EPI IT Management CITM Exin Study Notes

In corporate hiring protocols,additional screeningtypically refers to background checks beyond basic qualifications, such as verifying a candidate’scriminal record. This is critical for IT roles, where employees may have access to sensitive systems and data, ensuring trustworthiness and compliance with security policies.

Salary demands (A) are negotiated during the hiring process, not screened. Number of years of experience (B) and educational level (D) are verified through resumes and standard checks, not typically classified as “additional screening,” which focuses on security-related checks like criminal records.

Reviewing anIT service catalog, as perITILservice asset and configuration management, focuses on ensuring services align with business needs and compliance requirements. Key criteria include:

Retiring services (A):Assessing whether services are outdated or no longer needed is critical.

New laws, codes, or regulations (B):Compliance with legal or regulatory changes is essential to avoid penalties.

Service relevance and appropriateness (D):Ensures services meet current business objectives and user needs.

Changes in the IT service provider organization (C), such as internal restructuring or staffing changes, are not typically a direct criterion for service catalog review, as the catalog focuses on services offered, not the provider’s internal operations.

Afirewallis categorized as atechnical preventive control(A) ininformation security management. According toISO/IEC 27001, preventive controls aim to stop security incidents before they occur, and technical controls involve technology-based solutions. A firewall prevents unauthorized access to the network perimeter by filtering traffic, making it a technical preventive control.

Physical detective control (B):Involves physical measures (e.g., cameras) to detect incidents, not applicable to firewalls.

Administrative deterrent control (C):Involves policies or procedures to discourage violations, not technology-based.

Physical corrective control (D):Addresses physical issues post-incident, not relevant to firewalls.

For a government system handling land title transfers, the key requirements arespeed of transmissionandprivacy. Aprivate blockchainis most suitable because it restricts access to authorized participants, ensuring privacy and confidentiality of sensitive data such as land ownership records. Private blockchains are controlled by a single organization or a limited group, allowing faster transaction processing compared to public blockchains, which require consensus from a large, decentralized network. This aligns with the need for quick and secure transactions in a controlled environment.

Public blockchains (B) are open to anyone, which compromises privacy for sensitive government data. Community blockchain (A) is not a standard term in blockchain technology, and consortium blockchains (D), while involving multiple organizations, are less suitable for a single government entity needing full control.