PECB Certified ISOIEC 27001 Lead Implementer ISO-IEC-27001 Lead Implementer Exam Questions

1. ISO-IEC-27001 Lead Implementer ISO-IEC-27001 Lead Implementer Free Questions Free Questions PECB Certified ISO/IEC 27001 PECB Certified ISO/IEC 27001 Lead Implementer exam Lead Implementer exam https://www.passquestion.com/ISO-IEC-27001-Lead-Implementer.html https://www.passquestion.com/ISO-IEC-27001-Lead-Implementer.html

2. Question 1 Question 1 Organizations allowing teleworking activities, the physical security of the building and the Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered local environment of the teleworking site should be considered A. True A. True B. False B. False Answer: A Answer: A

3. Question 2 Question 2 It is allowed that employees and contractors are provided with an anonymous reporting It is allowed that employees and contractors are provided with an anonymous reporting channel to report violations of information security policies or procedures (“whistle channel to report violations of information security policies or procedures (“whistle blowing”) blowing”) A. True A. True B. False B. False Answer: A Answer: A

4. Question 3 Question 3 Which is a legislative or regulatory act related to information security that can be Which is a legislative or regulatory act related to information security that can be imposed upon all organizations? imposed upon all organizations? A. ISO/IEC 27001:2005 A. ISO/IEC 27001:2005 B. Intellectual Property Rights B. Intellectual Property Rights C. ISO/IEC 27002:2005 C. ISO/IEC 27002:2005 D. Personal data protection legislation D. Personal data protection legislation Answer: D Answer: D

5. Question 4 Question 4 Which of these reliability aspects is "completeness" a part of? Which of these reliability aspects is "completeness" a part of? A. Availability A. Availability B. Exclusivity B. Exclusivity C. Integrity C. Integrity D. Confidentiality D. Confidentiality Answer: C Answer: C

6. Question 5 Question 5 ISO 27002 provides guidance in the following area ISO 27002 provides guidance in the following area A. PCI environment scoping A. PCI environment scoping B. Information handling recommendations B. Information handling recommendations C. Framework for an overall security and compliance program C. Framework for an overall security and compliance program D. Detailed lists of required policies and procedures D. Detailed lists of required policies and procedures Answer: C Answer: C

7. Question 6 Question 6 What do employees need to know to report a security incident? What do employees need to know to report a security incident? A. How to report an incident and to whom. A. How to report an incident and to whom. B. Whether the incident has occurred before and what was the resulting damage. B. Whether the incident has occurred before and what was the resulting damage. C. The measures that should have been taken to prevent the incident in the first place. C. The measures that should have been taken to prevent the incident in the first place. D. Who is responsible for the incident and whether it was intentional. D. Who is responsible for the incident and whether it was intentional. Answer: A Answer: A

8. Question 7 Question 7 What is an example of a good physical security measure? What is an example of a good physical security measure? A. All employees and visitors carry an access pass. A. All employees and visitors carry an access pass. B. Printers that are defective or have been replacedare immediately removed and B. Printers that are defective or have been replacedare immediately removed and given away as garbage for recycling. given away as garbage for recycling. C. Maintenance staff can be given quick and unimpeded access to the server area C. Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster. in the event of disaster. Answer: A Answer: A

9. Question 8 Question 8 What is the greatest risk for an organization if no information security policy has been defined? What is the greatest risk for an organization if no information security policy has been defined? A. If everyone works with the same account, it is impossible to find out who worked on what. A. If everyone works with the same account, it is impossible to find out who worked on what. B. Information security activities are carried out by only a few people. B. Information security activities are carried out by only a few people. C. Too many measures areimplemented. C. Too many measures areimplemented. D. It is not possible for an organization to implement information security in a consistent manner. D. It is not possible for an organization to implement information security in a consistent manner. Answer: D Answer: D

10. Question 9 Question 9 Midwest Insurance grades the monthly report of all claimed losses per insured as Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. confidential. What is accomplished if all other reports from this insurance office are also What is accomplished if all other reports from this insurance office are also assigned the appropriate grading? assigned the appropriate grading? A. The costs for automating are easier to charge to the responsible departments. A. The costs for automating are easier to charge to the responsible departments. B. A determination can be made as to which report should be printed first and B. A determination can be made as to which report should be printed first and which ones can wait a little longer. which ones can wait a little longer. C. Everyone can easily see how sensitive the reports' contents are by consulting C. Everyone can easily see how sensitive the reports' contents are by consulting the grading label. the grading label. D. Reports can be developed more easily and with fewer errors. D. Reports can be developed more easily and with fewer errors. Answer: C Answer: C

11. Question 10 Question 10 What is the ISO / IEC 27002 standard? What is the ISO / IEC 27002 standard? A. It is a guide of good practices that describes the control objectives and recommended controls A. It is a guide of good practices that describes the control objectives and recommended controls regarding information security. regarding information security. B. It is a guide that focuses on the critical aspects necessary for the successful design and B. It is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001 implementation of an ISMS in accordance with ISO / IEC 27001 C. It is a guide for the development and use of applicable metrics and measurement techniques to C. It is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001. according to ISO / IEC 27001. Answer: A Answer: A