Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

PECB ISO-IEC-27001-Lead-Implementer Exam - Topic 4 Question 71 Discussion

Scenario 7: InfoSec is a multinational corporation headquartered in Boston, MA, which provides professional electronics, gaming, and entertainment services. After facing numerous information security incidents, InfoSec has decided to establish teams and implement measures to prevent potential incidents in the futureEmma, Bob. and Anna were hired as the new members of InfoSec's information security team, which consists of a security architecture team, an incident response team (IRT) and a forensics team Emma's job is to create information security plans, policies, protocols, and training to prepare InfoSec to respond to incidents effectively Emma and Bob would be full-time employees of InfoSec, whereas Anna was contracted as an external consultant.Bob, a network expert, will deploy a screened subnet network architecture This architecture will isolate the demilitarized zone (OMZ) to which hosted public services are attached and InfoSec's publicly accessible resources from their private network Thus, InfoSec will be able to block potential attackers from causing unwanted events inside the company's network. Bob is also responsible for ensuring that a thorough evaluation of the nature of an unexpected event is conducted, including the details on how the event happened and what or whom it might affect.Anna will create records of the data, reviews, analysis, and reports in order to keep evidence for the purpose of disciplinary and legal action, and use them to prevent future incidents. To do the work accordingly, she should be aware of the company's information security incident management policy beforehandAmong others, this policy specifies the type of records to be created, the place where they should be kept, and the format and content that specific record types should have.Based on this scenario, answer the following question:Based on his tasks, which team is Bob part of?
C) Incident response team
A) Security architecture team
B) Forensics team

PECB ISO-IEC-27001-Lead-Implementer Exam - Topic 4 Question 71 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam
Question #: 71
Topic #: 4
[All ISO-IEC-27001-Lead-Implementer Questions]

Scenario 7: InfoSec is a multinational corporation headquartered in Boston, MA, which provides professional electronics, gaming, and entertainment services. After facing numerous information security incidents, InfoSec has decided to establish teams and implement measures to prevent potential incidents in the future

Emma, Bob. and Anna were hired as the new members of InfoSec's information security team, which consists of a security architecture team, an incident response team (IRT) and a forensics team Emma's job is to create information security plans, policies, protocols, and training to prepare InfoSec to respond to incidents effectively Emma and Bob would be full-time employees of InfoSec, whereas Anna was contracted as an external consultant.

Bob, a network expert, will deploy a screened subnet network architecture This architecture will isolate the demilitarized zone (OMZ) to which hosted public services are attached and InfoSec's publicly accessible resources from their private network Thus, InfoSec will be able to block potential attackers from causing unwanted events inside the company's network. Bob is also responsible for ensuring that a thorough evaluation of the nature of an unexpected event is conducted, including the details on how the event happened and what or whom it might affect.

Anna will create records of the data, reviews, analysis, and reports in order to keep evidence for the purpose of disciplinary and legal action, and use them to prevent future incidents. To do the work accordingly, she should be aware of the company's information security incident management policy beforehand

Among others, this policy specifies the type of records to be created, the place where they should be kept, and the format and content that specific record types should have.

Based on this scenario, answer the following question:

Based on his tasks, which team is Bob part of?

Show Suggested Answer Hide Answer
Suggested Answer: C

Based on his tasks, Bob is part of the incident response team (IRT) of InfoSec.According to ISO/IEC 27035-2:2023, the IRT is a team of appropriately skilled and trusted members of an organization that responds to and resolves incidents in a coordinated way1.One of the tasks of the IRT is to conduct an evaluation of the nature of an unexpected event, including the details on how the event happened and what or whom it might affect1. This is consistent with Bob's responsibility of ensuring that a thorough evaluation of the nature of an unexpected event is conducted. Therefore, Bob belongs to the incident response team.

ISO/IEC 27035-2:2023 (en), Information technology --- Information security incident management --- Part 2: Guidelines to plan and prepare for incident response1

Response to Information Security Incidents | ISMS.online2


Contribute your Thoughts:

0/2000 characters
I recall that the forensics team deals with evidence and analysis, so Bob's tasks don't align with that. I lean towards him being in the Security architecture team.
upvoted 0 times
...
Devora
5 days ago
I feel like Bob might be in the Incident response team because he evaluates unexpected events, but that doesn't really fit with the architecture focus.
upvoted 0 times
...
Melissa
10 days ago
I'm not entirely sure, but I remember a practice question where the incident response team focused more on handling events after they happen, while Bob seems to be setting things up beforehand.
upvoted 0 times
...
Gerardo
15 days ago
I think Bob is part of the Security architecture team since he's working on the screened subnet network architecture.
upvoted 0 times
...

Save Cancel