MENU
The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?
Suggested Answer: B
Get Premium ISO-IEC-LI Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
WI
Wilda
11 months ago
Yup, the ISMS is all about management, not tech!
AR
Ardella
11 months ago
Tokens and encryption are definitely technical measures.
LA
Lashawn
11 months ago
Wait, are we sure about that? Seems like it could be technical too.
AU
Audry
12 months ago
Totally agree, it's about policies and procedures!
DE
Denise
12 months ago
The Information Security Management System is more of a framework than a tech measure.
FL
Floyd
12 months ago
Encryption is definitely technical, but I’m confused about the ISMS. It feels like it could be both a technical and non-technical measure.
BR
Brianne
1 year ago
I feel like the validation of input and output data is technical, but the ISMS seems more like a framework.
FL
Florinda
1 year ago
I'm not entirely sure, but I remember a practice question where we discussed how tokens are definitely a technical measure.
PO
Pok
1 year ago
I think the Information Security Management System might not be a technical measure since it’s more about policies and procedures.
ER
Ernest
1 year ago
I think the key here is to focus on what is truly a technical security control versus a management or procedural control. The encryption and validation of data seem like clear technical measures to me.
GR
Gretchen
1 year ago
I'm a bit confused on this one. I'm not sure if the use of tokens is considered a technical measure or not. I'll have to think it through.
AB
Abraham
1 year ago
I'm pretty confident the answer is A. The Information Security Management System is likely a policy or procedural measure, not a technical one.
JU
Justine
1 year ago
Okay, let's see. The Information Security Management System seems like it could be a non-technical measure, but I'm not totally sure.
CR
Cristal
1 year ago
Hmm, this seems like a tricky one. I'll need to think carefully about the differences between technical and non-technical security measures.
VE
Verda
2 years ago
A is the right answer. The ISMS is the odd one out here, the rest are all technical safeguards. Although, I do wonder if the token access is really that technical, it's kind of old-school these days.
HE
Heidy
1 year ago
D) Encryption of information
LI
Linsey
1 year ago
C) Validation of input and output data in applications
PR
Providencia
1 year ago
B) The use of tokens to gain access to information systems
LE
Lemuel
1 year ago
A) Information Security Management System
VE
Vernell
2 years ago
Hmm, this one's tricky. I think I'll go with A, but I'm not 100% sure. Maybe I should have spent more time studying encryption algorithms instead of watching cat videos.
BE
Bettina
2 years ago
I'm pretty sure it's A as well. The other choices are all clearly technical controls, while an ISMS is a management framework.
GA
Galen
1 year ago
Yeah, A is the odd one out. The rest are all technical measures.
CH
Christiane
1 year ago
I think it's A too. The ISMS is more of a management framework.
UN
Una
2 years ago
The answer is definitely A. An Information Security Management System is a set of policies and procedures, not a technical measure.
VI
Viva
1 year ago
That's a technical measure to protect information.
VA
Valentin
1 year ago
B) The use of tokens to gain access to information systems
JO
Joni
2 years ago
That's correct. An Information Security Management System is a set of policies and procedures.
FI
Filiberto
2 years ago
A) Information Security Management System
CI
Ciara
2 years ago
Hmm, I see your point. But I still think A) Information Security Management System is not a technical measure.
KE
Kenneth
2 years ago
I disagree, I believe the answer is B) The use of tokens to gain access to information systems.
CI
Ciara
2 years ago
I think the answer is A) Information Security Management System.