CPIT InfoSec Practice Questions - Certified Professional of IT - Information Security Officer (InfoSec) Exam - CPIT InfoSec Practice Questions - Certified Professional of IT - Information Security Officer (InfoSec) Exam

Question 1

Under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong, what is the primary role of the Privacy Commissioner for Personal Data (PCPD)?

To prosecute cybercriminals who perform denial-of-service attacks against government networks To monitor, supervise, and enforce compliance with the provisions of Cap. 486 To mandate technical security configurations for all commercial databases in Hong Kong To issue digital certificates and manage public key infrastructure as a root CA

Correct Answer:

To monitor, supervise, and enforce compliance with the provisions of Cap. 486

Question 2

What is the key difference between Risk Assessment and Risk Management in an enterprise security framework?

Risk Assessment involves fixing the security flaws, while Risk Management is only about auditing Risk Assessment identifies, analyzes, and evaluates risks, whereas Risk Management encompasses the entire process of identifying, assessing, and mitigating risks Risk Assessment is performed by external auditors, while Risk Management is performed only by the internal IT team Risk Assessment is a qualitative process, whereas Risk Management is purely quantitative

Correct Answer:

Risk Assessment identifies, analyzes, and evaluates risks, whereas Risk Management encompasses the entire process of identifying, assessing, and mitigating risks

Question 3

Which of the following describes the primary objective of the ISO/IEC 27001 standard?

To specify the exact hardware and firewall rules required to secure an enterprise network To establish, implement, maintain, and continually improve an Information Security Management System (ISMS) To serve as a legally binding regulation that all businesses registered in Hong Kong must comply with To certify individual IT professionals as qualified system administrators

Correct Answer:

To establish, implement, maintain, and continually improve an Information Security Management System (ISMS)

Question 4

What is the most critical requirement for an enterprise Information Security Policy to remain effective over time?

It must be drafted by an external legal counsel without input from the IT department It must be reviewed and updated regularly in response to changes in the organization's environment and threat landscape It must contain highly technical, low-level configuration steps for system administration It must remain static and unchanged for at least ten years to ensure consistency

Correct Answer:

It must be reviewed and updated regularly in response to changes in the organization's environment and threat landscape

Question 5

When conducting a security assessment of a third-party vendor, what is the main purpose of reviewing their SOC 2 Type II report?

To verify that the vendor has paid all their local business taxes in Hong Kong To obtain independent assurance about the operational effectiveness of the vendor's security controls over a specified period To get a list of all custom code vulnerabilities present in the vendor's production software To confirm the physical locations and land titles of the vendor's corporate offices

Correct Answer:

To obtain independent assurance about the operational effectiveness of the vendor's security controls over a specified period

Question 1

Exam overview

About this Exam

Prepare with the CPIT InfoSec Practice Questions - Certified Professional of IT - Information Security Officer (InfoSec) Exam practice quiz. This question bank includes 100 questions covering security, data, network, primary, and access. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

CPIT InfoSec Practice Questions - Certified Professional of IT - Information Security Officer (InfoSec) Exam

This practice set contains 100 questions from the matching question bank and focuses on security, data, network, primary, and access. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.

No fixed duration is currently configured for this quiz.

Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.

Yes. You can retake the practice test again as you continue studying during your available access period.

After your access is confirmed, you can continue into the complete practice exam from this quiz flow.

Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.

Keep studying

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

About this Exam

Additional Information

CPIT InfoSec Practice Questions - Certified Professional of IT - Information Security Officer (InfoSec) Exam

Frequently Asked Questions

Related Questions

ISC2 Certified in Cybersecurity Practice Exam

Arizona CNA Certified Nursing Assistant Practice Exam

Certified Professional Public Buyer (CPPB) Practice Exam

809 Field Training Officer Practice Exam

Arizona Security Guard Knowledge Practice Exam

Certified Specialist Business Intelligence (CSBI) Practice Test