GAQM ISO-IEC-LI Exam - Topic 3 Question 88 Discussion

Actual exam question for GAQM's ISO-IEC-LI exam

Question #: 88
Topic #: 3

The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?

AInformation Security Management System

BThe use of tokens to gain access to information systems

CValidation of input and output data in applications

DEncryption of information

Show Suggested Answer

Suggested Answer: B

by Tom at Oct 22, 2024, 10:09 PM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-LI Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Wilda

4 months ago

Yup, the ISMS is all about management, not tech!

upvoted 0 times

...

Ardella

5 months ago

Tokens and encryption are definitely technical measures.

upvoted 0 times

...

Lashawn

5 months ago

Wait, are we sure about that? Seems like it could be technical too.

upvoted 0 times

...

Audry

5 months ago

Totally agree, it's about policies and procedures!

upvoted 0 times

...

Denise

5 months ago

The Information Security Management System is more of a framework than a tech measure.

upvoted 0 times

...

Floyd

5 months ago

Encryption is definitely technical, but I’m confused about the ISMS. It feels like it could be both a technical and non-technical measure.

upvoted 0 times

...

Brianne

6 months ago

I feel like the validation of input and output data is technical, but the ISMS seems more like a framework.

upvoted 0 times

...

Florinda

6 months ago

I'm not entirely sure, but I remember a practice question where we discussed how tokens are definitely a technical measure.

upvoted 0 times

...

Pok

6 months ago

I think the Information Security Management System might not be a technical measure since it’s more about policies and procedures.

upvoted 0 times

...

Ernest

6 months ago

I think the key here is to focus on what is truly a technical security control versus a management or procedural control. The encryption and validation of data seem like clear technical measures to me.

upvoted 0 times

...

Gretchen

6 months ago

I'm a bit confused on this one. I'm not sure if the use of tokens is considered a technical measure or not. I'll have to think it through.

upvoted 0 times

...

Abraham

6 months ago

I'm pretty confident the answer is A. The Information Security Management System is likely a policy or procedural measure, not a technical one.

upvoted 0 times

...

Justine

6 months ago

Okay, let's see. The Information Security Management System seems like it could be a non-technical measure, but I'm not totally sure.

upvoted 0 times

...

Cristal

6 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the differences between technical and non-technical security measures.

upvoted 0 times

...

Verda

12 months ago

A is the right answer. The ISMS is the odd one out here, the rest are all technical safeguards. Although, I do wonder if the token access is really that technical, it's kind of old-school these days.

upvoted 0 times

Heidy

10 months ago

D) Encryption of information

upvoted 0 times

...

Linsey

10 months ago

C) Validation of input and output data in applications

upvoted 0 times

...

Providencia

10 months ago

B) The use of tokens to gain access to information systems

upvoted 0 times

...

Lemuel

11 months ago

A) Information Security Management System

upvoted 0 times

...

Vernell

12 months ago

Hmm, this one's tricky. I think I'll go with A, but I'm not 100% sure. Maybe I should have spent more time studying encryption algorithms instead of watching cat videos.

upvoted 0 times

...