Verified ISO-IEC-27001-Lead-Auditor &As - Provide ISO-IEC-27001-Lead-Auditor with Correct Answers [Q17-Q38]

5/5 - (1 vote)

Verified ISO-IEC-27001-Lead-Auditor Exam Dumps Q&As – Provide ISO-IEC-27001-Lead-Auditor with Correct Answers

Pass Your ISO-IEC-27001-Lead-Auditor Dumps Free Latest PECB Practice Tests

QUESTION 17
Which of the following is a possible event that can have a disruptive effect on the reliability of information?

Threat

Risk

Vulnerability

Dependency

QUESTION 18
Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

Social engineering threat

Organisational threat

Technical threat

Malware threat

QUESTION 19
Who is authorized to change the classification of a document?

The author of the document

The administrator of the document

The owner of the document

The manager of the owner of the document

QUESTION 20
CEO sends a mail giving his views on the status of the company and the company’s future strategy and the CEO’s vision and the employee’s part in it. The mail should be classified as

Internal Mail

Public Mail

Confidential Mail

Restricted Mail

QUESTION 21
What is the standard definition of ISMS?

Is an information security systematic approach to achieve business objectives for implementation, establishing, reviewing,operating and maintaining organization’s reputation.

A company wide business objectives to achieve information security awareness for establishing, implementing, operating, monitoring, reviewing, maintaining and improving

A project-based approach to achieve business objectives for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organization’s information security

A systematic approach for establishing, implementing, operating,monitoring, reviewing, maintaining and improving an organization’s information security to achieve business objectives.

QUESTION 22
What would be the reference for you to know who should have access to data/document?

Data Classification Label

Access Control List (ACL)

Masterlist of Project Records (MLPR)

Information Rights Management (IRM)

QUESTION 23
You have a hard copy of a customer design document that you want to dispose off. What would you do

Throw it in any dustbin

Shred it using a shredder

Give it to the office boy to reuse it for other purposes

Be environment friendly and reuse it for writing

QUESTION 24
Often, people do not pick up their prints from a shared printer. How can this affect the confidentiality of information?

Confidentiality cannot be guaranteed

Integrity cannot be guaranteed

Authenticity cannot be guaranteed

Availability cannot be guaranteed

QUESTION 25
What controls can you do to protect sensitive data in your computer when you go out for lunch?

You activate your favorite screen-saver

You are confident to leave your computer screen as is since a password protected screensaver is installed and it is set to activate after 10 minutes of inactivity

You lock your computer by pressing Windows+L or CTRL-ALT-DELETE and then click “Lock Computer”.

You turn off the monitor

QUESTION 26
What is the worst possible action that an employee may receive for sharing his or her password or access with others?

Forced roll off from the project

The lowest rating on his or her performance assessment

Three days suspension from work

Termination

QUESTION 27
Changes to the information processing facilities shall be done in controlled manner.

True

False

QUESTION 28
In acceptable use of Information Assets, which is the best practice?

Access to information and communication systems are provided for business purpose only

Interfering with or denying service to any user other than the employee’s host

Playing any computer games during office hours

Accessing phone or network transmissions, including wireless or wifi transmissions

QUESTION 29
As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

Appoint security staff

Encrypt all sensitive information

Formulate a policy

Set up an access control procedure

QUESTION 30
How are data and information related?

Data is a collection of structured and unstructured information

Information consists of facts and statistics collected together for reference or analysis

When meaning and value are assigned to data, it becomes information

QUESTION 31
What is the name of the system that guarantees the coherence of information security in the organization?

Information Security Management System (ISMS)

Rootkit

Security regulations for special information for the government

Information Technology Service Management (ITSM)

QUESTION 32
Which of the following statements are correct for Clean Desk Policy?

Don’t leave confidential documents on your desk.

Don’t leave valuable items on your desk if you are not in your work area.

Don’t leave highly confidential items.

Don’t leave laptops without cable lock.

QUESTION 33
A fire breaks out in a branch office of a health insurance company. The personnel are transferred to neighboring branches to continue their work.
Where in the incident cycle is moving to a stand-by arrangements found?

between threat and incident

between recovery and threat

between damage and recovery

between incident and damage

QUESTION 34
What is social engineering?

A group planning for a social activity in the organization

Creating a situation wherein a third party gains confidential information from you

The organization planning an activity for welfare of the neighborhood

QUESTION 35
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.

True

False

QUESTION 36
A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?

Availability

Confidentiality

Integrity

Compliance

QUESTION 37
What is the goal of classification of information?

To create a manual about how to handle mobile devices

Applying labels making the information easier to recognize

Structuring information according to its sensitivity

QUESTION 38
Availability means

Service should be accessible at the required time and usable by all

Service should be accessible at the required time and usable only by the authorized entity

Service should not be accessible when required