New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GAQM ISO27-13-001 Exam - Topic 9 Question 76 Discussion

Actual exam question for GAQM's ISO27-13-001 exam
Question #: 76
Topic #: 9
[All ISO27-13-001 Questions]

In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:

Show Suggested Answer Hide Answer
Suggested Answer: B, C

Contribute your Thoughts:

0/2000 characters
Fairy
3 months ago
I’m not so sure about D, seems like it could help prevent panic.
upvoted 0 times
...
Ilona
3 months ago
Reporting through the Servicedesk is a must!
upvoted 0 times
...
Shelba
3 months ago
Wait, isn't it important to inform all employees about incidents?
upvoted 0 times
...
Leslie
4 months ago
I agree, sharing details with everyone isn't necessary.
upvoted 0 times
...
Mira
4 months ago
D is definitely the right answer.
upvoted 0 times
...
Gail
4 months ago
I have a hunch that C is also a responsibility, but D just feels wrong since it could breach confidentiality.
upvoted 0 times
...
Barabara
4 months ago
I practiced a similar question, and I think preserving evidence is crucial, so B seems like a responsibility too.
upvoted 0 times
...
Zona
4 months ago
I'm not entirely sure, but I feel like D might be the odd one out since sharing details with all employees could cause panic.
upvoted 0 times
...
Shannan
5 months ago
I remember we discussed the importance of reporting incidents, so I think A is definitely a responsibility.
upvoted 0 times
...
Beckie
5 months ago
Okay, I think I've got this. The key is that users are expected to report incidents, preserve evidence, and cooperate with investigators. Making details public would be an exception to their normal responsibilities.
upvoted 0 times
...
Lavina
5 months ago
Option D is definitely the right answer here. Users should not be making incident details known to all employees - that would be a breach of confidentiality and could compromise the investigation.
upvoted 0 times
...
Gwenn
5 months ago
Hmm, I'm a bit unsure about this one. I know users have certain obligations during an incident, but I'm not totally clear on the exceptions. Let me re-read the question and options closely.
upvoted 0 times
...
Angelo
5 months ago
This seems like a straightforward question about incident response roles and responsibilities. I'll carefully review the options and think through what users should and shouldn't do.
upvoted 0 times
...
Daren
5 months ago
Hmm, this one seems straightforward. I think the key is to focus on the specific requirement to verify if Azure Diagnostics is enabled. That narrows it down to the cmdlets related to Azure VM extensions.
upvoted 0 times
...
William
5 months ago
Okay, this seems straightforward. I'll just need to find the 3D Models feature, insert the Foundation model, resize it, and place it to the left of the list.
upvoted 0 times
...
Darci
5 months ago
Okay, let me see. NIST is the National Institute of Standards and Technology, and they're responsible for establishing encryption standards in the US. I'm pretty sure the current one is AES, so I'll go with that.
upvoted 0 times
...
Yolande
5 months ago
I'm recalling a similar question we did in class where we discussed security issues associated with frameworks. I guess that could be a concern too.
upvoted 0 times
...
Micheal
10 months ago
Haha, making the incident known to all employees? That's like putting up a 'Hack Me' sign. Definitely not the right approach.
upvoted 0 times
Justa
8 months ago
D) Make the information security incident details known to all employees
upvoted 0 times
...
Nicolette
8 months ago
Yeah, making it known to everyone is a bad idea. Keep it contained.
upvoted 0 times
...
Long
8 months ago
C) Cooperate with investigative personnel during investigation if needed
upvoted 0 times
...
Dudley
8 months ago
C) Cooperate with investigative personnel during investigation if needed
upvoted 0 times
...
Ezekiel
9 months ago
B) Preserve evidence if necessary
upvoted 0 times
...
Vilma
9 months ago
A) Report suspected or known incidents upon discovery through the Servicedesk
upvoted 0 times
...
Izetta
9 months ago
B) Preserve evidence if necessary
upvoted 0 times
...
Laura
9 months ago
A) Report suspected or known incidents upon discovery through the Servicedesk
upvoted 0 times
...
...
Melvin
10 months ago
This is a classic incident response question. Option B is the most important - preserving evidence is crucial for the investigation.
upvoted 0 times
...
Chara
10 months ago
I agree, option D goes against the principles of incident response. We should only share details with authorized personnel.
upvoted 0 times
...
Nieves
10 months ago
But making the information security incident details known to all employees could cause panic and compromise the investigation.
upvoted 0 times
...
Paulina
11 months ago
I disagree, I believe the answer is A.
upvoted 0 times
...
Lynna
11 months ago
Option D is clearly the wrong answer. Sharing incident details with all employees would be a big security risk.
upvoted 0 times
Chauncey
9 months ago
D) Make the information security incident details known to all employees
upvoted 0 times
...
Pamella
9 months ago
C) Cooperate with investigative personnel during investigation if needed
upvoted 0 times
...
Ora
9 months ago
B) Preserve evidence if necessary
upvoted 0 times
...
Alva
9 months ago
C) Cooperate with investigative personnel during investigation if needed
upvoted 0 times
...
Lawana
10 months ago
B) Preserve evidence if necessary
upvoted 0 times
...
Julio
10 months ago
A) Report suspected or known incidents upon discovery through the Servicedesk
upvoted 0 times
...
Kristofer
10 months ago
A) Report suspected or known incidents upon discovery through the Servicedesk
upvoted 0 times
...
...
Nieves
11 months ago
I think the answer is D.
upvoted 0 times
...

Save Cancel