[Sep-2021] Pass PECB ISO-IEC-27001-Lead-Auditor Exam in First Attempt Guaranteed!
Full ISO-IEC-27001-Lead-Auditor Practice Test and 99 unique questions with explanations waiting just for you, get it now!
NEW QUESTION 33
Information Security is a matter of building and maintaining ________ .
- A. Trust
- B. Firewalls
- C. Protection
- D. Confidentiality
Answer: A
NEW QUESTION 34
A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?
- A. Identifying assets and their value
- B. Determining relevant vulnerabilities and threats
- C. Establishing a balance between the costs of an incident and the costs of a security measure
- D. Implementing counter measures
Answer: D
NEW QUESTION 35
What type of compliancy standard, regulation or legislation provides a code of practice for information security?
- A. ISO/IEC 27002
- B. Computer criminality act
- C. Personal data protection act
- D. IT Service Management
Answer: A
NEW QUESTION 36
A decent visitor is roaming around without visitor's ID. As an employee you should do the following, except:
- A. Greet and ask him what is his business
- B. Escort him to his destination
- C. Say "hi" and offer coffee
- D. Call the receptionist and inform about the visitor
Answer: C
NEW QUESTION 37
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.
- A. True
- B. False
Answer: A
NEW QUESTION 38
In what part of the process to grant access to a system does the user present a token?
- A. Verification
- B. Authorisation
- C. Authentication
- D. Identification
Answer: D
NEW QUESTION 39
There is a network printer in the hallway of the company where you work. Many employees don't pick up their printouts immediately and leave them on the printer.
What are the consequences of this to the reliability of the information?
- A. The confidentiality of the information is no longer guaranteed.
- B. The Security of the information is no longer guaranteed.
- C. The availability of the information is no longer guaranteed.
- D. The integrity of the information is no longer guaranteed.
Answer: C
NEW QUESTION 40
All are prohibited in acceptable use of information assets, except:
- A. Messages with very large attachments or to a large number ofrecipients.
- B. Company-wide e-mails with supervisor/TL permission.
- C. E-mail copies to non-essential readers
- D. Electronic chain letters
Answer: B
NEW QUESTION 41
Availability means
- A. Service should not be accessible when required
- B. Service should be accessible at the required time and usable by all
- C. Service should be accessible at the required time and usable only by the authorized entity
Answer: C
NEW QUESTION 42
Which of the following is not a type of Information Security attack?
- A. Legal Incidents
- B. Vehicular Incidents
- C. Technical Vulnerabilities
- D. Privacy Incidents
Answer: B
NEW QUESTION 43
There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good.
What is an example of the indirect damage caused by this fire?
- A. Water damage due to the fire extinguishers
- B. Melted backup tapes
- C. Burned documents
- D. Burned computer systems
Answer: A
NEW QUESTION 44
An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.
- A. False
- B. True
Answer: A
NEW QUESTION 45
What is the standard definition of ISMS?
- A. A company wide business objectives to achieve information security awareness for establishing, implementing, operating, monitoring, reviewing, maintaining and improving
- B. Is an information security systematic approach to achieve business objectives for implementation, establishing, reviewing,operating and maintaining organization's reputation.
- C. A systematic approach for establishing, implementing, operating,monitoring, reviewing, maintaining and improving an organization's information security to achieve business objectives.
- D. A project-based approach to achieve business objectives for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organization's information security
Answer: C
NEW QUESTION 46
The following are definitions of Information, except:
- A. mature and measurable data
- B. specific and organized data for a purpose
- C. can lead to understanding and decrease in uncertainty
- D. accurate and timely data
Answer: A
NEW QUESTION 47
After a fire has occurred, what repressive measure can be taken?
- A. Extinguishing the fire after the fire alarm sounds
- B. Buying in a proper fire insurance policy
- C. Repairing all systems after the fire
Answer: A
NEW QUESTION 48
Which of the following is a possible event that can have a disruptive effect on the reliability of information?
- A. Risk
- B. Threat
- C. Dependency
- D. Vulnerability
Answer: B
NEW QUESTION 49
......
Prepare for your PECB certification with the updated BraindumpQuiz ISO-IEC-27001-Lead-Auditor exam questions: https://drive.google.com/open?id=1DYarUHhyCPJaUoq6uKhNPKGewB09jBUP
Get Latest ISO-IEC-27001-Lead-Auditor Dumps Exam Questions in here: https://www.braindumpquiz.com/ISO-IEC-27001-Lead-Auditor-exam-material.html