[Aug 25, 2021] Latest ISO-IEC-27001-Lead-Implementer Exam with Accurate PECB Certified ISO/IEC 27001 Lead Implementer exam PDF Questions
Practice To ISO-IEC-27001-Lead-Implementer - BraindumpsPrep Remarkable Practice On your PECB Certified ISO/IEC 27001 Lead Implementer exam Exam
NEW QUESTION 20
What do employees need to know to report a security incident?
- A. Whether the incident has occurred before and what was the resulting damage.
- B. Who is responsible for the incident and whether it was intentional.
- C. How to report an incident and to whom.
- D. The measures that should have been taken to prevent the incident in the first place.
Answer: C
NEW QUESTION 21
True or False: Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered
- A. True
- B. False
Answer: A
NEW QUESTION 22
What is an example of a good physical security measure?
- A. Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.
- B. Printers that are defective or have been replacedare immediately removed and given away as garbage for recycling.
- C. All employees and visitors carry an access pass.
Answer: C
NEW QUESTION 23
An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of theclients is earlier than the start date. What type of measure could prevent this error?
- A. Integrity measure
- B. Availability measure
- C. Technical measure
- D. Organizational measure
Answer: C
NEW QUESTION 24
What is the best way to comply with legislation and regulations for personal data protection?
- A. Maintaining an incident register
- B. Appointing the responsibility to someone
- C. Performing a vulnerability analysis
- D. Performing a threat analysis
Answer: B
NEW QUESTION 25
What is the best description of a risk analysis?
- A. A risk analysis calculates the exact financial consequences of damages.
- B. A risk analysis helps to estimate the risks and develop the appropriate security measures.
- C. A risk analysis is a method of mapping risks without looking at company processes.
Answer: B
NEW QUESTION 26
Which of the following measures is a correctivemeasure?
- A. Restoring a backup of the correct database after a corrupt copy of the database was written over the original
- B. Installing a virus scanner in an information system
- C. Incorporating an Intrusion Detection System (IDS) in the design of a computer center
- D. Making a backup of the data that has been created or altered that day
Answer: A
NEW QUESTION 27
What is the ISO / IEC 27002 standard?
- A. It is a guide of good practices that describes the controlobjectives and recommended controls regarding information security.
- B. It is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001
- C. It is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.
Answer: A
NEW QUESTION 28
Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?
- A. The person who drafted the insurance terms and conditions
- B. The manager, Linda
- C. The recipient, Rachel
- D. The sender, Peter
Answer: C
NEW QUESTION 29
What does the Information Security Policy describe?
- A. which InfoSec-controls have been selected and taken
- B. how the InfoSec-objectives will be reached
- C. which Information Security-procedures are selected
- D. what the implementation-planning of the information security management system is
Answer: B
NEW QUESTION 30
Prior to employment, _________ as well as terms & conditions of employment are included as controls in ISO
27002 to ensure that employees and contractors understand their responsibilities and are suitable for the roles for which they are considered.
- A. authorizing
- B. screening
- C. controlling
- D. flexing
Answer: B
NEW QUESTION 31
You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventoryof threats and risks.
What is the relation between a threat, risk and risk analysis?
- A. A riskanalysis is used to remove the risk of a threat.
- B. A risk analysis is used to clarify which threats are relevant and what risks they involve.
- C. A risk analysis identifies threats from the known risks.
- D. Risk analyses help to find a balance between threats and risks.
Answer: B
NEW QUESTION 32
You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?
- A. A code of conduct is a standard part of a labor contract.
- B. A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.
- C. A code ofconduct specifies how employees are expected to conduct themselves and is the same for all companies.
Answer: B
NEW QUESTION 33
Which of these reliability aspects is "completeness" a part of?
- A. Availability
- B. Integrity
- C. Exclusivity
- D. Confidentiality
Answer: B
NEW QUESTION 34
Which of the following measures is a preventive measure?
- A. Shutting down all internet traffic after a hacker has gained access to thecompany systems
- B. Putting sensitive information in a safe
- C. Installing a logging system that enables changes in a system to be recognized
- D. Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk
Answer: B
NEW QUESTION 35
Physical labels and ________ are two common forms of labeling which are mentioned in ISO 27002.
- A. metadata
- B. bridge
- C. teradata
Answer: A
NEW QUESTION 36
How many domains does ISO / IEC 27002: 2013 have?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 37
......
Exam Questions and Answers for ISO-IEC-27001-Lead-Implementer Study Guide Questions and Answers!: https://www.briandumpsprep.com/ISO-IEC-27001-Lead-Implementer-prep-exam-braindumps.html
Practice To ISO-IEC-27001-Lead-Implementer - BraindumpsPrep Remarkable Practice On your PECB Certified ISO/IEC 27001 Lead Implementer exam Exam: https://drive.google.com/open?id=1Ha3sSelb1Hk1hTbeVO3DnM5xgiCnzipv
