Halloween Special 2026! Get Up to 25% OFF Practice Questions! Limited Time - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GAQM ISO27-13-001 Exam - Topic 9 Question 76 Discussion

Posted by Dana on Jun 28, 2024 at 11:09 AM

In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:

Suggested Answer: B, C

Get Premium ISO27-13-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
39 comments · newest first
FA
Fairy 11 months ago
I’m not so sure about D, seems like it could help prevent panic.
IL
Ilona 11 months ago
Reporting through the Servicedesk is a must!
SH
Shelba 11 months ago
Wait, isn't it important to inform all employees about incidents?
LE
Leslie 12 months ago
I agree, sharing details with everyone isn't necessary.
MI
Mira 12 months ago
D is definitely the right answer.
GA
Gail 12 months ago
I have a hunch that C is also a responsibility, but D just feels wrong since it could breach confidentiality.
BA
Barabara 1 year ago
I practiced a similar question, and I think preserving evidence is crucial, so B seems like a responsibility too.
ZO
Zona 1 year ago
I'm not entirely sure, but I feel like D might be the odd one out since sharing details with all employees could cause panic.
SH
Shannan 1 year ago
I remember we discussed the importance of reporting incidents, so I think A is definitely a responsibility.
BE
Beckie 1 year ago
Okay, I think I've got this. The key is that users are expected to report incidents, preserve evidence, and cooperate with investigators. Making details public would be an exception to their normal responsibilities.
LA
Lavina 1 year ago
Option D is definitely the right answer here. Users should not be making incident details known to all employees - that would be a breach of confidentiality and could compromise the investigation.
GW
Gwenn 1 year ago
Hmm, I'm a bit unsure about this one. I know users have certain obligations during an incident, but I'm not totally clear on the exceptions. Let me re-read the question and options closely.
AN
Angelo 1 year ago
This seems like a straightforward question about incident response roles and responsibilities. I'll carefully review the options and think through what users should and shouldn't do.
DA
Daren 1 year ago
Hmm, this one seems straightforward. I think the key is to focus on the specific requirement to verify if Azure Diagnostics is enabled. That narrows it down to the cmdlets related to Azure VM extensions.
WI
William 1 year ago
Okay, this seems straightforward. I'll just need to find the 3D Models feature, insert the Foundation model, resize it, and place it to the left of the list.
DA
Darci 1 year ago
Okay, let me see. NIST is the National Institute of Standards and Technology, and they're responsible for establishing encryption standards in the US. I'm pretty sure the current one is AES, so I'll go with that.
YO
Yolande 1 year ago
I'm recalling a similar question we did in class where we discussed security issues associated with frameworks. I guess that could be a concern too.
MI
Micheal 1 year ago
Haha, making the incident known to all employees? That's like putting up a 'Hack Me' sign. Definitely not the right approach.
JU
Justa 1 year ago
↳ replying to Micheal
D) Make the information security incident details known to all employees
NI
Nicolette 1 year ago
↳ replying to Micheal
Yeah, making it known to everyone is a bad idea. Keep it contained.
LO
Long 1 year ago
↳ replying to Micheal
C) Cooperate with investigative personnel during investigation if needed
DU
Dudley 1 year ago
↳ replying to Micheal
C) Cooperate with investigative personnel during investigation if needed
EZ
Ezekiel 1 year ago
↳ replying to Micheal
B) Preserve evidence if necessary
VI
Vilma 1 year ago
↳ replying to Micheal
A) Report suspected or known incidents upon discovery through the Servicedesk
IZ
Izetta 1 year ago
↳ replying to Micheal
B) Preserve evidence if necessary
LA
Laura 1 year ago
↳ replying to Micheal
A) Report suspected or known incidents upon discovery through the Servicedesk
ME
Melvin 2 years ago
This is a classic incident response question. Option B is the most important - preserving evidence is crucial for the investigation.
CH
Chara 2 years ago
I agree, option D goes against the principles of incident response. We should only share details with authorized personnel.
NI
Nieves 2 years ago
But making the information security incident details known to all employees could cause panic and compromise the investigation.
PA
Paulina 2 years ago
I disagree, I believe the answer is A.
LY
Lynna 2 years ago
Option D is clearly the wrong answer. Sharing incident details with all employees would be a big security risk.
CH
Chauncey 1 year ago
↳ replying to Lynna
D) Make the information security incident details known to all employees
PA
Pamella 1 year ago
↳ replying to Lynna
C) Cooperate with investigative personnel during investigation if needed
OR
Ora 1 year ago
↳ replying to Lynna
B) Preserve evidence if necessary
AL
Alva 1 year ago
↳ replying to Lynna
C) Cooperate with investigative personnel during investigation if needed
LA
Lawana 1 year ago
↳ replying to Lynna
B) Preserve evidence if necessary
JU
Julio 1 year ago
↳ replying to Lynna
A) Report suspected or known incidents upon discovery through the Servicedesk
KR
Kristofer 1 year ago
↳ replying to Lynna
A) Report suspected or known incidents upon discovery through the Servicedesk
NI
Nieves 2 years ago
I think the answer is D.
0/2000 characters

Save Cancel