ISO-IEC-27001-Lead-Auditor PDF Dumps Apr 17, 2022 Exam Questions – Valid ISO-IEC-27001-Lead-Auditor Dumps [Q21-Q43]

Rate this post

ISO-IEC-27001-Lead-Auditor PDF Dumps Apr 17, 2022 Exam Questions – Valid ISO-IEC-27001-Lead-Auditor Dumps

Ultimate ISO-IEC-27001-Lead-Auditor Guide to Prepare Free Latest PECB Practice Tests Dumps

NEW QUESTION 21
In which order is an Information Security Management System set up?

Implementation, operation, maintenance, establishment

Implementation, operation, improvement, maintenance

Establishment, implementation, operation, maintenance

Establishment, operation, monitoring, improvement

NEW QUESTION 22
Who is authorized to change the classification of a document?

The author of the document

The administrator of the document

The owner of the document

The manager of the owner of the document

NEW QUESTION 23
There is a network printer in the hallway of the company where you work. Many employees don’t pick up their printouts immediately and leave them on the printer.
What are the consequences of this to the reliability of the information?

The integrity of the information is no longer guaranteed.

The availability of the information is no longer guaranteed.

The confidentiality of the information is no longer guaranteed.

The Security of the information is no longer guaranteed.

NEW QUESTION 24
A member of staff denies sending a particular message.
Which reliability aspect of information is in danger here?

availability

correctness

integrity

confidentiality

NEW QUESTION 25
What is the goal of classification of information?

To create a manual about how to handle mobile devices

Applying labels making the information easier to recognize

Structuring information according to its sensitivity

NEW QUESTION 26
Availability means

Service should be accessible at the required time and usable by all

Service should be accessible at the required time and usable only by the authorized entity

Service should not be accessible when required

NEW QUESTION 27
Which of the following statements are correct for Clean Desk Policy?

Don’t leave confidential documents on your desk.

Don’t leave valuable items on your desk if you are not in your work area.

Don’t leave highly confidential items.

Don’t leave laptops without cable lock.

NEW QUESTION 28
Cabling Security is associated with Power, telecommunication and network cabling carrying information are protected from interception and damage.

True

False

NEW QUESTION 29
What type of legislation requires a proper controlled purchase process?

Personal data protection act

Computer criminality act

Government information act

Intellectual property rights act

NEW QUESTION 30
CEO sends a mail giving his views on the status of the company and the company’s future strategy and the CEO’s vision and the employee’s part in it. The mail should be classified as

Internal Mail

Public Mail

Confidential Mail

Restricted Mail

NEW QUESTION 31
As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

Appoint security staff

Encrypt all sensitive information

Formulate a policy

Set up an access control procedure

NEW QUESTION 32
What is the standard definition of ISMS?

Is an information security systematic approach to achieve business objectives for implementation, establishing, reviewing,operating and maintaining organization’s reputation.

A company wide business objectives to achieve information security awareness for establishing, implementing, operating, monitoring, reviewing, maintaining and improving

A project-based approach to achieve business objectives for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organization’s information security

A systematic approach for establishing, implementing, operating,monitoring, reviewing, maintaining and improving an organization’s information security to achieve business objectives.

NEW QUESTION 33
Information has a number of reliability aspects. Reliability is constantly being threatened. Examples of threats are: a cable becomes loose, someone alters information by accident, data is used privately or is falsified.
Which of these examples is a threat to integrity?

a loose cable

accidental alteration of data

private use of data

System restart

NEW QUESTION 34
You see a blue color sticker on certain physical assets. What does this signify?

The asset is very high critical and its failure affects the entire organization

The asset with blue stickers should be kept air conditioned at all times

The asset is high critical and its failure will affect a group/s/project’s work in the organization

The asset is critical and the impact is restricted to an employee only

NEW QUESTION 35
All are prohibited in acceptable use of information assets, except:

Electronic chain letters

E-mail copies to non-essential readers

Company-wide e-mails with supervisor/TL permission.

Messages with very large attachments or to a large number ofrecipients.

NEW QUESTION 36
Which is the glue that ties the triad together

Process

People

Collaboration

Technology

NEW QUESTION 37
The following are definitions of Information, except:

accurate and timely data

specific and organized data for a purpose

mature and measurable data

can lead to understanding and decrease in uncertainty

NEW QUESTION 38
What is a reason for the classification of information?

To provide clear identification tags

To structure the information according to its sensitivity

Creating a manual describing the BYOD policy

NEW QUESTION 39
A hacker gains access to a web server and reads the credit card numbers stored on that server. Which security principle is violated?

Availability

Confidentiality

Integrity

Authenticity

NEW QUESTION 40
Which of the following does an Asset Register contain? (Choose two)

Asset Type

Asset Owner

Asset Modifier

Process ID

NEW QUESTION 41
A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?

Availability

Confidentiality

Integrity

Compliance

NEW QUESTION 42
What is social engineering?

A group planning for a social activity in the organization

Creating a situation wherein a third party gains confidential information from you

The organization planning an activity for welfare of the neighborhood

NEW QUESTION 43
You are the lead auditor of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks.
What is this risk strategy called?

Risk bearing

Risk avoidance

Risk neutral

Risk skipping

Loading …