Get ISO-IEC-27001-Lead-Auditor Braindumps & ISO-IEC-27001-Lead-Auditor Real Exam Questions
PECB ISO-IEC-27001-Lead-Auditor Actual Questions and Braindumps
NEW QUESTION 46
Which of the following is a preventive security measure?
- A. Shutting down the Internet connection after an attack
- B. Storing sensitive information in a data save
- C. Installing logging and monitoring software
Answer: B
NEW QUESTION 47
What controls can you do to protect sensitive data in your computer when you go out for lunch?
- A. You are confident to leave your computer screen as is since a password protected screensaver is installed and it is set to activate after 10 minutes of inactivity
- B. You activate your favorite screen-saver
- C. You lock your computer by pressing Windows+L or CTRL-ALT-DELETE and then click "Lock Computer".
- D. You turn off the monitor
Answer: C
NEW QUESTION 48
Access Control System, CCTV and security guards are form of:
- A. Access Control
- B. Physical Security
- C. Environment Security
- D. Compliance
Answer: B
NEW QUESTION 49
In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?
- A. The content of data.
- B. The importance of the business processes that make use of the data.
- C. The indispensability of data for the business processes.
- D. The degree to which missing, incomplete or incorrect data can be recovered.
Answer: A
NEW QUESTION 50
In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:
- A. Make the information security incident details known to all employees
- B. Report suspected or known incidents upon discovery through the Servicedesk
- C. Cooperate with investigative personnel during investigation if needed
- D. Preserve evidence if necessary
Answer: A
NEW QUESTION 51
Which reliability aspect of information is compromised when a staff member denies having sent a message?
- A. Integrity
- B. Confidentiality
- C. Correctness
- D. Availability
Answer: A
NEW QUESTION 52
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.
- A. True
- B. False
Answer: A
NEW QUESTION 53
Often, people do not pick up their prints from a shared printer. How can this affect the confidentiality of information?
- A. Integrity cannot be guaranteed
- B. Availability cannot be guaranteed
- C. Authenticity cannot be guaranteed
- D. Confidentiality cannot be guaranteed
Answer: D
NEW QUESTION 54
Information Security is a matter of building and maintaining ________ .
- A. Confidentiality
- B. Protection
- C. Trust
- D. Firewalls
Answer: C
NEW QUESTION 55
CMM stands for?
- A. Capacity Maturity Matrix
- B. Capability Maturity Matrix
- C. Capable Mature Model
- D. Capability Maturity Model
Answer: D
NEW QUESTION 56
What type of legislation requires a proper controlled purchase process?
- A. Personal data protection act
- B. Government information act
- C. Computer criminality act
- D. Intellectual property rights act
Answer: D
NEW QUESTION 57
Which of the following is a technical security measure?
- A. User role profiles.
- B. Security policy
- C. Encryption
- D. Safe storage of backups
Answer: C
NEW QUESTION 58
What is the purpose of an Information Security policy?
- A. An information security policy provides insight into threats and the possible consequences
- B. An information security policy provides direction and support to the management regarding information security
- C. An information security policy documents the analysis of risks and the search for countermeasures
- D. An information security policy makes the security plan concrete by providing the necessary details
Answer: B
NEW QUESTION 59
What is social engineering?
- A. Creating a situation wherein a third party gains confidential information from you
- B. A group planning for a social activity in the organization
- C. The organization planning an activity for welfare of the neighborhood
Answer: A
NEW QUESTION 60
Which of the following does an Asset Register contain? (Choose two)
- A. Asset Type
- B. Asset Modifier
- C. Process ID
- D. Asset Owner
Answer: A,D
NEW QUESTION 61
A hacker gains access to a web server and reads the credit card numbers stored on that server. Which security principle is violated?
- A. Authenticity
- B. Confidentiality
- C. Integrity
- D. Availability
Answer: B
NEW QUESTION 62
All are prohibited in acceptable use of information assets, except:
- A. Messages with very large attachments or to a large number ofrecipients.
- B. E-mail copies to non-essential readers
- C. Electronic chain letters
- D. Company-wide e-mails with supervisor/TL permission.
Answer: D
NEW QUESTION 63
A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?
- A. Confidentiality
- B. Compliance
- C. Integrity
- D. Availability
Answer: A
NEW QUESTION 64
A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company's information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?
- A. This analysis is based on scenarios and situations and produces a subjective view of the possible threats.
- B. This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.
Answer: A
NEW QUESTION 65
......
ISO-IEC-27001-Lead-Auditor Dumps To Pass PECB Exam in 24 Hours - ITexamReview: https://examkiller.itexamreview.com/ISO-IEC-27001-Lead-Auditor-valid-exam-braindumps.html
