Best ISO-IEC-27001-Lead-Auditor Exam Dumps for the Preparation of Latest Exam Questions [Q53-Q72]

5/5 - (1 vote)

Best ISO-IEC-27001-Lead-Auditor Exam Dumps for the Preparation of Latest Exam Questions

ISO-IEC-27001-Lead-Auditor Actual Questions 100% Same Braindumps with Actual Exam!

PECB ISO-IEC-27001-Lead-Auditor Exam Syllabus Topics:

Topic	Details
Topic 1	Explain the fundamental concepts and principles of an information security management system (ISMS) based on ISO IEC 27001
Topic 2	Evaluate the ISMS conformity to ISO IEC 27001 requirements, in accordance with the fundamental audit concepts and principles
Topic 3	Fundamental audit concepts and principles Fundamental principles and concepts of Information Security Management System (ISMS)
Topic 4	Managing an ISO IEC 27001 audit program Preparation, Conducting, Closing of an ISO IEC 27001 audit
Topic 5	Plan, conduct, and close an ISO IEC 27001 compliance audit Manage an ISO IEC 27001 audit program

NEW QUESTION 53
What type of measure involves the stopping of possible consequences of security incidents?

Corrective

Detective

Repressive

Preventive

NEW QUESTION 54
What type of legislation requires a proper controlled purchase process?

Personal data protection act

Computer criminality act

Government information act

Intellectual property rights act

NEW QUESTION 55
What is the relationship between data and information?

Data is structured information.

Information is the meaning and value assigned to a collection of data.

NEW QUESTION 56
Which of the following is a possible event that can have a disruptive effect on the reliability of information?

Threat

Risk

Vulnerability

Dependency

NEW QUESTION 57
What is a definition of compliance?

Laws, considered collectively or the process of making or enacting laws

The state or fact of according with or meeting rules or standards

An official or authoritative instruction

A rule or directive made and maintained by an authority.

NEW QUESTION 58
Who is authorized to change the classification of a document?

The author of the document

The administrator of the document

The owner of the document

The manager of the owner of the document

NEW QUESTION 59
Does the security have the right to ask you to display your ID badges and check your bags?

True

False

NEW QUESTION 60
Information Security is a matter of building and maintaining ________ .

Confidentiality

Trust

Protection

Firewalls

NEW QUESTION 61
There is a scheduled fire drill in your facility. What should you do?

Participate in the drill

Excuse yourself by saying you have an urgent deliverable

Call in sick

None of the above

NEW QUESTION 62
As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

Appoint security staff

Encrypt all sensitive information

Formulate a policy

Set up an access control procedure

NEW QUESTION 63
Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

Social engineering threat

Organisational threat

Technical threat

Malware threat

NEW QUESTION 64
Access Control System, CCTV and security guards are form of:

Environment Security

Access Control

Physical Security

Compliance

NEW QUESTION 65
What is the purpose of an Information Security policy?

An information security policy makes the security plan concrete by providing the necessary details

An information security policy provides insight into threats and the possible consequences

An information security policy provides direction and support to the management regarding information security

An information security policy documents the analysis of risks and the search for countermeasures

NEW QUESTION 66
Which of the following factors does NOT contribute to the value of data for an organisation?

The correctness of data

The indispensability of data

The importance of data for processes

The content of data

NEW QUESTION 67
Information or data that are classified as ______ do not require labeling.

Public

Internal

Confidential

Highly Confidential

NEW QUESTION 68
CEO sends a mail giving his views on the status of the company and the company’s future strategy and the CEO’s vision and the employee’s part in it. The mail should be classified as

Internal Mail

Public Mail

Confidential Mail

Restricted Mail

NEW QUESTION 69
You have a hard copy of a customer design document that you want to dispose off. What would you do

Throw it in any dustbin

Shred it using a shredder

Give it to the office boy to reuse it for other purposes

Be environment friendly and reuse it for writing

NEW QUESTION 70
An administration office is going to determine the dangers to which it is exposed.
What do we call a possible event that can have a disruptive effect on the reliability of information?

dependency

threat

vulnerability

risk

NEW QUESTION 71
All are prohibited in acceptable use of information assets, except:

Electronic chain letters

E-mail copies to non-essential readers

Company-wide e-mails with supervisor/TL permission.

Messages with very large attachments or to a large number ofrecipients.

NEW QUESTION 72
In which order is an Information Security Management System set up?

Implementation, operation, maintenance, establishment

Implementation, operation, improvement, maintenance