ISO-IEC-27001-Lead-Implementer Training & Certification Get Latest ISO 27001 Updated on Apr 25, 2022 [Q19-Q33]

Diesen Beitrag bewerten

ISO-IEC-27001-Lead-Implementer Training & Certification Get Latest ISO 27001 Updated on Apr 25, 2022

Certification Training for ISO-IEC-27001-Lead-Implementer Exam Dumps Test Engine

NEUE FRAGE 19
Who is accountable to classify information assets?

the CEO

the CISO

the Information Security Team

theasset owner

NEUE FRAGE 20
You are a consultant and areregularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don’t want the temporary workers to have access to your reports.
Which reliability aspect of the information in your reports must you protect?

Verfügbarkeit

Integrität

Vertraulichkeit

NEUE FRAGE 21
Susan sends an email to Paul. Who determines the meaning and the value of information in this email?

Paul, therecipient of the information.

Paul and Susan, the sender and the recipient of the information.

Susan, the sender of the information.

NEUE FRAGE 22
Of the following, which is the best organization or set of organizations to contribute to compliance?

IT only

IT,business management, HR and legal

IT and management

IT and legal

NEUE FRAGE 23
What is the most important reason for applying the segregation of duties?

Segregation of duties makes it clear who is responsible for what.

Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.

Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

Segregation of duties makes it easier for a person who is readywith his or her part of the work to take time off or to take over the work of another person.

NEUE FRAGE 24
A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

If the riskanalysis has not been carried out.

When computer systems are kept in a cellar below ground level.

When the computer systems are not insured.

When the organization is located near a river.

NEUE FRAGE 25
What is the objective of classifying information?

Authorizing the use of an information system

Creating alabel that indicates how confidential the information is

Defining different levels of sensitivity into which information may be arranged

Displaying on the document who is permitted access

NEUE FRAGE 26
What should be used to protect data on removable media ifdata confidentiality or integrity are important considerations?

backup on another removable medium

cryptographic techniques

a password

logging

NEUE FRAGE 27
Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?

The recipient, Rachel

The person who drafted the insurance terms and conditions

The manager, Linda

The sender, Peter

NEUE FRAGE 28
Select the controls that correspond to thedomain “9. ACCESS CONTROL” of ISO / 27002 (Choose three)

Restriction of access to information

Return of assets

Management of access rights with special privileges

Withdrawal or adaptation of access rights

NEUE FRAGE 29
What sort of security does a Public Key Infrastructure (PKI) offer?

It provides digital certificates that can be used to digitally signdocuments. Such signatures irrefutably determine from whom a document was sent.

Having a PKI shows customers that a web-based business is secure.

By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.

A PKI ensures that backups of company data are made on a regular basis.

NEUE FRAGE 30
Which of these reliability aspects is “completeness” a part of?

Verfügbarkeit

Exclusivity

Integrität

Vertraulichkeit

NEUE FRAGE 31
How many domains does ISO / IEC 27002: 2013 have?

140

110

114

NEUE FRAGE 32
True or False: Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered

Wahr

Falsch

NEUE FRAGE 33
Select risk control activities for domain “10. Encryption” of ISO / 27002: 2013 (Choose two)

Work in safe areas

Cryptographic Controls Use Policy

Physical security perimeter

Key management

Laden …