Get New 2022 Valid Practice To your ISO-IEC-27001-Lead-Auditor Exam (Updated 99 Questions) [Q34-Q48]

April 17, 2022 admin 0 Comments

4.6/5 - (19 votes)

Get New 2022 Valid Practice To your ISO-IEC-27001-Lead-Auditor Exam (Updated 99 Questions)

ISO 27001 ISO-IEC-27001-Lead-Auditor Exam Practice Test Questions Dumps Bundle!

PECB ISO-IEC-27001-Lead-Auditor Exam Syllabus Topics:

Topic	Details
Topic 1	Managing an ISO IEC 27001 audit program Preparation, Conducting, Closing of an ISO IEC 27001 audit
Topic 2	Evaluate the ISMS conformity to ISO IEC 27001 requirements, in accordance with the fundamental audit concepts and principles
Topic 3	Explain the fundamental concepts and principles of an information security management system (ISMS) based on ISO IEC 27001
Topic 4	Fundamental audit concepts and principles Fundamental principles and concepts of Information Security Management System (ISMS)

NO.34 Does the security have the right to ask you to display your ID badges and check your bags?

True

False

NO.35 In acceptable use of Information Assets, which is the best practice?

Access to information and communication systems are provided for business purpose only

Interfering with or denying service to any user other than the employee’s host

Playing any computer games during office hours

Accessing phone or network transmissions, including wireless or wifi transmissions

NO.36 Which is not a requirement of HR prior to hiring?

Undergo background verification

Applicant must complete pre-employment documentation requirements

Must undergo Awareness training on information security.

Must successfully pass Background Investigation

NO.37 Information or data that are classified as ______ do not require labeling.

Public

Internal

Confidential

Highly Confidential

NO.38 In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?

The content of data.

The degree to which missing, incomplete or incorrect data can be recovered.

The indispensability of data for the business processes.

The importance of the business processes that make use of the data.

NO.39 Changes on project-managed applications or database should undergo the change control process as documented.

True

False

NO.40 A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:

time based planning.

plan, do, check, act.

planning for continuous improvement.

RACI Matrix

NO.41 You have a hard copy of a customer design document that you want to dispose off. What would you do

Throw it in any dustbin

Shred it using a shredder

Give it to the office boy to reuse it for other purposes

Be environment friendly and reuse it for writing

NO.42 Information Security is a matter of building and maintaining ________ .

Confidentiality

Trust

Protection

Firewalls

NO.43 A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

Identifying assets and their value

Implementing counter measures

Establishing a balance between the costs of an incident and the costs of a security measure

Determining relevant vulnerabilities and threats

NO.44 There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good.
What is an example of the indirect damage caused by this fire?

Melted backup tapes

Burned computer systems

Burned documents

Water damage due to the fire extinguishers

NO.45 Which of the following does an Asset Register contain? (Choose two)

Asset Type

Asset Owner

Asset Modifier

Process ID

NO.46 Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

Social engineering threat

Organisational threat

Technical threat

Malware threat

NO.47 Changes to the information processing facilities shall be done in controlled manner.

True

False

NO.48 The computer room is protected by a pass reader. Only the System Management department has a pass.
What type of security measure is this?

a corrective security measure

a physical security measure

a logical security measure

a repressive security measure