Unique Top-selling ISO-IEC-27001-Lead-Auditor Exams - New 2021 PECB Pratice Exam
ISO 27001 Dumps ISO-IEC-27001-Lead-Auditor Exam for Full Questions - Exam Study Guide
NEW QUESTION 59
The computer room is protected by a pass reader. Only the System Management department has a pass.
What type of security measure is this?
- A. a logical security measure
- B. a corrective security measure
- C. a repressive security measure
- D. a physical security measure
Answer: D
NEW QUESTION 60
A member of staff denies sending a particular message.
Which reliability aspect of information is in danger here?
- A. availability
- B. correctness
- C. integrity
- D. confidentiality
Answer: C
NEW QUESTION 61
Below is Purpose of "Integrity", which is one of the Basic Components of Information Security
- A. the property that information is not made available or disclosed to unauthorized individuals
- B. the property of being accessible and usable upon demand by an authorized entity.
- C. the property of safeguarding the accuracy and completeness of assets.
- D. the property that information is not made available or disclosed to unauthorized individuals
Answer: C
NEW QUESTION 62
An administration office is going to determine the dangers to which it is exposed.
What do we call a possible event that can have a disruptive effect on the reliability of information?
- A. risk
- B. dependency
- C. vulnerability
- D. threat
Answer: D
NEW QUESTION 63
The following are purposes of Information Security, except:
- A. Ensure Business Continuity
- B. Maximize Return on Investment
- C. Increase Business Assets
- D. Minimize Business Risk
Answer: C
NEW QUESTION 64
What is social engineering?
- A. A group planning for a social activity in the organization
- B. Creating a situation wherein a third party gains confidential information from you
- C. The organization planning an activity for welfare of the neighborhood
Answer: B
NEW QUESTION 65
Access Control System, CCTV and security guards are form of:
- A. Access Control
- B. Environment Security
- C. Physical Security
- D. Compliance
Answer: C
NEW QUESTION 66
What is the difference between a restricted and confidential document?
- A. Restricted - to be shared among named individuals
Confidential - to be shared across the organization only - B. Restricted - to be shared among named individuals
Confidential - to be shared among an authorized group - C. Restricted - to be shared among named individuals
Confidential - to be shared with friends and family - D. Restricted - to be shared among an authorized group
Confidential - to be shared among named individuals
Answer: B
NEW QUESTION 67
What is the worst possible action that an employee may receive for sharing his or her password or access with others?
- A. Three days suspension from work
- B. The lowest rating on his or her performance assessment
- C. Forced roll off from the project
- D. Termination
Answer: D
NEW QUESTION 68
You are the lead auditor of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks.
What is this risk strategy called?
- A. Risk skipping
- B. Risk bearing
- C. Risk neutral
- D. Risk avoidance
Answer: B
NEW QUESTION 69
Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?
- A. Malware threat
- B. Technical threat
- C. Social engineering threat
- D. Organisational threat
Answer: C
NEW QUESTION 70
A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company's information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?
- A. This analysis is based on scenarios and situations and produces a subjective view of the possible threats.
- B. This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.
Answer: A
NEW QUESTION 71
Availability means
- A. Service should be accessible at the required time and usable only by the authorized entity
- B. Service should be accessible at the required time and usable by all
- C. Service should not be accessible when required
Answer: A
NEW QUESTION 72
Which is the glue that ties the triad together
- A. Collaboration
- B. Technology
- C. People
- D. Process
Answer: D
NEW QUESTION 73
A decent visitor is roaming around without visitor's ID. As an employee you should do the following, except:
- A. Call the receptionist and inform about the visitor
- B. Escort him to his destination
- C. Say "hi" and offer coffee
- D. Greet and ask him what is his business
Answer: C
NEW QUESTION 74
Which of the following statements are correct for Clean Desk Policy?
- A. Don't leave valuable items on your desk if you are not in your work area.
- B. Don't leave laptops without cable lock.
- C. Don't leave confidential documents on your desk.
- D. Don't leave highly confidential items.
Answer: A,C,D
NEW QUESTION 75
What is the goal of classification of information?
- A. Structuring information according to its sensitivity
- B. To create a manual about how to handle mobile devices
- C. Applying labels making the information easier to recognize
Answer: A
NEW QUESTION 76
Changes to the information processing facilities shall be done in controlled manner.
- A. True
- B. False
Answer: A
NEW QUESTION 77
An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.
- A. True
- B. False
Answer: B
NEW QUESTION 78
As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?
- A. Encrypt all sensitive information
- B. Formulate a policy
- C. Set up an access control procedure
- D. Appoint security staff
Answer: B
NEW QUESTION 79
Which of the following is a technical security measure?
- A. User role profiles.
- B. Safe storage of backups
- C. Encryption
- D. Security policy
Answer: C
NEW QUESTION 80
Implement plan on a test basis - this comes under which section of PDCA
- A. Do
- B. Plan
- C. Act
- D. Check
Answer: A
NEW QUESTION 81
A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:
- A. plan, do, check, act.
- B. planning for continuous improvement.
- C. RACI Matrix
- D. time based planning.
Answer: A
NEW QUESTION 82
......
Best way to practice test for PECB ISO-IEC-27001-Lead-Auditor: https://www.freepdfdump.top/ISO-IEC-27001-Lead-Auditor-valid-torrent.html
ISO-IEC-27001-Lead-Auditor Dump Ready - Exam Questions and Answers: https://drive.google.com/open?id=1Guc5fmuS-x4iFNPI3BkWLZ5Z_F7t8zr3
