Try Before You Buy

Download a free sample of any of our exam questions and answers

  • 24/7 customer support, Secure shopping site
  • Free One year updates to match real exam scenarios
  • If you failed your exam after buying our products we will refund the full amount back to you.

[Q59-Q77] Certification Training for ISO-IEC-27001-Lead-Auditor Exam Dumps Test Engine [2021]

Share

Certification Training for ISO-IEC-27001-Lead-Auditor Exam Dumps Test Engine [2021]

Sep 28, 2021 Step by Step Guide to Prepare for ISO-IEC-27001-Lead-Auditor Exam

NEW QUESTION 59
What would be the reference for you to know who should have access to data/document?

  • A. Access Control List (ACL)
  • B. Information Rights Management (IRM)
  • C. Masterlist of Project Records (MLPR)
  • D. Data Classification Label

Answer: A

 

NEW QUESTION 60
What is the relationship between data and information?

  • A. Data is structured information.
  • B. Information is the meaning and value assigned to a collection of data.

Answer: B

 

NEW QUESTION 61
In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:

  • A. Report suspected or known incidents upon discovery through the Servicedesk
  • B. Make the information security incident details known to all employees
  • C. Cooperate with investigative personnel during investigation if needed
  • D. Preserve evidence if necessary

Answer: B

 

NEW QUESTION 62
Cabling Security is associated with Power, telecommunication and network cabling carrying information are protected from interception and damage.

  • A. True
  • B. False

Answer: A

 

NEW QUESTION 63
-------------------------is an asset like other important business assets has value to an organization and consequently needs to be protected.

  • A. Infrastructure
  • B. Security
  • C. Information
  • D. Data

Answer: C

 

NEW QUESTION 64
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.
What kind of threat is this?

  • A. Organizational threat
  • B. Social Engineering
  • C. Arason
  • D. Natural threat

Answer: B

 

NEW QUESTION 65
What is the security management term for establishing whether someone's identity is correct?

  • A. Verification
  • B. Authorisation
  • C. Authentication
  • D. Identification

Answer: C

 

NEW QUESTION 66
What type of measure involves the stopping of possible consequences of security incidents?

  • A. Corrective
  • B. Repressive
  • C. Preventive
  • D. Detective

Answer: B

 

NEW QUESTION 67
Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?

  • A. Responsibility for the backups is not defined well
  • B. After a server crash, it will take extra time to bring it back up again
  • C. Unauthorised persons will have access to both the servers and backups
  • D. After a fire, the information systems cannot be restored

Answer: D

 

NEW QUESTION 68
A decent visitor is roaming around without visitor's ID. As an employee you should do the following, except:

  • A. Greet and ask him what is his business
  • B. Escort him to his destination
  • C. Say "hi" and offer coffee
  • D. Call the receptionist and inform about the visitor

Answer: C

 

NEW QUESTION 69
What is the standard definition of ISMS?

  • A. A company wide business objectives to achieve information security awareness for establishing, implementing, operating, monitoring, reviewing, maintaining and improving
  • B. Is an information security systematic approach to achieve business objectives for implementation, establishing, reviewing,operating and maintaining organization's reputation.
  • C. A systematic approach for establishing, implementing, operating,monitoring, reviewing, maintaining and improving an organization's information security to achieve business objectives.
  • D. A project-based approach to achieve business objectives for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organization's information security

Answer: C

 

NEW QUESTION 70
What is the purpose of an Information Security policy?

  • A. An information security policy provides direction and support to the management regarding information security
  • B. An information security policy provides insight into threats and the possible consequences
  • C. An information security policy makes the security plan concrete by providing the necessary details
  • D. An information security policy documents the analysis of risks and the search for countermeasures

Answer: A

 

NEW QUESTION 71
You have a hard copy of a customer design document that you want to dispose off. What would you do

  • A. Give it to the office boy to reuse it for other purposes
  • B. Throw it in any dustbin
  • C. Shred it using a shredder
  • D. Be environment friendly and reuse it for writing

Answer: C

 

NEW QUESTION 72
The following are the guidelines to protect your password, except:

  • A. Do not share passwords with anyone
  • B. Don't use the same password for various company system security access
  • C. Change a temporary password on first log-on
  • D. For easy recall, use the same password for company and personal accounts

Answer: A,D

 

NEW QUESTION 73
Below is Purpose of "Integrity", which is one of the Basic Components of Information Security

  • A. the property that information is not made available or disclosed to unauthorized individuals
  • B. the property of safeguarding the accuracy and completeness of assets.
  • C. the property of being accessible and usable upon demand by an authorized entity.
  • D. the property that information is not made available or disclosed to unauthorized individuals

Answer: B

 

NEW QUESTION 74
Information has a number of reliability aspects. Reliability is constantly being threatened. Examples of threats are: a cable becomes loose, someone alters information by accident, data is used privately or is falsified.
Which of these examples is a threat to integrity?

  • A. accidental alteration of data
  • B. private use of data
  • C. a loose cable
  • D. System restart

Answer: A

 

NEW QUESTION 75
The following are definitions of Information, except:

  • A. mature and measurable data
  • B. specific and organized data for a purpose
  • C. can lead to understanding and decrease in uncertainty
  • D. accurate and timely data

Answer: A

 

NEW QUESTION 76
Which department maintain's contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.

  • A. CSM
  • B. CISO
  • C. COO
  • D. MRO

Answer: B

 

NEW QUESTION 77
......

Ultimate Guide to Prepare ISO-IEC-27001-Lead-Auditor Certification Exam for ISO 27001: https://www.examstorrent.com/ISO-IEC-27001-Lead-Auditor-exam-dumps-torrent.html

ISO 27001 ISO-IEC-27001-Lead-Auditor Real Exam Questions and Answers FREE Updated: https://drive.google.com/open?id=1VvXEmuy6hDbxHuEWudTZHB1NG6kNkAPv