PECB ISO-27002-LI Online Practice Questions and Exam Preparation

PECB ISO-27002-LI Online Questions & Answers

• Question 1:

  What sort of security does a Public Key Infrastructure (PKI) offer?

  A. It provides digital certificates that can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent.
  B. Having a PKI shows customers that a web-based business is secure.
  C. By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.
  D. A PKI ensures that backups of company data are made on a regular basis.
  D. A PKI ensures that backups of company data are made on a regular basis.

• Question 2:

  Of the following, which is the best organization or set of organizations to contribute to compliance?

  A. IT only
  B. IT, business management, HR and legal
  C. IT and management
  D. IT and legal
  B. IT, business management, HR and legal

• Question 3:

  What do employees need to know to report a security incident?

  A. How to report an incident and to whom.
  B. Whether the incident has occurred before and what was the resulting damage.
  C. The measures that should have been taken to prevent the incident in the first place.
  D. Who is responsible for the incident and whether it was intentional.
  A. How to report an incident and to whom.

• Question 4:

  Responsibilities for information security in projects should be defined and allocated to:

  A. the project manager
  B. specified roles defined in the used project management method of the organization
  C. the InfoSec officer
  D. the owner of the involved asset
  B. specified roles defined in the used project management method of the organization

• Question 5:

  Susan sends an email to Paul. Who determines the meaning and the value of information in this email?

  A. Paul, the recipient of the information.
  B. Paul and Susan, the sender and the recipient of the information.
  C. Susan, the sender of the information.
  A. Paul, the recipient of the information.

• Question 6:

  Who is accountable to classify information assets?

  A. the CEO
  B. the CISO
  C. the Information Security Team
  D. the asset owner
  D. the asset owner

• Question 7:

  Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?

  A. The costs for automating are easier to charge to the responsible departments.
  B. A determination can be made as to which report should be printed first and which ones can wait a little longer.
  C. Everyone can easily see how sensitive the reports' contents are by consulting the grading label.
  D. Reports can be developed more easily and with fewer errors.
  C. Everyone can easily see how sensitive the reports' contents are by consulting the grading label.

• Question 8:

  Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?

  A. The recipient, Rachel
  B. The person who drafted the insurance terms and conditions
  C. The manager, Linda
  D. The sender, Peter
  A. The recipient, Rachel

• Question 9:

  Prior to employment, _________ as well as terms and conditions of employment are included as controls in ISO 27002 to ensure that employees and contractors understand their responsibilities and are suitable for the roles for which they are considered.

  A. screening
  B. authorizing
  C. controlling
  D. flexing
  A. screening

• Question 10:

  You are a consultant and are regularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers

  to have access to your reports.

  Which reliability aspect of the information in your reports must you protect?

  A. Availability
  B. Integrity
  C. Confidentiality
  C. Confidentiality