ITIL ITIL 4 Specialist Collaborate Assure and Improve - ITIL 4 Specialist: Collaborate, Assure and Improve Exam
Page: 3 / 24
Total 120 questions
Question #11 (Topic: Exam A)
An organization has a public website where customers can make purchases. The website has daily automated vulnerability assessments to make sure that it is protected from known attacks, and to detect some types of security breach.
What additional automation should the organization implement to help ensure security incidents are detected quickly?
What additional automation should the organization implement to help ensure security incidents are detected quickly?
A. Use regular automated vulnerability assessments to detect missing patches and updates
B. Automatically switch services away from any compromised servers to provide continual service to customers
C. Use automated data forensic tools to collect and save evidence before investigating incidents
D. Analyse transactions to identify unusual or unexpected customer behavior
Answer: D
Question #12 (Topic: Exam A)
To support an audit, an information security consultant wants to share with relevant teams a list of additional controls that are needed to protect the organization’s assets.
What type of tool is BEST to assist with this?
What type of tool is BEST to assist with this?
A. Workflow management and collaboration tools
B. Monitoring and event management tools
C. Orchestration systems
D. SIEM tools
Answer: A
Question #13 (Topic: Exam A)
What TWO types of tool are the BEST to use to isolate a compromised server from the network?
1. Analysis and reporting tool
2. Workflow management and collaboration tool
3. SIEM tool
4. Knowledge management tool
1. Analysis and reporting tool
2. Workflow management and collaboration tool
3. SIEM tool
4. Knowledge management tool
A. 1 and 2
B. 2 and 3
C. 3 and 4
D. 1 and 4
Answer: B
Question #14 (Topic: Exam A)
A large organization has a small centralized information security management team, but most information security work is devolved to the many independent product teams. The central team defines policy, and makes recommendations about tools and automation, but each product team makes its own decisions about how to meet the policy.
What is the BEST approach to ensure information security is managed consistently across this organization?
What is the BEST approach to ensure information security is managed consistently across this organization?
A. Security experts in the product teams should report directly to the centralized information security management team
B. The centralized team should create an information security center of excellence to help the security experts collaborate
C. The centralized team should produce detailed process documentation to be followed by all product teams
D. The organization should adopt a security standard such as ISO/IEC 27001 and enforce its use across the product teams
Answer: B
Question #15 (Topic: Exam A)
Which activity is performed by an information security manager?
A. Representing the organization in strategic conversations with regulators
B. Conducting information security training and education
C. Defining the balance between business performance and information security
D. Governing security management employees across the organization
Answer: C
