Instant Download ISO-IEC-27001-Lead-Implementer Dumps Q&As Provide PDF&Test Engine [Q18-Q37]

5/5 - (1 vote)

Instant Download ISO-IEC-27001-Lead-Implementer Dumps Q&As Provide PDF&Test Engine

Fast Exam Updates ISO-IEC-27001-Lead-Implementer dumps with PDF Test Engine Practice

NO.18 Which of the following measures is a preventive measure?

Installing a logging system that enables changes in a system to be recognized

Shutting down all internet traffic after a hacker has gained access to thecompany systems

Putting sensitive information in a safe

Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk

NO.19 What is an example of a good physical security measure?

All employees and visitors carry an access pass.

Printers that are defective or have been replacedare immediately removed and given away as garbage for recycling.

Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

NO.20 Which of these control objectives are NOT in the domain “12.OPERATIONAL SAFETY”?

Protection against malicious code

Redundancies

Test data

Technical vulnerability management

NO.21 Who is accountable to classify information assets?

the CEO

the CISO

the Information Security Team

theasset owner

NO.22 A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

If the riskanalysis has not been carried out.

When computer systems are kept in a cellar below ground level.

When the computer systems are not insured.

When the organization is located near a river.

NO.23 Which of the following measures is a correctivemeasure?

Incorporating an Intrusion Detection System (IDS) in the design of a computer center

Installing a virus scanner in an information system

Making a backup of the data that has been created or altered that day

Restoring a backup of the correct database after a corrupt copy of the database was written over the original

NO.24 Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization. What occurs during the first step of this process: identification?

Thefirst step consists of checking if the user is using the correct certificate.

The first step consists of checking if the user appears on the list of authorized users.

The first step consists of comparing the password with the registered password.

The first step consists of granting access to the information to which the user is authorized.

NO.25 What do employees need to know to report a security incident?

How to report an incident and to whom.

Whether the incident has occurred before and what was the resulting damage.

The measures that should have been taken to prevent the incident in the first place.

Who is responsible for the incident and whether it was intentional.

NO.26 What is the best description of a risk analysis?

A risk analysis is a method of mapping risks without looking at company processes.

A risk analysis helps to estimate the risks and develop the appropriate security measures.

A risk analysis calculates the exact financial consequences of damages.

NO.27 We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information?

Availability, Information Value and Confidentiality

Availability, Integrity and Confidentiality

Availability, Integrity and Completeness

Timeliness, Accuracy and Completeness

NO.28 What should be used to protect data on removable media ifdata confidentiality or integrity are important considerations?

backup on another removable medium

cryptographic techniques

a password

logging

NO.29 Why is compliance important forthe reliability of the information?

Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.

By meeting the legislative requirements and theregulations of both the government and internal management, an organization shows that it manages its information in a sound manner.

When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and thereforeit guarantees the reliability of its information.

When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.

NO.30 You have juststarted working at a large organization. You have been asked to sign a code of conduct as well as a contract. What does the organization wish to achieve with this?

A code of conduct helps to prevent the misuse of IT facilities.

A code of conduct is alegal obligation that organizations have to meet.

A code of conduct prevents a virus outbreak.

A code of conduct gives staff guidance on how to report suspected misuses of IT facilities.

NO.31 You are a consultant and areregularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don’t want the temporary workers to have access to your reports.
Which reliability aspect of the information in your reports must you protect?

Availability

Integrity

Confidentiality

NO.32 What is the greatest risk for an organization ifno information security policy has been defined?

If everyone works with the same account, it is impossible to find out who worked on what.

Information security activities are carried out by only a few people.

Too many measures areimplemented.

It is not possible for an organization to implement information security in a consistent manner.

NO.33 How many domains does ISO / IEC 27002: 2013 have?

140

110

114

NO.34 What is the most important reason for applying the segregation of duties?

Segregation of duties makes it clear who is responsible for what.

Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.

Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.

Segregation of duties makes it easier for a person who is readywith his or her part of the work to take time off or to take over the work of another person.

NO.35 Select risk control activities for domain “10. Encryption” of ISO / 27002: 2013 (Choose two)

Work in safe areas

Cryptographic Controls Use Policy

Physical security perimeter

Key management

NO.36 Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?

The recipient, Rachel

The person who drafted the insurance terms and conditions

The manager, Linda

The sender, Peter

NO.37 Companies use 27002 for compliance for which of the following reasons:

A structured program that helps with security and compliance

Explicit requirements for all regulations

Compliance with ISO 27002 is sufficient to comply with all regulations

Loading …

The ISO/IEC 27001 standard is an international standard that provides a framework for establishing, implementing, maintaining, and continually improving an information security management system. The standard helps organizations to protect their sensitive information and manage risks related to information security. The PECB ISO-IEC-27001-Lead-Implementer certification exam covers all the aspects of implementing and managing an ISMS based on the ISO/IEC 27001 standard.

PECB ISO-IEC-27001-Lead-Implementer Exam is an essential certification for individuals who are responsible for implementing and managing an ISMS based on the ISO/IEC 27001 standard. It provides individuals with the necessary knowledge and skills to lead an organization in protecting its sensitive information and is highly valued by organizations that prioritize information security.

Exam Valid Dumps with Instant Download Free Updates: https://www.actualcollection.com/ISO-IEC-27001-Lead-Implementer-exam-questions.html

Leave a comment Cancel reply