Cleanup utility - that sounds like the most straightforward solution.
LA
Lakeesha
1 year ago
I think the key here is to focus on measuring the impact of the Sales Cloud implementation, so I'd lean towards options C or D. Establishing KPIs or evaluating user adoption seem like the most direct ways to assess the impact.
ST
Starr
1 year ago
This one seems pretty straightforward. I'm pretty sure the answer is D - the SMTP host receiving from the sender.
MI
Mila
1 year ago
I'm pretty confident about this one. The GDPR is all about data protection, so I think the supervisory authority's task would be to monitor and enforce the application of the GDPR.
TI
Tiffiny
1 year ago
I bet the person who wrote this question is the same one who thought 'Have you tried turning it off and on again?' was a valid security solution.
MA
Maybelle
1 year ago
D) ITILv3
AL
Allene
1 year ago
C) ISO 27004
ES
Estrella
1 year ago
A) ISO 27001
ER
Erasmo
1 year ago
PRINCE2? As if project management has anything to do with measuring an ISMS. Someone's been watching too many spy movies.
IR
Irving
2 years ago
ISO 27001 is a good framework, but it's more about setting up the ISMS, not measuring its effectiveness. I'd go with ISO 27004.
DE
Delisa
1 year ago
PRINCE2 and ITILv3 are more project management focused, not specifically for measuring ISMS effectiveness.
LE
Leatha
1 year ago
I agree, ISO 27004 provides a better framework for measuring the effectiveness of an ISMS.
MA
Magnolia
1 year ago
ISO 27001 is a good starting point, but ISO 27004 is more focused on measuring effectiveness.
PA
Paz
2 years ago
I'm not sure, but I think ISO 27004 could also be a possible metric framework for measuring ISMS effectiveness.
LE
Lettie
2 years ago
ITIL v3? Really? I think someone's been spending too much time in the IT service management world and not enough in information security.
CA
Callie
1 year ago
ISO 27001 is the most likely metric framework for measuring ISMS effectiveness.
SH
Sherell
1 year ago
D) ITILv3
RO
Rosenda
1 year ago
C) ISO 27004
SH
Shenika
1 year ago
A) ISO 27001
LY
Lynette
1 year ago
C) ISO 27004
VI
Virgie
1 year ago
A) ISO 27001
VA
Vanesa
2 years ago
ISO 27004 seems like the obvious choice here. It's specifically designed for measuring the effectiveness of an ISMS.
QU
Quentin
2 years ago
I agree with Willie, ISO 27001 is specifically designed for Information Security Management Systems.
WI
Willie
2 years ago
I think the most likely metric framework would be ISO 27001.