Latest ISO-IEC-27001-Lead-Auditor Exam Dumps PECB Exam from Training Expert Free4Torrent
Pass PECB PECB Certified ISO/IEC 27001 Lead Auditor exam PDF Dumps | Recently Updated 99 Questions
NEW QUESTION 21
In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:
- A. Make the information security incident details known to all employees
- B. Report suspected or known incidents upon discovery through the Servicedesk
- C. Cooperate with investigative personnel during investigation if needed
- D. Preserve evidence if necessary
Answer: A
NEW QUESTION 22
What is the goal of classification of information?
- A. Structuring information according to its sensitivity
- B. Applying labels making the information easier to recognize
- C. To create a manual about how to handle mobile devices
Answer: A
NEW QUESTION 23
Which of the following factors does NOT contribute to the value of data for an organisation?
- A. The importance of data for processes
- B. The content of data
- C. The correctness of data
- D. The indispensability of data
Answer: B
NEW QUESTION 24
A decent visitor is roaming around without visitor's ID. As an employee you should do the following, except:
- A. Greet and ask him what is his business
- B. Say "hi" and offer coffee
- C. Escort him to his destination
- D. Call the receptionist and inform about the visitor
Answer: B
NEW QUESTION 25
Who are allowed to access highly confidential files?
- A. Non-employees designated with approved access and have signed NDA
- B. Employees with a business need-to-know
- C. Employees with signed NDA have a business need-to-know
- D. Contractors with a business need-to-know
Answer: C
NEW QUESTION 26
Below is Purpose of "Integrity", which is one of the Basic Components of Information Security
- A. the property of safeguarding the accuracy and completeness of assets.
- B. the property that information is not made available or disclosed to unauthorized individuals
- C. the property that information is not made available or disclosed to unauthorized individuals
- D. the property of being accessible and usable upon demand by an authorized entity.
Answer: A
NEW QUESTION 27
In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?
- A. The importance of the business processes that make use of the data.
- B. The indispensability of data for the business processes.
- C. The degree to which missing, incomplete or incorrect data can be recovered.
- D. The content of data.
Answer: D
NEW QUESTION 28
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.
What kind of threat is this?
- A. Social Engineering
- B. Arason
- C. Natural threat
- D. Organizational threat
Answer: A
NEW QUESTION 29
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.
- A. False
- B. True
Answer: B
NEW QUESTION 30
After a devastating office fire, all staff are moved to other branches of the company. At what moment in the incident management process is this measure effectuated?
- A. Between classification and escalation
- B. Between recovery and normal operations
- C. Between detection and classification
- D. Between incident and damage
Answer: D
NEW QUESTION 31
Phishing is what type of Information Security Incident?
- A. Private Incidents
- B. Legal Incidents
- C. Cracker/Hacker Attacks
- D. Technical Vulnerabilities
Answer: C
NEW QUESTION 32
In which order is an Information Security Management System set up?
- A. Establishment, implementation, operation, maintenance
- B. Establishment, operation, monitoring, improvement
- C. Implementation, operation, improvement, maintenance
- D. Implementation, operation, maintenance, establishment
Answer: A
NEW QUESTION 33
Changes on project-managed applications or database should undergo the change control process as documented.
- A. False
- B. True
Answer: B
NEW QUESTION 34
What type of legislation requires a proper controlled purchase process?
- A. Government information act
- B. Intellectual property rights act
- C. Personal data protection act
- D. Computer criminality act
Answer: B
NEW QUESTION 35
What is the relationship between data and information?
- A. Information is the meaning and value assigned to a collection of data.
- B. Data is structured information.
Answer: A
NEW QUESTION 36
Implement plan on a test basis - this comes under which section of PDCA
- A. Act
- B. Do
- C. Plan
- D. Check
Answer: B
NEW QUESTION 37
Which of the following statements are correct for Clean Desk Policy?
- A. Don't leave valuable items on your desk if you are not in your work area.
- B. Don't leave laptops without cable lock.
- C. Don't leave highly confidential items.
- D. Don't leave confidential documents on your desk.
Answer: A,C,D
NEW QUESTION 38
You receive an E-mail from some unknown person claiming to be representative of your bank and asking for your account number and password so that they can fix your account. Such an attempt of social engineering is called
- A. Phishing
- B. Spoofing
- C. Shoulder Surfing
- D. Mountaineering
Answer: A
NEW QUESTION 39
Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?
- A. Unauthorised persons will have access to both the servers and backups
- B. Responsibility for the backups is not defined well
- C. After a server crash, it will take extra time to bring it back up again
- D. After a fire, the information systems cannot be restored
Answer: D
NEW QUESTION 40
All are prohibited in acceptable use of information assets, except:
- A. Messages with very large attachments or to a large number ofrecipients.
- B. Company-wide e-mails with supervisor/TL permission.
- C. E-mail copies to non-essential readers
- D. Electronic chain letters
Answer: B
NEW QUESTION 41
Which department maintain's contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.
- A. MRO
- B. CSM
- C. CISO
- D. COO
Answer: C
NEW QUESTION 42
You receive the following mail from the IT support team: Dear User,Starting next week, we will be deleting all inactive email accounts in order to create spaceshare the below details in order to continue using your account. In case of no response, Name:
Email ID:
Password:
DOB:
Kindly contact the webmail team for any further support. Thanks for your attention.
Which of the following is the best response?
- A. One should not respond to these mails and report such email to your supervisor
- B. Respond it by saying that one should not share the password with anyone
- C. Ignore the email
Answer: A
NEW QUESTION 43
What is a repressive measure in case of a fire?
- A. Putting out a fire after it has been detected by a fire detector
- B. Repairing damage caused by the fire
- C. Taking out a fire insurance
Answer: A
NEW QUESTION 44
After a fire has occurred, what repressive measure can be taken?
- A. Buying in a proper fire insurance policy
- B. Repairing all systems after the fire
- C. Extinguishing the fire after the fire alarm sounds
Answer: C
NEW QUESTION 45
Who is authorized to change the classification of a document?
- A. The owner of the document
- B. The manager of the owner of the document
- C. The author of the document
- D. The administrator of the document
Answer: A
NEW QUESTION 46
......
Updated Test Engine to Practice ISO-IEC-27001-Lead-Auditor Dumps & Practice Exam: https://www.free4torrent.com/ISO-IEC-27001-Lead-Auditor-braindumps-torrent.html
Dumps Collection ISO-IEC-27001-Lead-Auditor Test Engine Dumps Training With 99 Questions: https://drive.google.com/open?id=1nhcc4QSS_spph2uLaCmQchqCCInTpV6_