[Full-Version] 2023 New Preparation Guide of PECB ISO-IEC-27001-Lead-Auditor Exam
ISO-IEC-27001-Lead-Auditor Practice Exam - 99 Unique Questions
The exam consists of a written exam and a practical exam. The written exam covers the theoretical aspects of information security management and auditing, while the practical exam evaluates an individual's ability to apply the concepts learned in a real-world scenario. The exam is challenging, and individuals are expected to have a solid understanding of information security management principles, risk management, and the auditing process.
The PECB ISO-IEC-27001-Lead-Auditor exam is a rigorous and comprehensive assessment of a candidate's knowledge and skills in leading an ISMS audit team and conducting an audit according to the requirements of ISO/IEC 27001:2013 standard. It is a valuable certification for professionals who wish to advance their careers in information security management and auditing and demonstrate their expertise in the field.
The PECB ISO-IEC-27001-Lead-Auditor certification exam is an internationally recognized exam that focuses on the auditing and management of information security systems. This certification is intended for professionals who are interested in auditing and assessing an organization's information security management system (ISMS) against the ISO/IEC 27001 standard.
NEW QUESTION # 21
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.
What kind of threat is this?
- A. Arason
- B. Organizational threat
- C. Natural threat
- D. Social Engineering
Answer: D
NEW QUESTION # 22
A scenario wherein the city or location where the building(s) reside is / are not accessible.
- A. Country
- B. Facility
- C. Component
- D. City
Answer: D
NEW QUESTION # 23
In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?
- A. The degree to which missing, incomplete or incorrect data can be recovered.
- B. The importance of the business processes that make use of the data.
- C. The content of data.
- D. The indispensability of data for the business processes.
Answer: C
NEW QUESTION # 24
What type of legislation requires a proper controlled purchase process?
- A. Government information act
- B. Personal data protection act
- C. Intellectual property rights act
- D. Computer criminality act
Answer: C
NEW QUESTION # 25
What is a reason for the classification of information?
- A. To structure the information according to its sensitivity
- B. Creating a manual describing the BYOD policy
- C. To provide clear identification tags
Answer: A
NEW QUESTION # 26
There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good.
What is an example of the indirect damage caused by this fire?
- A. Water damage due to the fire extinguishers
- B. Burned computer systems
- C. Melted backup tapes
- D. Burned documents
Answer: A
NEW QUESTION # 27
Which of the following is a technical security measure?
- A. User role profiles.
- B. Security policy
- C. Safe storage of backups
- D. Encryption
Answer: D
NEW QUESTION # 28
Information has a number of reliability aspects. Reliability is constantly being threatened. Examples of threats are: a cable becomes loose, someone alters information by accident, data is used privately or is falsified.
Which of these examples is a threat to integrity?
- A. accidental alteration of data
- B. a loose cable
- C. private use of data
- D. System restart
Answer: A
NEW QUESTION # 29
Which department maintain's contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.
- A. COO
- B. MRO
- C. CSM
- D. CISO
Answer: D
NEW QUESTION # 30
What is the purpose of an Information Security policy?
- A. An information security policy provides insight into threats and the possible consequences
- B. An information security policy makes the security plan concrete by providing the necessary details
- C. An information security policy documents the analysis of risks and the search for countermeasures
- D. An information security policy provides direction and support to the management regarding information security
Answer: D
NEW QUESTION # 31
How is the purpose of information security policy best described?
- A. An information security policy documents the analysis of risks and the search for countermeasures.
- B. An information security policy provides direction and support to the management regarding information security.
- C. An information security policy provides insight into threats and the possible consequences.
- D. An information security policy makes the security plan concrete by providing it with the necessary details.
Answer: B
NEW QUESTION # 32
Integrity of data means
- A. Accuracy and completeness of the data
- B. Data should be accessed by only the right people
- C. Data should be viewable at all times
Answer: A
NEW QUESTION # 33
__________ is a software used or created by hackers to disrupt computer operation, gather sensitive information, or gain access to private computer systems.
- A. Malware
- B. Virus
- C. Trojan
- D. Operating System
Answer: A
NEW QUESTION # 34
A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company's information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?
- A. This analysis is based on scenarios and situations and produces a subjective view of the possible threats.
- B. This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.
Answer: A
NEW QUESTION # 35
A decent visitor is roaming around without visitor's ID. As an employee you should do the following, except:
- A. Escort him to his destination
- B. Call the receptionist and inform about the visitor
- C. Say "hi" and offer coffee
- D. Greet and ask him what is his business
Answer: C
NEW QUESTION # 36
You have a hard copy of a customer design document that you want to dispose off. What would you do
- A. Give it to the office boy to reuse it for other purposes
- B. Shred it using a shredder
- C. Throw it in any dustbin
- D. Be environment friendly and reuse it for writing
Answer: B
NEW QUESTION # 37
In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:
- A. Cooperate with investigative personnel during investigation if needed
- B. Report suspected or known incidents upon discovery through the Servicedesk
- C. Make the information security incident details known to all employees
- D. Preserve evidence if necessary
Answer: C
NEW QUESTION # 38
A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:
- A. plan, do, check, act.
- B. RACI Matrix
- C. time based planning.
- D. planning for continuous improvement.
Answer: A
NEW QUESTION # 39
A hacker gains access to a web server and reads the credit card numbers stored on that server. Which security principle is violated?
- A. Authenticity
- B. Integrity
- C. Confidentiality
- D. Availability
Answer: C
NEW QUESTION # 40
The following are definitions of Information, except:
- A. can lead to understanding and decrease in uncertainty
- B. mature and measurable data
- C. accurate and timely data
- D. specific and organized data for a purpose
Answer: B
NEW QUESTION # 41
......
Latest Questions ISO-IEC-27001-Lead-Auditor Guide to Prepare Free Practice Tests: https://www.dumpsvalid.com/ISO-IEC-27001-Lead-Auditor-still-valid-exam.html
Reliable ISO-IEC-27001-Lead-Auditor Dumps Questions Available as Web-Based Practice Test Engine: https://drive.google.com/open?id=1kMR2inxfL1hZ1LxjpVWoZIOmdx7MKG36