Changing the Concept of ISO-IEC-27001-Lead-Auditor Exam Preparation 2022 [Q19-Q40]

Rate this post

Changing the Concept of ISO-IEC-27001-Lead-Auditor Exam Preparation 2022

Getting ISO-IEC-27001-Lead-Auditor Certification Made Easy! Get professional help from our ISO-IEC-27001-Lead-Auditor Dumps PDF

PECB ISO-IEC-27001-Lead-Auditor Exam Syllabus Topics:

Topic	Details
Topic 1	Interpret the ISO IEC 27001 requirements for an ISMS from the perspective of an auditor Information Security Management System (ISMS)
Topic 2	Plan, conduct, and close an ISO IEC 27001 compliance audit Manage an ISO IEC 27001 audit program
Topic 3	Evaluate the ISMS conformity to ISO IEC 27001 requirements, in accordance with the fundamental audit concepts and principles

NEW QUESTION 19
__________ is a software used or created by hackers to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

Trojan

Operating System

Virus

Malware

NEW QUESTION 20
All are prohibited in acceptable use of information assets, except:

Electronic chain letters

E-mail copies to non-essential readers

Company-wide e-mails with supervisor/TL permission.

Messages with very large attachments or to a large number ofrecipients.

NEW QUESTION 21
Phishing is what type of Information Security Incident?

Private Incidents

Cracker/Hacker Attacks

Technical Vulnerabilities

Legal Incidents

NEW QUESTION 22
The following are definitions of Information, except:

accurate and timely data

specific and organized data for a purpose

mature and measurable data

can lead to understanding and decrease in uncertainty

NEW QUESTION 23
Which measure is a preventive measure?

Installing a logging system that enables changes in a system to be recognized

Shutting down all internet traffic after a hacker has gained access to the company systems

Putting sensitive information in a safe

NEW QUESTION 24
Which is the glue that ties the triad together

Process

People

Collaboration

Technology

NEW QUESTION 25
You see a blue color sticker on certain physical assets. What does this signify?

The asset is very high critical and its failure affects the entire organization

The asset with blue stickers should be kept air conditioned at all times

The asset is high critical and its failure will affect a group/s/project’s work in the organization

The asset is critical and the impact is restricted to an employee only

NEW QUESTION 26
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.
What kind of threat is this?

Natural threat

Organizational threat

Social Engineering

Arason

NEW QUESTION 27
A decent visitor is roaming around without visitor’s ID. As an employee you should do the following, except:

Say “hi” and offer coffee

Call the receptionist and inform about the visitor

Greet and ask him what is his business

Escort him to his destination

NEW QUESTION 28
Does the security have the right to ask you to display your ID badges and check your bags?

True

False

NEW QUESTION 29
In the event of an Information security incident, system users’ roles and responsibilities are to be observed, except:

Report suspected or known incidents upon discovery through the Servicedesk

Preserve evidence if necessary

Cooperate with investigative personnel during investigation if needed

Make the information security incident details known to all employees

NEW QUESTION 30
A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company’s information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?

This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.

This analysis is based on scenarios and situations and produces a subjective view of the possible threats.

NEW QUESTION 31
What type of legislation requires a proper controlled purchase process?

Personal data protection act

Computer criminality act

Government information act

Intellectual property rights act

NEW QUESTION 32
Which is not a requirement of HR prior to hiring?

Undergo background verification

Applicant must complete pre-employment documentation requirements

Must undergo Awareness training on information security.

Must successfully pass Background Investigation

NEW QUESTION 33
What is a definition of compliance?

Laws, considered collectively or the process of making or enacting laws

The state or fact of according with or meeting rules or standards

An official or authoritative instruction

A rule or directive made and maintained by an authority.

NEW QUESTION 34
Integrity of data means

Accuracy and completeness of the data

Data should be viewable at all times

Data should be accessed by only the right people

NEW QUESTION 35
What is the worst possible action that an employee may receive for sharing his or her password or access with others?

Forced roll off from the project

The lowest rating on his or her performance assessment

Three days suspension from work

Termination

NEW QUESTION 36
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.

True

False

NEW QUESTION 37
A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?

Availability

Confidentiality

Integrity

Compliance

NEW QUESTION 38
The computer room is protected by a pass reader. Only the System Management department has a pass.
What type of security measure is this?

a corrective security measure

a physical security measure

a logical security measure

a repressive security measure

NEW QUESTION 39
What would be the reference for you to know who should have access to data/document?

Data Classification Label

Access Control List (ACL)

Masterlist of Project Records (MLPR)

Information Rights Management (IRM)

NEW QUESTION 40
Which of the following statements are correct for Clean Desk Policy?

Don’t leave confidential documents on your desk.

Don’t leave valuable items on your desk if you are not in your work area.