ISO-IEC-27001 Lead Implementer PECB Practice Questions

dumps2022-01-06T06:34:34+08:00

PECB Certification ISO-IEC-27001 Lead Implementer practice questions are your best choice to take this test. Each candidate has 3 hours to finish the test. After you pass this ISO-IEC-27001 Lead Implementer exam, you can apply for a related certification. The online ISO-IEC-27001 Lead Implementer practice questions can help you save much time in preparing for the test. Free PECB ISO-IEC-27001 Lead Implementer exam practice questions are available below.

Page 1 of 2

1. Select risk control activities for domain "10. Encryption" of ISO / 27002: 2013 (Choose two)

Work in safe areas

Cryptographic Controls Use Policy

Physical security perimeter

Key management

2. What are the data protection principles set out in the GDPR?

Purpose limitation, proportionality, availability, data minimisation

Purpose limitation, proportionality, data minimisation, transparency

Target group, proportionality, transparency, data minimisation

Purpose limitation, pudicity, transparency, data minimisation

3. Susan sends an email to Paul. Who determines the meaning and the value of information in this email?

Paul, the recipient of the information.

Paul and Susan, the sender and the recipient of the information.

Susan, the sender of the information.

4. A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

If the risk analysis has not been carried out.

When computer systems are kept in a cellar below ground level.

When the computer systems are not insured.

When the organization is located near a river.

5. You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct.

What is a code of conduct?

A code of conduct specifies how employees are expected to conduct themselves and is the same for all companies.

A code of conduct is a standard part of a labor contract.

A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.

6. Which of the following measures is a preventive measure?

Installing a logging system that enables changes in a system to be recognized

Shutting down all internet traffic after a hacker has gained access to the company systems

Putting sensitive information in a safe

Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk

7. What should be used to protect data on removable media if data confidentiality or integrity are important considerations?

backup on another removable medium

cryptographic techniques

a password

logging

8. It is allowed that employees and contractors are provided with an anonymous reporting channel to report violations of information security policies or procedures (“whistle blowing”)

True

False

9. ISO 27002 provides guidance in the following area

PCI environment scoping

Information handling recommendations

Framework for an overall security and compliance program

Detailed lists of required policies and procedures

10. What is the greatest risk for an organization if no information security policy has been defined?

If everyone works with the same account, it is impossible to find out who worked on what.

Information security activities are carried out by only a few people.

Too many measures areimplemented.

It is not possible for an organization to implement information security in a consistent manner.

Page 2 of 2

11. You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of threats and risks.

What is the relation between a threat, risk and risk analysis?

A risk analysis identifies threats from the known risks.

A risk analysis is used to clarify which threats are relevant and what risks they involve.

A risk analysis is used to remove the risk of a threat.

Risk analyses help to find a balance between threats and risks.

12. Select the controls that correspond to the domain "9. ACCESS CONTROL" of ISO / 27002 (Choose three)

Restriction of access to information

Return of assets

Management of access rights with special privileges

Withdrawal or adaptation of access rights

13. Physical labels and ________ are two common forms of labeling which are mentioned in

ISO 27002.

metadata

teradata

bridge

14. Companies use 27002 for compliance for which of the following reasons:

A structured program that helps with security and compliance

Explicit requirements for all regulations

Compliance with ISO 27002 is sufficient to comply with all regulations

15. A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the company's staff.

Which kind of security measure could have prevented this?

physical security measure

An organizational security measure

A technical security measure

Comments (3)

Alain Noaga SEKONI June 30, 2022 Reply

12. Select the controls that correspond to the “9. ACCESS CONTROL” of ISO / 27002 (Choose three)
Restricting access to information
Return of assets
Manage access rights with special privileges
Withdraw or adjust access rights

I think that “Return of assets” is not included because “Return of assets” is related to the domain 8.1.4 Security related to human resources
- dumps July 1, 2022 Reply
  
  Thanks for your feedback.
Bright Homadi January 26, 2022 Reply

Understanding

ISO-IEC-27001 Lead Implementer PECB Practice Questions

ISO-IEC-27001 Lead Implementer PECB Practice Questions

Share this post

Comments (3)

Leave a Reply Cancel reply

Related Posts

ISO-IEC-27001 Lead Auditor PECB Certification Exam Guides