Get Latest Sep-2023 Real ISO-IEC-27001-Lead-Auditor Exam Questions and Answers FREE [Q11-Q26]

5/5 - (1 vote)

Get Latest Sep-2023 Real ISO-IEC-27001-Lead-Auditor Exam Questions and Answers FREE

Truly Beneficial For Your PECB Exam (Updated 99 Questions)

NO.11 What is the difference between a restricted and confidential document?

Restricted – to be shared among an authorized group
Confidential – to be shared among named individuals

Restricted – to be shared among named individuals
Confidential – to be shared among an authorized group

Restricted – to be shared among named individuals
Confidential – to be shared across the organization only

Restricted – to be shared among named individuals
Confidential – to be shared with friends and family

NO.12 Which of the following is a technical security measure?

Encryption

Security policy

Safe storage of backups

User role profiles.

NO.13 Who is authorized to change the classification of a document?

The author of the document

The administrator of the document

The owner of the document

The manager of the owner of the document

NO.14 The following are the guidelines to protect your password, except:

Don’t use the same password for various company system security access

Do not share passwords with anyone

For easy recall, use the same password for company and personal accounts

Change a temporary password on first log-on

NO.15 What is the purpose of an Information Security policy?

An information security policy makes the security plan concrete by providing the necessary details

An information security policy provides insight into threats and the possible consequences

An information security policy provides direction and support to the management regarding information security

An information security policy documents the analysis of risks and the search for countermeasures

NO.16 What type of legislation requires a proper controlled purchase process?

Personal data protection act

Computer criminality act

Government information act

Intellectual property rights act

NO.17 Who is responsible for Initial asset allocation to the user/custodian of the assets?

Asset Manager

Asset Owner

Asset Practitioner

Asset Stakeholder

NO.18 You receive an E-mail from some unknown person claiming to be representative of your bank and asking for your account number and password so that they can fix your account. Such an attempt of social engineering is called

Shoulder Surfing

Mountaineering

Phishing

Spoofing

NO.19 What is a repressive measure in case of a fire?

Taking out a fire insurance

Putting out a fire after it has been detected by a fire detector

Repairing damage caused by the fire

NO.20 What is the name of the system that guarantees the coherence of information security in the organization?

Information Security Management System (ISMS)

Rootkit

Security regulations for special information for the government

Information Technology Service Management (ITSM)

NO.21 How is the purpose of information security policy best described?

An information security policy documents the analysis of risks and the search for countermeasures.

An information security policy provides direction and support to the management regarding information security.

An information security policy makes the security plan concrete by providing it with the necessary details.

An information security policy provides insight into threats and the possible consequences.

NO.22 Changes on project-managed applications or database should undergo the change control process as documented.

True

False

NO.23 An administration office is going to determine the dangers to which it is exposed.
What do we call a possible event that can have a disruptive effect on the reliability of information?

dependency

threat

vulnerability

risk

NO.24 In acceptable use of Information Assets, which is the best practice?

Access to information and communication systems are provided for business purpose only

Interfering with or denying service to any user other than the employee’s host

Playing any computer games during office hours

Accessing phone or network transmissions, including wireless or wifi transmissions

NO.25 What is the worst possible action that an employee may receive for sharing his or her password or access with others?

Forced roll off from the project

The lowest rating on his or her performance assessment

Three days suspension from work

Termination

NO.26 You see a blue color sticker on certain physical assets. What does this signify?

The asset is very high critical and its failure affects the entire organization

The asset with blue stickers should be kept air conditioned at all times

The asset is high critical and its failure will affect a group/s/project’s work in the organization

The asset is critical and the impact is restricted to an employee only

Loading …

PECB ISO/IEC 27001 Lead Auditor certification is designed to help individuals gain the necessary knowledge and skills to conduct effective information security management system (ISMS) audits. ISO-IEC-27001-Lead-Auditor exam covers a wide range of topics, including information security management principles, the ISO/IEC 27001 standard, audit techniques, and risk assessment and management.

ISO-IEC-27001-Lead-Auditor dumps Free Test Engine Verified By It Certified Experts: https://www.passleadervce.com/ISO-27001/reliable-ISO-IEC-27001-Lead-Auditor-exam-learning-guide.html