[Q26-Q44] PassLeaderVCE ISO-IEC-27001-Lead-Implementer Real Exam Question Answers Updated [Jul 16, 2023]

Rate this post

PassLeaderVCE ISO-IEC-27001-Lead-Implementer Real Exam Question Answers Updated [Jul 16, 2023]

Easily To Pass New PECB ISO-IEC-27001-Lead-Implementer Dumps with 50 Questions

PECB ISO-IEC-27001-Lead-Implementer exam is a certification that demonstrates a professional’s expertise in implementing information security management systems (ISMS) based on the ISO/IEC 27001 standard. PECB Certified ISO/IEC 27001 Lead Implementer exam certification is offered by the Professional Evaluation and Certification Board (PECB), which is a leading provider of training, examination, and certification services for professionals in various fields, including information security.

NO.26 You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?

A code ofconduct specifies how employees are expected to conduct themselves and is the same for all companies.

A code of conduct is a standard part of a labor contract.

A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.

NO.27 Which of the following measures is a correctivemeasure?

Incorporating an Intrusion Detection System (IDS) in the design of a computer center

Installing a virus scanner in an information system

Making a backup of the data that has been created or altered that day

Restoring a backup of the correct database after a corrupt copy of the database was written over the original

NO.28 The identified owner of an asset is always an individual

True

False

NO.29 You are a consultant and areregularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don’t want the temporary workers to have access to your reports.
Which reliability aspect of the information in your reports must you protect?

Availability

Integrity

Confidentiality

NO.30 It is allowed that employees and contractors are provided with an anonymous reporting channel to report violations of information security policies or procedures (“whistle blowing”)

True

False

NO.31 What is an example of a good physical security measure?

All employees and visitors carry an access pass.

Printers that are defective or have been replacedare immediately removed and given away as garbage for recycling.

Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

NO.32 What is the best description of a risk analysis?

A risk analysis is a method of mapping risks without looking at company processes.

A risk analysis helps to estimate the risks and develop the appropriate security measures.

A risk analysis calculates the exact financial consequences of damages.

NO.33 Susan sends an email to Paul. Who determines the meaning and the value of information in this email?

Paul, therecipient of the information.

Paul and Susan, the sender and the recipient of the information.

Susan, the sender of the information.

NO.34 In the context ofcontact with special interest groups, any information-sharing agreements should identify requirements for the protection of _________ information.

Availability

Confidential

Authentic

Authorization

NO.35 Which of the following measures is a preventive measure?

Installing a logging system that enables changes in a system to be recognized

Shutting down all internet traffic after a hacker has gained access to thecompany systems

Putting sensitive information in a safe

Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk

NO.36 The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?

Information Security Management System

The use of tokens to gain access to information systems

Validation of input and output data in applications

Encryption ofinformation

NO.37 Select risk control activities for domain “10. Encryption” of ISO / 27002: 2013 (Choose two)

Work in safe areas

Cryptographic Controls Use Policy

Physical security perimeter

Key management

NO.38 What do employees need to know to report a security incident?

How to report an incident and to whom.

Whether the incident has occurred before and what was the resulting damage.

The measures that should have been taken to prevent the incident in the first place.

Who is responsible for the incident and whether it was intentional.

NO.39 An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of theclients is earlier than the start date. What type of measure could prevent this error?

Availability measure

Integrity measure

Organizational measure

Technical measure

NO.40 How many domains does ISO / IEC 27002: 2013 have?

140

110

114

NO.41 What is the ISO / IEC 27002 standard?

It is a guide of good practices that describes the controlobjectives and recommended controls regarding information security.

It is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001

It is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.

NO.42 Select the controls that correspond to thedomain “9. ACCESS CONTROL” of ISO / 27002 (Choose three)

Restriction of access to information

Return of assets

Management of access rights with special privileges

Withdrawal or adaptation of access rights

NO.43 What is the greatest risk for an organization ifno information security policy has been defined?

If everyone works with the same account, it is impossible to find out who worked on what.

Information security activities are carried out by only a few people.

Too many measures areimplemented.

It is not possible for an organization to implement information security in a consistent manner.

NO.44 Physical labels and ________ are two common forms of labeling which are mentioned in ISO 27002.

metadata