EXIN ISMP Actual Free Exam Questions & Community Discussion

Exam Code/Number: ISMP
Exam Name/Title: Information Security Management Professional based on ISO/IEC 27001
Certification Provider: EXIN
Corresponding Certification: Information Security Management

Exam Questions: 31
Updated On: Jul 09, 2026

Question #5

What needs to be decided prior to considering the treatment of risks?

A. Mitigation plans

B. How to apply appropriate controls to reduce the risks

C. Criteria for determining whether or not the risk can be accepted

D. The development of own guidelines

Discussion 0

Correct Answer: C Vote an answer

Question #6

A security manager for a large company has the task to achieve physical protection for corporate data stores.
Through which control can physical protection be achieved?

A. Having visitors sign in and out of the corporate datacenter

B. Using key access controls for employees needing access

C. Using a firewall to prevent access to the network infrastructure

D. Using access control lists to prevent logical access to organizational infrastructure

Discussion 0

Correct Answer: B Vote an answer

Question #7

A risk manager is asked to perform a complete risk assessment for a company.
What is the best method to identify most of the threats to the company?

A. Have a brainstorm with representatives of all stakeholders

B. Send a checklist for threat identification to all staff involved in information security

C. Interview top management

Discussion 0

Correct Answer: A Vote an answer

Question #8

What is the best way to start setting the information security controls?

A. Use a standard security baseline

B. Resort back to the default factory standards

C. Implement the security measures as prescribed by a risk analysis tool

Discussion 0

Correct Answer: A Vote an answer

Download Free EXIN ISMP Demo

Simply submit your e-mail address below to get started with our free demo of your EXIN ISMP exam.