Exin ISMP Exam - Topic 1 Question 12 Discussion

Actual exam question for Exin's ISMP exam

Question #: 12
Topic #: 1

[All ISMP Questions]

A security manager just finished the final copy of a risk assessment. This assessment contains a list of identified risks and she has to determine how to treat these risks.

What is the best option for the treatment of risks?

ABegin risk remediation immediately as the organization is currently at risk

BDecide the criteria for determining if the risk can be accepted

CDesign appropriate controls to reduce the risk

DRemediate the risk regardless of cost

Show Suggested Answer

Suggested Answer: B

by Jesusita at May 04, 2022, 06:47 PM

Limited Time Offer

25%

Off

Get Premium ISMP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Deonna

4 months ago

Not sure if starting remediation immediately is the best move.

upvoted 0 times

...

Lilli

4 months ago

Accepting some risks can be smart, but it depends on the situation.

upvoted 0 times

...

Paris

4 months ago

Wait, why would you remediate regardless of cost? That’s risky too!

upvoted 0 times

...

Val

4 months ago

Totally agree, option C seems the most sensible.

upvoted 0 times

...

Simona

5 months ago

I think designing appropriate controls is key!

upvoted 0 times

...

Clare

5 months ago

I think starting remediation right away, like in option A, could lead to overspending. It might be better to assess the risks first, like option B suggests.

upvoted 0 times

...

Ramonita

5 months ago

I vaguely recall a practice question where we had to prioritize risks based on cost and impact. I think option D might be too extreme, but I’m not completely confident.

upvoted 0 times

...

Lisha

5 months ago

I’m not entirely sure, but I feel like designing controls, like in option C, is a common practice we studied. It seems like a solid way to manage risks.

upvoted 0 times

...

Yuki

5 months ago

I remember we discussed the importance of evaluating risks before jumping into remediation. I think option B might be the right approach.

upvoted 0 times

...

Kimberlie

5 months ago

This looks like a straightforward question about the purpose of the ArchiMate standard. I'll read through the options carefully and choose the one that best describes its key function.

upvoted 0 times

...

Stephen

5 months ago

Hmm, I'm a bit confused. I thought a watch was used to monitor WebLogic logs, not WLDF instrumentation data. I'll have to re-read the question and options more closely.

upvoted 0 times

...

Josefa

5 months ago

I'm a bit uncertain about whether RDP is actually built into all Windows systems—did we confirm that?

upvoted 0 times

...