100% Free ISO-IEC-27001-Lead-Implementer Exam Dumps to Pass Exam Easily from Exam4Tests
Free ISO-IEC-27001-Lead-Implementer Exam Questions ISO-IEC-27001-Lead-Implementer Actual Free Exam Questions
NEW QUESTION # 30
You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventoryof threats and risks.
What is the relation between a threat, risk and risk analysis?
- A. A risk analysis is used to clarify which threats are relevant and what risks they involve.
- B. A risk analysis identifies threats from the known risks.
- C. Risk analyses help to find a balance between threats and risks.
- D. A riskanalysis is used to remove the risk of a threat.
Answer: A
NEW QUESTION # 31
Why is compliance important forthe reliability of the information?
- A. When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.
- B. Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.
- C. By meeting the legislative requirements and theregulations of both the government and internal management, an organization shows that it manages its information in a sound manner.
- D. When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and thereforeit guarantees the reliability of its information.
Answer: C
NEW QUESTION # 32
Which of the following measures is a preventive measure?
- A. Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk
- B. Installing a logging system that enables changes in a system to be recognized
- C. Shutting down all internet traffic after a hacker has gained access to thecompany systems
- D. Putting sensitive information in a safe
Answer: D
NEW QUESTION # 33
We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information?
- A. Timeliness, Accuracy and Completeness
- B. Availability, Integrity and Completeness
- C. Availability, Integrity and Confidentiality
- D. Availability, Information Value and Confidentiality
Answer: C
NEW QUESTION # 34
Which of these reliability aspects is "completeness" a part of?
- A. Confidentiality
- B. Exclusivity
- C. Integrity
- D. Availability
Answer: C
NEW QUESTION # 35
What is an example of a non-human threat to the physical environment?
- A. Fraudulent transaction
- B. Virus
- C. Corrupted file
- D. Storm
Answer: D
NEW QUESTION # 36
ISO 27002 provides guidance in the following area
- A. Detailed lists of required policies and procedures
- B. Framework for an overall security andcompliance program
- C. PCI environment scoping
- D. Information handling recommendations
Answer: B
NEW QUESTION # 37
A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?
- A. When the computer systems are not insured.
- B. When the organization is located near a river.
- C. When computer systems are kept in a cellar below ground level.
- D. If the riskanalysis has not been carried out.
Answer: C
NEW QUESTION # 38
What should be used to protect data on removable media ifdata confidentiality or integrity are important considerations?
- A. backup on another removable medium
- B. a password
- C. cryptographic techniques
- D. logging
Answer: C
NEW QUESTION # 39
What is the greatest risk for an organization ifno information security policy has been defined?
- A. It is not possible for an organization to implement information security in a consistent manner.
- B. Too many measures areimplemented.
- C. If everyone works with the same account, it is impossible to find out who worked on what.
- D. Information security activities are carried out by only a few people.
Answer: A
NEW QUESTION # 40
Select the controls that correspond to thedomain "9. ACCESS CONTROL" of ISO / 27002 (Choose three)
- A. Withdrawal or adaptation of access rights
- B. Restriction of access to information
- C. Management of access rights with special privileges
- D. Return of assets
Answer: A,B,D
NEW QUESTION # 41
You have juststarted working at a large organization. You have been asked to sign a code of conduct as well as a contract. What does the organization wish to achieve with this?
- A. A code of conduct gives staff guidance on how to report suspected misuses of IT facilities.
- B. A code of conduct is alegal obligation that organizations have to meet.
- C. A code of conduct helps to prevent the misuse of IT facilities.
- D. A code of conduct prevents a virus outbreak.
Answer: C
NEW QUESTION # 42
Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?
- A. The sender, Peter
- B. The person who drafted the insurance terms and conditions
- C. The manager, Linda
- D. The recipient, Rachel
Answer: D
NEW QUESTION # 43
You are a consultant and areregularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports.
Which reliability aspect of the information in your reports must you protect?
- A. Integrity
- B. Confidentiality
- C. Availability
Answer: B
NEW QUESTION # 44
Who is authorized to change the classification of a document?
- A. The administrator of the document
- B. The owner of the document
- C. The author of the document
- D. The manager of the owner of the document
Answer: B
NEW QUESTION # 45
What does the Information Security Policy describe?
- A. which InfoSec-controls have been selected and taken
- B. which Information Security-procedures are selected
- C. what the implementation-planning of the information security management system is
- D. how the InfoSec-objectives will be reached
Answer: D
NEW QUESTION # 46
Which of the following measures is a correctivemeasure?
- A. Restoring a backup of the correct database after a corrupt copy of the database was written over the original
- B. Making a backup of the data that has been created or altered that day
- C. Incorporating an Intrusion Detection System (IDS) in the design of a computer center
- D. Installing a virus scanner in an information system
Answer: A
NEW QUESTION # 47
In the context ofcontact with special interest groups, any information-sharing agreements should identify requirements for the protection of _________ information.
- A. Authentic
- B. Authorization
- C. Confidential
- D. Availability
Answer: C
NEW QUESTION # 48
Select risk control activities for domain "10. Encryption" of ISO / 27002: 2013 (Choose two)
- A. Physical security perimeter
- B. Work in safe areas
- C. Cryptographic Controls Use Policy
- D. Key management
Answer: C,D
NEW QUESTION # 49
How many domains does ISO / IEC 27002: 2013 have?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION # 50
......
Latest 100% Passing Guarantee - Brilliant ISO-IEC-27001-Lead-Implementer Exam Questions PDF: https://exam-labs.exam4tests.com/ISO-IEC-27001-Lead-Implementer-pdf-braindumps.html