Latest ISO-IEC-27001-Lead-Auditor Exam Real Tests Free Updated Today
ISO-IEC-27001-Lead-Auditor Real Exam Question Answers Updated [Aug 06, 2023]
NEW QUESTION # 48
What type of compliancy standard, regulation or legislation provides a code of practice for information security?
- A. IT Service Management
- B. Personal data protection act
- C. ISO/IEC 27002
- D. Computer criminality act
Answer: C
NEW QUESTION # 49
What is an example of a human threat?
- A. a lightning strike
- B. phishing
- C. fire
- D. thunderstrom
Answer: B
NEW QUESTION # 50
There is a scheduled fire drill in your facility. What should you do?
- A. Excuse yourself by saying you have an urgent deliverable
- B. Call in sick
- C. Participate in the drill
- D. None of the above
Answer: C
NEW QUESTION # 51
The following are definitions of Information, except:
- A. mature and measurable data
- B. specific and organized data for a purpose
- C. accurate and timely data
- D. can lead to understanding and decrease in uncertainty
Answer: A
NEW QUESTION # 52
Stages of Information
- A. creation, use, disposition, maintenance, evolution
- B. creation, distribution, use, maintenance, disposition
- C. creation, evolution, maintenance, use, disposition
- D. creation, distribution, maintenance, disposition, use
Answer: B
NEW QUESTION # 53
What is the standard definition of ISMS?
- A. A systematic approach for establishing, implementing, operating,monitoring, reviewing, maintaining and improving an organization's information security to achieve business objectives.
- B. A project-based approach to achieve business objectives for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organization's information security
- C. A company wide business objectives to achieve information security awareness for establishing, implementing, operating, monitoring, reviewing, maintaining and improving
- D. Is an information security systematic approach to achieve business objectives for implementation, establishing, reviewing,operating and maintaining organization's reputation.
Answer: A
NEW QUESTION # 54
Which of the following statements are correct for Clean Desk Policy?
- A. Don't leave valuable items on your desk if you are not in your work area.
- B. Don't leave confidential documents on your desk.
- C. Don't leave highly confidential items.
- D. Don't leave laptops without cable lock.
Answer: A,B,C
NEW QUESTION # 55
An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.
- A. False
- B. True
Answer: A
NEW QUESTION # 56
CEO sends a mail giving his views on the status of the company and the company's future strategy and the CEO's vision and the employee's part in it. The mail should be classified as
- A. Public Mail
- B. Restricted Mail
- C. Confidential Mail
- D. Internal Mail
Answer: D
NEW QUESTION # 57
Information or data that are classified as ______ do not require labeling.
- A. Highly Confidential
- B. Public
- C. Confidential
- D. Internal
Answer: B
NEW QUESTION # 58
A fire breaks out in a branch office of a health insurance company. The personnel are transferred to neighboring branches to continue their work.
Where in the incident cycle is moving to a stand-by arrangements found?
- A. between recovery and threat
- B. between threat and incident
- C. between incident and damage
- D. between damage and recovery
Answer: C
NEW QUESTION # 59
A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?
- A. Integrity
- B. Compliance
- C. Confidentiality
- D. Availability
Answer: C
NEW QUESTION # 60
Who is authorized to change the classification of a document?
- A. The manager of the owner of the document
- B. The author of the document
- C. The owner of the document
- D. The administrator of the document
Answer: C
NEW QUESTION # 61
Cabling Security is associated with Power, telecommunication and network cabling carrying information are protected from interception and damage.
- A. False
- B. True
Answer: B
NEW QUESTION # 62
What type of system ensures a coherent Information Security organisation?
- A. Information Security Management System (ISMS)
- B. Federal Information Security Management Act (FISMA)
- C. Information Technology Service Management System (ITSM)
- D. Information Exchange Data System (IEDS)
Answer: A
NEW QUESTION # 63
In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?
- A. The indispensability of data for the business processes.
- B. The content of data.
- C. The importance of the business processes that make use of the data.
- D. The degree to which missing, incomplete or incorrect data can be recovered.
Answer: B
NEW QUESTION # 64
Changes on project-managed applications or database should undergo the change control process as documented.
- A. False
- B. True
Answer: B
NEW QUESTION # 65
You are the lead auditor of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks.
What is this risk strategy called?
- A. Risk avoidance
- B. Risk neutral
- C. Risk skipping
- D. Risk bearing
Answer: D
NEW QUESTION # 66
We can leave laptops during weekdays or weekends in locked bins.
- A. False
- B. True
Answer: A
NEW QUESTION # 67
Which of the following is a technical security measure?
- A. Encryption
- B. Safe storage of backups
- C. Security policy
- D. User role profiles.
Answer: A
NEW QUESTION # 68
Does the security have the right to ask you to display your ID badges and check your bags?
- A. False
- B. True
Answer: B
NEW QUESTION # 69
A property of Information that has the ability to prove occurrence of a claimed event.
- A. Integrity
- B. Electronic chain letters
- C. Accessibility
- D. Availability
Answer: A
NEW QUESTION # 70
Four types of Data Classification (Choose two)
- A. Financial Data, Highly Confidential Data
- B. Restricted Data, Confidential Data
- C. Project Data, Highly Confidential Data
- D. Unrestricted Data, Highly Confidential Data
Answer: B,D
NEW QUESTION # 71
You receive an E-mail from some unknown person claiming to be representative of your bank and asking for your account number and password so that they can fix your account. Such an attempt of social engineering is called
- A. Phishing
- B. Mountaineering
- C. Shoulder Surfing
- D. Spoofing
Answer: A
NEW QUESTION # 72
What is the goal of classification of information?
- A. Structuring information according to its sensitivity
- B. Applying labels making the information easier to recognize
- C. To create a manual about how to handle mobile devices
Answer: A
NEW QUESTION # 73
......
To become a PECB Certified ISO/IEC 27001 Lead Auditor, individuals must demonstrate a deep understanding of the ISO/IEC 27001 standard, as well as the ability to plan, conduct, and report on an ISMS audit in accordance with ISO/IEC 19011 guidelines. ISO-IEC-27001-Lead-Auditor exam covers a wide range of topics, including information security management principles, risk management, audit techniques, and communication skills.
PECB ISO-IEC-27001-Lead-Auditor certification is recognized globally as a benchmark for professionals who want to demonstrate their competence in the field of information security management system auditing. PECB Certified ISO/IEC 27001 Lead Auditor exam certification provides tangible evidence of an individual's expertise and ability to effectively audit and assess the information security management system of an organization, ensuring that it complies with the requirements of the ISO 27001 standard. PECB Certified ISO/IEC 27001 Lead Auditor exam certification is also a valuable asset for professionals looking to advance their careers in the field of information security management, as it demonstrates their commitment to ongoing professional development and their dedication to maintaining the highest standards of excellence in their work.
Latest ISO-IEC-27001-Lead-Auditor Study Guides 2023 - With Test Engine PDF: https://www.passcollection.com/ISO-IEC-27001-Lead-Auditor_real-exams.html
Easily To Pass New PECB ISO-IEC-27001-Lead-Auditor Dumps with 99 Questions: https://drive.google.com/open?id=1fH3qGVB2in2_jNLxMsrwJOcJvsDLwmqc
