[Feb 23, 2023] PassLeaderVCE ISO-IEC-27001-Lead-Auditor Exam Practice Test Questions (Updated 99 Questions) [Q37-Q53]

4/5 - (1 vote)

[Feb 23, 2023] PassLeaderVCE ISO-IEC-27001-Lead-Auditor Exam Practice Test Questions (Updated 99 Questions)

Pass PECB ISO-IEC-27001-Lead-Auditor Exam Info and Free Practice Test

Q37. Which of the following statements are correct for Clean Desk Policy?

Don’t leave confidential documents on your desk.

Don’t leave valuable items on your desk if you are not in your work area.

Don’t leave highly confidential items.

Don’t leave laptops without cable lock.

Q38. Which measure is a preventive measure?

Installing a logging system that enables changes in a system to be recognized

Shutting down all internet traffic after a hacker has gained access to the company systems

Putting sensitive information in a safe

Q39. Information or data that are classified as ______ do not require labeling.

Public

Internal

Confidential

Highly Confidential

Q40. An administration office is going to determine the dangers to which it is exposed.
What do we call a possible event that can have a disruptive effect on the reliability of information?

dependency

threat

vulnerability

risk

Q41. After a devastating office fire, all staff are moved to other branches of the company. At what moment in the incident management process is this measure effectuated?

Between incident and damage

Between detection and classification

Between recovery and normal operations

Between classification and escalation

Q42. Who is responsible for Initial asset allocation to the user/custodian of the assets?

Asset Manager

Asset Owner

Asset Practitioner

Asset Stakeholder

Q43. Why do we need to test a disaster recovery plan regularly, and keep it up to date?

Otherwise the measures taken and the incident procedures planned may not be adequate

Otherwise it is no longer up to date with the registration of daily occurring faults

Otherwise remotely stored backups may no longer be available to the security team

Q44. Often, people do not pick up their prints from a shared printer. How can this affect the confidentiality of information?

Confidentiality cannot be guaranteed

Integrity cannot be guaranteed

Authenticity cannot be guaranteed

Availability cannot be guaranteed

Q45. What type of legislation requires a proper controlled purchase process?

Personal data protection act

Computer criminality act

Government information act

Intellectual property rights act

Q46. What is the purpose of an Information Security policy?

An information security policy makes the security plan concrete by providing the necessary details

An information security policy provides insight into threats and the possible consequences

An information security policy provides direction and support to the management regarding information security

An information security policy documents the analysis of risks and the search for countermeasures

Q47. What type of compliancy standard, regulation or legislation provides a code of practice for information security?

ISO/IEC 27002

Personal data protection act

Computer criminality act

IT Service Management

Q48. Which of the following is a possible event that can have a disruptive effect on the reliability of information?

Threat

Risk

Vulnerability

Dependency

Q49. Which is not a requirement of HR prior to hiring?

Undergo background verification

Applicant must complete pre-employment documentation requirements

Must undergo Awareness training on information security.

Must successfully pass Background Investigation

Q50. A scenario wherein the city or location where the building(s) reside is / are not accessible.

Component

Facility

City

Country

Q51. In acceptable use of Information Assets, which is the best practice?

Access to information and communication systems are provided for business purpose only

Interfering with or denying service to any user other than the employee’s host

Playing any computer games during office hours

Accessing phone or network transmissions, including wireless or wifi transmissions

Q52. What type of measure involves the stopping of possible consequences of security incidents?

Corrective

Detective

Repressive

Preventive

Q53. What is the relationship between data and information?

Data is structured information.

Information is the meaning and value assigned to a collection of data.

Loading …

PECB ISO-IEC-27001-Lead-Auditor Exam Syllabus Topics:

Topic	Details
Topic 1	Managing an ISO IEC 27001 audit program Preparation, Conducting, Closing of an ISO IEC 27001 audit
Topic 2	Evaluate the ISMS conformity to ISO IEC 27001 requirements, in accordance with the fundamental audit concepts and principles
Topic 3	Fundamental audit concepts and principles Fundamental principles and concepts of Information Security Management System (ISMS)
Topic 4	Plan, conduct, and close an ISO IEC 27001 compliance audit Manage an ISO IEC 27001 audit program